3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r8 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:06 executing program 1: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80202) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000040)=""/4, 0x4) 15:45:06 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000003c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) fcntl$getflags(r0, 0x40a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000008c0)={@remote, 0x7c}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) fadvise64(r1, 0x0, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x800, @local}, 0x10) ftruncate(r2, 0x800) getsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 15:45:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xc31) sendmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="583614fefccf4e645a1e196bc41995565347a5ab8fc2f6b38d2078e203e557334bbd07a92ce54222c251ae772905dc8b434ae2a065", 0x35}], 0x1}}], 0x1, 0x24004000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000010c0)={'veth1_to_hsr\x00', 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x40000000890b, &(0x7f00000000c0)={'ifb0\x02\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) add_key$user(0x0, &(0x7f0000001100)={'syz', 0x1}, &(0x7f0000001140)="eb46d0b431348cb010042479f2d9061da6eb0567075c4132971ae2a64ceb8d0aea4b0620c432825e687d3be005ce3f1692ed7122d20e84e948641c62c480dd50ac5a843e915a323d86631aea6a634aceff0c751cb458ace24e15890ec5675db361857055c2f835d731462301b2885a545da1b47d6b63ae3202f50a32602d200a1c81c415a39e78cc671e9066dc7c8a04e9fccfb1a7a332a306f3fb43615b90d6db3a21cb5e2b79c5565b78f6f236c511f771e4fe5ffc5127a74aa06bfffedd9824d0e1a1ccc6e46e", 0xc8, 0xfffffffffffffffc) r2 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000012c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000013c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001400)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000001500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000001640)=0xe8) getresuid(&(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) r7 = getuid() getresuid(&(0x7f0000001740)=0x0, &(0x7f0000001780), &(0x7f00000017c0)) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) getresgid(&(0x7f0000001a80), &(0x7f0000001ac0)=0x0, &(0x7f0000001b00)) fsetxattr$system_posix_acl(r1, &(0x7f0000001280)='system.posix_acl_access\x00', &(0x7f0000001b40)={{}, {0x1, 0x7}, [{0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x5, r4}, {0x2, 0x2, r5}, {0x2, 0x6, r6}, {0x2, 0x3, r7}, {0x2, 0x0, r8}, {0x2, 0x5, r9}, {0x2, 0x5, r10}], {0x4, 0x7}, [{0x8, 0x7, r11}, {0x8, 0x2, r12}, {0x8, 0x2, r13}, {0x8, 0x5, r14}], {0x10, 0x1}, {0x20, 0x3}}, 0x8c, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x100000001, 0x2, 0x4}}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000001240)) ioctl$RTC_UIE_OFF(r0, 0x7004) fchdir(r1) 15:45:06 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x800) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xab11, 0x0) 15:45:06 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10680, 0x0) write$cgroup_int(r0, &(0x7f0000000280)=0x6, 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f00000001c0)={0x80000000, 0x6, 0x5, 0xc61, 0x3, 0x6633, 0x5, 0x1f, 0xe7d, 0xffffffff7fffffff, 0x8, 0x3, 0x9, 0x3, &(0x7f0000000140)=""/46, 0xe6a, 0x7ff, 0x100}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7fffff, 0x11, r4, 0x28) read(r0, &(0x7f0000000000)=""/250, 0xfa) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 15:45:06 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x2) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x30}}, 0x1) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='system\x00', 0x7, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r1, &(0x7f0000000340), 0x8800000080000002) 15:45:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021001000200"/16], 0x10}}, 0x0) [ 427.022918] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.068553] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.112637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28781 sclass=netlink_route_socket [ 427.115366] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115379] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115392] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115404] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115416] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115429] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115441] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115453] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.115466] hid-generic 0000:0004:FFFFFFFD.0015: unknown main item tag 0x0 [ 427.171287] binder: 18149:18187 got transaction with invalid handle, 0 [ 427.171355] binder: 18149:18187 transaction failed 29201/-22, size 24-8 line 3228 15:45:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000480)=@nl=@proc, 0x80, &(0x7f0000002000)=[{0x0}], 0x1}, 0xfffffffffffffffc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'veth1_to_team\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="400fa84100000008000000050800000101000034bf0000ffe4be23db00080000000100000009000000080000004804f9e07125fdce55b0ae89e45ebf5da621f5e7b4d9a0f59a15ac8d6c6e8338010b5252119fb66bcbceab013122ca420f21ec90daf3649c56d2a857fc993b3d3ef0fc64431210831787f40da8a9d5a030211f769a7f300b45d0d37067950101000000000000400d8649aaa6da4f2b27b95f9fb326525290bea30000bcec7192c9ed2aee"]}) r3 = socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x1f, 0x10000, 0xfffffffffffffff9, 0xffffffffffffe9cc, 0x2f2, 0x0, 0x3ff, 0x3f, 0x9fa3, 0x1, 0x0, 0x80}) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) sendmmsg(r0, &(0x7f00000092c0), 0x8000000000003c0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1) [ 427.214512] input: syz1 as /devices/virtual/input/input66 [ 427.232104] hid-generic 0000:0004:FFFFFFFD.0015: hidraw3: HID v0.00 Device [syz0] on sy [ 427.287908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23645 sclass=netlink_route_socket [ 427.390460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12340 sclass=netlink_route_socket [ 427.415627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13360 sclass=netlink_route_socket [ 427.657735] binder: undelivered TRANSACTION_ERROR: 29201 [ 427.916124] input: syz1 as /devices/virtual/input/input67 15:45:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x4000}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="005e86dd4e9a7ae9c13fcd77ea40869f095507982ff5c6e846deb0a12a3b574639e8fc02e5fedd79cb66a2ef57f324e40216f3383acb2b06596dfc702c73fae5c6680af7e6f05d4885367a297207b54180f7e2cfc43e3781c4978e18bc0655476c7125223bd42d1c05ebdb"], 0x6b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$PPPIOCGIDLE(r0, 0x8008743f, &(0x7f0000000040)) 15:45:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r8 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:08 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x300000010000031, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000300)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=""/162, &(0x7f0000000000)=0xa2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 15:45:08 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = dup2(r0, r0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000000280)={0x90, 0xffffffffffffffda, 0x4, {0x6, 0x0, 0x6, 0x7, 0x3, 0x5b, {0x5, 0x9, 0x6, 0x9, 0x0, 0x80000000, 0x3f80000000000000, 0x1, 0x9, 0x1, 0x6, r3, r4, 0x5, 0x100000000}}}, 0x90) creat(&(0x7f00000000c0)='./file1\x00', 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = syz_open_procfs(r1, 0x0) ptrace(0x4207, r1) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000340)={0x4, 0x5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r1, 0x20000000, &(0x7f0000000140)={0x0, 0x20d}) 15:45:08 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r2 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) socket$inet6(0xa, 0x803, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) perf_event_open(0x0, 0x0, 0xc, r0, 0x0) madvise(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x3) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:45:08 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x300000010000031, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000300)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=""/162, &(0x7f0000000000)=0xa2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 15:45:08 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x14}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x59) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) 15:45:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000740)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) iopl(0x8001) listen(r0, 0x7f) socketpair(0x4, 0x7, 0x2550ab60, &(0x7f0000000180)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x500, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000240)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000500)="02fbc453e9d7f07f26a1aca1396d40d8b37d81d4ea7c4321120b24744d169104fa3d6e2ea791e817de212d34bc785bc72495615e4ca6151e757def79612b0e181701ec75d52b0f552d4c1f07a99211445ea3ee5528a6a0b379991eb01434945772f2b02ed861fe5d4d132fa4d8118159054a2f5648e3a728c2d7599e9e1b69b154a56ddb02a6312f0aafe6402cdd86f0e8d5d3a26eeb571978e9b4b3093feaa8d75084cb6e6cdd130ce2483e614d47", 0xaf, 0xfffffffffffffffb) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1040400}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="9bdc5944daffbd529b8f260bf23644e4a61f004cf3b157233c50dba6b85528a3a24bf31b187bd2ff999c1bd6e8a40f41c337bff247794a7c230b68972b7c66879bde9543a81111507a3b8eb2adb70b2c70a537482937cd238b7305ede0d846c4297c3600000000c7937a55e93459788725625c08d300d427c3bbd287be62106fd5f4614f8548519cc71ac1aae500c4b1b9f22e9b7bc8ea5bab93806f1e49a860b73b105ffcfa2ee76860e17ec1ad931481aee45afcd8d0d178f5cd4d454c21f9e6c36d4071b4f145ea5e593f1d1c0bddb9504b624d4e9ccf37c4acd7f69109cb2f63a861080000000000000092", @ANYRES32=r7, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r8 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f00000006c0)={'veth1\x00', 0xfffffffffffffffd}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r9}) ioprio_set$pid(0x0, r9, 0x2) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:45:08 executing program 3: clone(0xfffffffffffffffb, &(0x7f0000000080), 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) wait4(r0, &(0x7f00000003c0), 0x80000007, 0x0) 15:45:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x904c2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) [ 429.133268] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 15:45:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) read(r0, &(0x7f0000001100)=""/4096, 0x1000) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="ea", 0x1, 0x33c33c5e4b02e06d, 0x0, 0x0) [ 429.195384] binder: 18213:18240 got transaction with invalid handle, 0 [ 429.253148] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.311663] binder: 18213:18240 transaction failed 29201/-22, size 24-8 line 3228 [ 429.339550] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.382896] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.408689] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.439148] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.479380] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.518624] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.556313] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.567328] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.575113] hid-generic 0000:0004:FFFFFFFD.0016: unknown main item tag 0x0 [ 429.619115] hid-generic 0000:0004:FFFFFFFD.0016: hidraw3: HID v0.00 Device [syz0] on sy [ 429.723978] binder: undelivered TRANSACTION_ERROR: 29201 15:45:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c6bb3cecbafccea2ec9c0e45ba7efdca9708634affffffb73ca2d704e0297a6da4a70b11fd3d0f4b8e9f3"], 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 15:45:10 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[0x0]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x4, 0x22c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000d80], 0x0, &(0x7f0000000440), &(0x7f0000000d80)=ANY=[@ANYBLOB="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"]}, 0x279) lstat(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000a40)={&(0x7f00000008c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5121}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0}], 0x1) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r9 = fcntl$getown(r1, 0x9) r10 = dup2(r1, r0) r11 = getpgid(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) sendmsg$netlink(r7, &(0x7f0000000580)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="31cfe102ba0a03c983200052003bf64ea1000000000000000000", @ANYRES32=r8, @ANYBLOB="0c945b2904a1416f7f4e2757d2cd3b6d667508005c00", @ANYRES32=r9, @ANYBLOB="ac2f31cbdb96675e791703d6b23834bcb9b899ebc49ec5909407eed4005e9ec443ea8bbee90f08002d00ac1414bb054ff6efd7b98743478d2ede9a3b47a9641d88b7e85ca3064e991914ca2b81578f8e438a7f547d870dbac2479bbf654780d9eae507b85fbd86d91f8d14fee912c61c6bd43717f72fd11d03ba6698736dfdb404b08f82bc0576b152fcc9fa22f0f83448d11e40c79a6dda014fd47fd66cd7346ab426df1d38b74f71c451fa74ada59cd93a4e4d37f611b4ead37a99c095c64337e0be8f3a751d5303105e74183ff32078e2e161c49a23818474f7f422bf663c1b01771c7cdd66a871e73c30d13a80b3963d8617aae649f32b1404c56c9a876b64ee28c8e08e967ebc29de42e8e391ca006e85592b7cbb8c39c840576917071f14a4f99d4a946158970f9199b4aad60e04be783787bd9c6973d1094b828007206c5a2c7183225a5ad5fd71096510b2458f7ac961000000"], 0x157c}, {&(0x7f0000000180)={0x270, 0x42, 0x10, 0x70bd29, 0x25dfdbfb, "", [@nested={0x198, 0x6f, [@typed={0x4, 0x80}, @typed={0x8, 0x43, @uid=r3}, @generic="557e882479272d23970cfb7b3e71a5261631dbaa67bc8063400a11871d45b4baf8c2414279a76a2baa2e57fabda54e0c555f8cf29c3c2c3a5d4641eaa5c2e8dcc6359a0ff7fcc584d6f8b344584c36ea25487b78cb52a225876deae279d787e02f2c9231336dfd09667478839927c1ba24949793a135c3f2b0653f1cd8758926eb654980f5534fa8211753832eac6d633ef48b925264fd733024b5e6681c98bcb92a644bffff2a3d3dec4e2f879b9e6fe20219b9d20263efa1615101de6d35d58107042e3de5fb7710bea77e9f14925df86724baa99844", @typed={0x44, 0x6e, @binary="3e709e8353dccc5e66c69da73c75a6cbd7cd18a149bf0a80950e67ef54d015611243e8a24b0847d80740c4be2a928202d7d517b3bdb1ac771594093600b840"}, @typed={0x8, 0x5, @u32=0x6}, @typed={0xc, 0x18, @u64=0x1}, @generic="c05fb4a5c8cc89a6a1ecbcbc1a4bb89cf7beb2d7e9259243", @typed={0xc, 0x54, @u64=0x5}, @generic="06c904a5a528a6278fd652f37d8ca6e1139ae3a0c2c5bb903976a4f70e305336fc06299023ce574d93dc29fbc3bd993446702003f9"]}, @generic="cfefe7b2ec7fb412ca3a8e329bd2634682402ea167951c3980ddd37b7365d96de5919af707df266c8ace548f891ae16c04b492aae646172076c6787f4400aa1bd01f96c0a77b24c1a0636160d0766eb600eff44fcf0a532d29ebd11ddefe2565d8de199de1199a2150df77dac180ea12af2aeb5e844c4db3fe4ed752d0a21de76640ed2395aabd3be8f47fac623242f47bb4c7f941e3297ca60030843a8bf9b11c771dcb3328d792ab8a6d6304841a93e62b4d294d8fdb051d50f6323e5c3653cf14305f0d9fb971"]}, 0x270}, {&(0x7f0000000700)={0xc8, 0x30, 0x600, 0x70bd2d, 0x25dfdbff, "", [@generic="8ed530e9ab6d8070594d6b7bc9903f2a5a11c30ababa5eb81d68d44851027eb3f437622bb7d1573751a8791415a9ea26b26dc0d29b021a43e6524cff0d8c9a270925328ba814ea5e3a3393ac62906a93ef19dc2bdb9a67c898decc0372ad177e0e132153fadf2134d188174639920672ba1a589ace097d6b67d81f4c6599c4d4bbe03357b31bfd11f240c9dba0ee20e83032ef8dc131492a0f0d7ed1", @typed={0x14, 0x3f, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x8, 0x6d, @fd=r0}]}, 0xc8}], 0x3, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r10, r1, r1, r0, r0, r1]}}, @cred={{0x18, 0x1, 0x2, {r11, r3, r4}}}, @cred={{0x18, 0x1, 0x2, {r12, r3, r4}}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x6c, 0x4004}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r13, &(0x7f00000092c0), 0x4ff, 0x0) 15:45:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:10 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000400)={0x9, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) [ 431.040564] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.101026] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.164199] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.207850] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.243002] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 15:45:11 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r2 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) socket$inet6(0xa, 0x803, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) perf_event_open(0x0, 0x0, 0xc, r0, 0x0) madvise(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x3) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:45:11 executing program 1: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80002, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)=""/172) getpid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setns(r0, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000180)=0x3) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000280)=[0xee00, 0x0]) setregid(r4, r5) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 15:45:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x440, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pipe2(0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x0, 0x2, 0x7}}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r3, 0x200, 0x9, 0x1) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000080)=0x7ff) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) write(r6, &(0x7f0000000000), 0xfffffe63) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x3e3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) stat(0x0, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000880)) getuid() ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x9) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) shutdown(r0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) [ 431.277306] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.315281] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.345035] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.355468] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.363415] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.371210] hid-generic 0000:0004:FFFFFFFD.0017: unknown main item tag 0x0 [ 431.406999] hid-generic 0000:0004:FFFFFFFD.0017: hidraw3: HID v0.00 Device [syz0] on sy 15:45:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 431.696261] binder: release 18279:18304 transaction 68 out, still active [ 431.732642] binder: undelivered TRANSACTION_COMPLETE 15:45:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendto$packet(r1, &(0x7f0000000400)="80f5985423c8ff41bee42983caee713ec9ecb8736043fb033c18399394a5c7b4612e1df0d24b6fad8be25812c0fb887ba13e9027677ee1fff92e2d7428a0e3ee5707f3d00caa41ee6f92c42c930a96e3fd71486c2435b4ee02", 0x59, 0x20000040, &(0x7f0000000500)={0x11, 0x7, r2, 0x1, 0x5}, 0x14) ioctl$TCFLSH(r0, 0x5406, 0x20719ffe) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x9, 0x3, 0x3, 0x6, 0x6}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/81, 0x51}], 0x2}, 0x40000020) recvfrom$packet(r3, &(0x7f00000000c0)=""/157, 0x9d, 0x410000, &(0x7f0000000380)={0x11, 0x17, r4, 0x1, 0x1ff, 0x6, @remote}, 0x14) 15:45:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@loopback, @loopback, @remote}, &(0x7f0000000040)=0xc) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffff2, 0x1, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0xa) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffff72, 0x3, 0x9670, 0x0, 0x7fffffff, 0x3, 0x3, 0xf2, 0x146, 0x40, 0x2c9, 0x200, 0x80, 0x38, 0x1, 0xffffffffffff60c6, 0x75, 0x10000}, [{0x60000003, 0x6, 0x3f, 0x7f, 0xfffffffffffffa73}, {0x1, 0x3, 0x1, 0x7fffffff, 0x3, 0x6, 0xffffffffffffffff, 0x8000}], "977950c7d2252156d6ae9faf8be28b673eeb54143674e12f7f6f10e3a9be256010b6578db76e894f593689dadf05584c2bac51d88db9642bcbbf06269247217e544facd8de4bf5dc062e8c939bae1d2be917b180e9ef885a21d24a6efbd93b544f68a1ad7801cba728979603", [[], [], [], []]}, 0x51c) sendto$inet(r0, &(0x7f00000003c0), 0xed5f13af, 0x0, 0x0, 0x184) shutdown(r0, 0x400000000000001) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x5) 15:45:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="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", 0xe01}], 0x1, 0x0) r2 = gettid() ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'rose0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001040)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001180)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x7, 0x4e22, 0x1, 0x0, 0x80, 0x80, 0x7d, r3, r4}, {0x1, 0x3, 0xfffffffffffffffd, 0x25, 0xff, 0xc2c1, 0x5, 0x1}, {0x100000001, 0x1, 0x40}, 0x10000, 0x6e6bbf, 0x3, 0x1, 0x7d4e996a2e961f82, 0x2}, {{@in=@loopback, 0x4d4, 0x3f}, 0x2, @in6=@remote, 0x3507, 0x4, 0x3, 0xfdf, 0x7fff, 0x4}}, 0xe8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x100132, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000001c0)) tkill(r2, 0x1000000000016) [ 432.590063] binder: release 18324:18330 transaction 70 out, still active [ 432.615890] binder: undelivered TRANSACTION_COMPLETE 15:45:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000240)={0x1}) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffe9b) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, [], [{0x7fffffff, 0xff, 0x40f, 0x4, 0x6, 0x3}, {0x4, 0x9, 0x7fffffff, 0x8, 0x90000000000, 0x5}], [[], [], [], []]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 15:45:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000a40)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000a80)={r3, 0x1, 0x6}, 0x10) fallocate(r1, 0x42, 0x48, 0x4) r4 = socket$inet6(0xa, 0x3, 0xa) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000340)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/140], 0x1) write$P9_RLOPEN(r0, &(0x7f0000000280)={0x18, 0xd, 0x2, {{0x0, 0x2, 0x8}, 0x6}}, 0x18) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000500)=0x0) sched_setaffinity(r6, 0xb59224fd0a0ebd7c, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000480)={0x1, 0x5, 0x3, 0xf2}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) r8 = perf_event_open(0x0, r7, 0xfffffffffffffffe, r2, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000008, 0x30, r8, 0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') openat$cgroup_ro(r2, &(0x7f0000000540)='cpuset.memory_pressure\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) r9 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r10 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r10, 0x80000000003) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000001000000001000000000000005c49"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0xfffffdfd, &(0x7f00000000c0)="f2"}) [ 433.508939] binder: BINDER_SET_CONTEXT_MGR already set [ 433.528851] binder: 18354:18355 ioctl 40046207 0 returned -16 15:45:13 executing program 2: r0 = socket(0x15, 0x4000000000080003, 0x4000000000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x10\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r5 = dup2(r4, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000005c0)="060100008000000000cd6b348198ad59a5b6542fff4227199745ffa6c34297d475ac1af23dcf69132a8331c9ae987e84f350c34a9949330e285594a798d514b616bc980bfcb44308b9f5cc5ab6808c681f7a60e526a6e30fdf0f538f4f0c31d04b6a30e539cf51440604404f2709b5cdd2a2228eb9dfffb468403a4f46f57fcf58e4793e7569d4", 0x418) r8 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e2a, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x22) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x80000000000802) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2000000000, 0x0, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0xfffffffffffffe45) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3fc959d77e19324ca0e763a3e892669cc37089ede7c17f3045839ec3afaf69e02e8ca02c42d1a73e68dfefd247a79a184d72dbb55ff786fff8a90751eb40862d29c635eeae57a8cfc8b08b9ac607bfa4db8988dd7aff75ca19d1e1fcb78a7ed9822642c5af886bffe5edfbf992b9d3422819f98c115e374080e2ac84a0fce25e5e75b2184cc6da65f1fb3b3341b92fb2780995d1f1b30018bb7ea7ca60d95e3a3aa2cd12dee21d34"], 0xa8}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0xffffffffffffffff, @dev, 0x4}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) 15:45:14 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r2 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) socket$inet6(0xa, 0x803, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) perf_event_open(0x0, 0x0, 0xc, r0, 0x0) madvise(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x3) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:45:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x1e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x10000504) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x11) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000680)='./file0/file1\x00', 0x101c7e, 0x4) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:14 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000100020423ca0000cf", 0x1f) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x91}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcef0}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) 15:45:14 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSBRKP(r0, 0x5425, 0x0) 15:45:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:14 executing program 2: setrlimit(0x7, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) 15:45:14 executing program 1: [ 434.443310] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.463538] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.482204] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.510951] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.536952] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.560988] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.583333] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.601883] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.624276] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.657694] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.665295] hid-generic 0000:0004:FFFFFFFD.0018: unknown main item tag 0x0 [ 434.685863] hid-generic 0000:0004:FFFFFFFD.0018: hidraw3: HID v0.00 Device [syz0] on sy [ 435.061104] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.078263] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.093934] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.102668] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.111824] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.119497] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.127835] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.135431] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.143080] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.151350] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.158943] hid-generic 0000:0004:FFFFFFFD.0019: unknown main item tag 0x0 [ 435.183983] hid-generic 0000:0004:FFFFFFFD.0019: hidraw4: HID v0.00 Device [syz0] on sy 15:45:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000010, &(0x7f0000000280)=0x8000400100000006, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42803) tkill(r3, 0xa) 15:45:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) gettid() connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x16, 0x0, 0x6f) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r0, 0x4, 0x42803) 15:45:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffe3, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$TUNGETFILTER(r1, 0x800854db, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000140)='I', 0x1, 0x4007ffd, 0x0, 0x0) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0xffffffffffffff50, 0x21, 0x0, 0xb045) r2 = getpgrp(0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) 15:45:16 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r2 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) socket$inet6(0xa, 0x803, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) perf_event_open(0x0, 0x0, 0xc, r0, 0x0) madvise(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x3) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:45:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:17 executing program 1: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0xffff}, 0x28, 0x2) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)=ANY=[@ANYBLOB]) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80) flistxattr(r0, 0x0, 0xffffffba) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r3 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000016c0)) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="eb5e185422c7b35760e587"], 0xb) getpgrp(0xffffffffffffffff) sendfile(r5, r5, &(0x7f0000000180), 0x8000) setsockopt$sock_int(r2, 0x1, 0x2000000000002, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000380)={0x34, 0x0, &(0x7f00000001c0)}) 15:45:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)={0x30, 0x4, 0x0, {0x1, 0x4, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x12400) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000340)) socket$inet(0x2, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f00000001c0)=""/255, &(0x7f00000002c0)=0xff) fchmod(r2, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f0000000140)}}) [ 438.495203] binder: release 18454:18466 transaction 73 out, still active [ 438.504742] binder: undelivered TRANSACTION_COMPLETE 15:45:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000080)=0x43e) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x7fff, 0x0, 0xa0, 0x80, 0x2e, r1, r2}, {0x1, 0xa86, 0x8, 0x1, 0x1, 0x8000, 0xff, 0x42}, {0xfffffffffffffffa, 0x172, 0x0, 0x80}, 0x0, 0x0, 0xfbd421d9b39ac223, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xb}, 0x4d6, 0x3f}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3501, 0x2, 0x3, 0x3, 0x9, 0x5, 0x5}}, 0xe8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) [ 439.400280] binder: release 18471:18485 transaction 75 out, still active [ 439.409912] binder: undelivered TRANSACTION_COMPLETE 15:45:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:20 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800400000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) futex(&(0x7f000000cffc), 0x400000001, 0x0, &(0x7f00006bc000), &(0x7f0000060ffc), 0x0) 15:45:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='ns\x00f\x82}r2\xf2\xf0|<\x14\x85H\x1c\xba\xb6\x06A\x92\xf9\xcc\x84\x8f\xd2~\x8c\x84r\xa9\xc65\xd0\xad\xad\x18\x84\xed\"\f\xe5\x02k\xcdk\x1fNcr\x8d\xfd\x1bi\xb6\xaf*L\x9a_w\"\x8d?D\x8f[0\xd9\xb8\xbe^\x89\x9f\xf8\xed\xa1\xe7\xe1\x94J\xfd-\x84\x85\xd9\xa4\x15\xcf\xadP~N\xb3\x91\x8f:\x91\xe5\xbb\x8d\x142\x94}e\x98*H/BC\xdd,lm\xbd\x88\xf5\x85u\xc7C#&t\t\xa9(X:6\x95\xf4\xcd\x8fwX\x8f\xd3\xdeU\xfd\x9aJ,\xdb\x15\xaad\xb3LR\x8aXn\x13U\x93B\xd88\xd5\xf0\xc0$o\xec\x9az\x84\xa13\xe1\xabs\xe5\x9b\x17\xfaJ\x00\xacc\xae7@\xe1\x02\x85h\xab\xa3\x00\r\xce\xf4I]\xc6\xa4\xa9\xdd\xe91v\xc5\xdc:L[\xc8\xe4\xeb\xe1`\xfal\x8e\x00\x00\x00\x00\x00\x00\x00') exit(0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x16, 0x300, 0x70bd2d, 0x25dfdbfe, {0xc}, [@generic="e22d928567a54321af73f79f0180a3d5b2bf0d2ac65a2734133a61e777c696259de8a28ae9a9442042e12ce29fc573b6a146a06c7fddec5583cbc691a1fcdd0b2da171952bfbc8fe51d5", @typed={0x14, 0x3, @ipv6=@mcast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x40810) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fstat(r1, &(0x7f0000002d80)) 15:45:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r4, &(0x7f0000000500)) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000540), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000880)={{0x0, 0x9, 0x3f, 0x9}, 'syz0\x00', 0xb}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640)='tls\x00', 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000380)=""/154) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 15:45:21 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000100), 0x4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0x6, 0x6}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) pipe(&(0x7f00000000c0)) 15:45:21 executing program 4: r0 = eventfd(0x7f) write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) read(r0, &(0x7f0000000140)=""/196, 0xc4) 15:45:21 executing program 4: unshare(0x200) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=""/133, 0x85) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) setns(r0, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x28040, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) getsockname$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000180)) [ 441.948786] binder: release 18497:18502 transaction 77 out, still active [ 441.961930] binder: undelivered TRANSACTION_COMPLETE 15:45:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:21 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800400000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) futex(&(0x7f000000cffc), 0x400000001, 0x0, &(0x7f00006bc000), &(0x7f0000060ffc), 0x0) 15:45:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 442.042478] binder: release 18500:18526 transaction 79 out, still active [ 442.055900] binder: undelivered TRANSACTION_COMPLETE [ 442.877579] binder: release 18551:18565 transaction 81 out, still active [ 442.896488] binder: undelivered TRANSACTION_COMPLETE [ 443.040578] binder: release 18557:18558 transaction 83 out, still active [ 443.052443] binder: undelivered TRANSACTION_COMPLETE 15:45:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:25 executing program 3: r0 = creat(&(0x7f0000000340)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$input_event(r0, &(0x7f0000000080)={{0x0, 0x7530}, 0x2, 0xfffffffffffffff8, 0x20}, 0x10) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400fdff1a000000100000e3ffffffff1f00000020000000"], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000240)={0xc5, 0x29, 0x2, {0x7, [{{0x30}, 0x7, 0x4, 0x7, './file0'}, {{0x20, 0x1}, 0x0, 0x4, 0x7, './file0'}, {{0x43, 0x0, 0x7}, 0x7ff, 0x3, 0x7, './file0'}, {{0x8, 0x3}, 0x40, 0x2, 0x7, './file0'}, {{0x40, 0x1, 0x6}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x3, 0x1}, 0x3, 0x3, 0x7, './file0'}]}}, 0xc5) syncfs(r0) mlockall(0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x102, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x2d}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20040081) tkill(r1, 0x6) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) ioctl$FICLONE(r0, 0x40049409, r0) ftruncate(r0, 0x0) 15:45:25 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800400000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) futex(&(0x7f000000cffc), 0x400000001, 0x0, &(0x7f00006bc000), &(0x7f0000060ffc), 0x0) 15:45:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:26 executing program 4: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x100000000) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xa260e6ad6f4a934b) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000400)) sendmmsg(r1, &(0x7f0000004180)=[{{&(0x7f0000003bc0)=@ax25, 0x80, 0x0}, 0x10001}], 0x1, 0x40000) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0xffffffffffffff61) r5 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0x7, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x345}}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6, @local}, 0xffd4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\bS2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e\x9b{\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') syz_open_procfs(0x0, 0x0) sendfile(r8, r8, 0x0, 0x6) [ 446.497750] binder: release 18575:18600 transaction 85 out, still active [ 446.518329] binder: undelivered TRANSACTION_COMPLETE 15:45:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:26 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800400000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) futex(&(0x7f000000cffc), 0x400000001, 0x0, &(0x7f00006bc000), &(0x7f0000060ffc), 0x0) [ 446.586325] binder: release 18576:18599 transaction 87 out, still active [ 446.597749] binder: undelivered TRANSACTION_COMPLETE 15:45:26 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz1\x00', {0xffffffffffffffff, 0x6, 0x1000, 0x1a1}, 0x2b, [0x8, 0x8, 0x3f, 0x6, 0x7, 0x7, 0x8000, 0xf29, 0x8, 0xffffffffffffff99, 0x3, 0x8, 0x2a7, 0xff, 0x20, 0x7, 0x401, 0x3ff, 0x9, 0x5, 0x40, 0x7f, 0x81, 0x800, 0x4, 0xffffffffffffbf99, 0x48, 0x0, 0xc00000, 0x3, 0x1ff, 0x2, 0x6, 0x203, 0x6, 0x4, 0x2, 0x7, 0x20, 0x2, 0x81, 0x4, 0x7b, 0x8001, 0x4, 0x8, 0x9, 0x10001, 0x0, 0x1, 0x3, 0x80000001, 0x0, 0xfffffffffffffff8, 0x7, 0x7, 0x6, 0x1, 0x5, 0x81, 0x6, 0xffffffffffff8000, 0x2, 0x2], [0x3f, 0x6, 0x8, 0x2, 0xfffffffffffffff7, 0x800, 0x80000000, 0x80, 0x100000001, 0x0, 0x6, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3, 0x7, 0x3, 0x100000000, 0x9, 0x4, 0x80000000, 0x6, 0x70, 0x6, 0xffffffffffffff01, 0x8, 0xfae, 0x4, 0x8, 0x8001, 0x9, 0x80000000, 0x4, 0x4, 0x8000, 0x43, 0x1, 0xd022, 0x2, 0x400, 0x8, 0x1, 0xe6, 0x3, 0x7fffffff, 0x0, 0x2, 0x2fdf, 0x8, 0x3b74, 0x100, 0xffff, 0x4, 0x3ff, 0x1ff, 0x8, 0x80, 0xf39, 0x1, 0x0, 0x2, 0x8], [0x3, 0x5, 0x4, 0x200, 0x0, 0xfffffffffffffff7, 0x200, 0x2, 0x3, 0x10000, 0xffffffffffffffff, 0x4, 0x6, 0x1000, 0x100000001, 0x40, 0x5, 0xffffffff, 0x7, 0x7fff, 0x0, 0x9b, 0x4, 0x80000000, 0x1, 0x2, 0x45, 0x4, 0x709c, 0x0, 0x9, 0x2, 0x6, 0x80000001, 0x40, 0x2, 0x7, 0xea, 0x1, 0x9, 0x81, 0x4, 0x1a48, 0x5, 0x6, 0x8, 0x6, 0x1f, 0x1, 0x400, 0x3, 0x5fb, 0x9, 0x9, 0x7, 0x1000, 0xb6f, 0x600, 0x401, 0x65, 0x3ff, 0x1, 0x3f, 0x2], [0x7ff, 0x9, 0x2, 0xffff, 0x100000000, 0x0, 0x176ad783, 0x5, 0x2, 0x8, 0xa8b, 0x7fff, 0x5, 0x40, 0x5, 0x1, 0x0, 0x200, 0xfc, 0x2, 0x2, 0x9, 0x24b, 0xcb5e, 0x4, 0x8aec, 0x0, 0x1, 0x3, 0xfffffffffffffe01, 0x1f, 0x0, 0x2, 0x1ff, 0x800, 0x101, 0x5c5, 0x6, 0x9, 0x5, 0xd57, 0xfffffffffffffbff, 0x0, 0x6, 0x4, 0x2, 0x3, 0x48a1, 0x1f, 0x200, 0x0, 0x9, 0x2, 0x3, 0xffffffffffffffff, 0x89, 0x800, 0x6, 0x7, 0x3, 0x6, 0x9, 0x535, 0x3]}, 0x45c) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x11, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) 15:45:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x49) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) write(r0, &(0x7f0000000480)="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", 0x1000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'hwsim0\x00', 0x1}) 15:45:26 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000045, &(0x7f0000000480)="8161492704c5eb372c88761df4b89b4360c92ff6", 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x10000000000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8}}, 0x20) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f00000006c0)="d5c2c9f0643d1535cec41b6cd9374ad741ee5230e691bf67d096abba9df3533faf1a8db17afdf5156a976d4ca72e4dced6eb7facf21836807b6693221a1b2bece32c74aba709f0f2f62042a09c322278452b30c5b03fe083017c06c833f406edd97c82f555a50cdb330d33fb297bcc0f2e20cd858649158916c2017ae410328bdcd92f8a1445609ad639017007bac955a46114a7f397376df9e78f619e048db50ff7a56f3ecddb41fa63fd8a814793eb8e185d43e4a20e1cd8e70c65e14fe392ff710daadf078a5ba597561c9b813956b7e3b67ad6e57ad24f188f84e1847c2389ce8a1a6e0931c74f34187a") sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x0, {0x2, 0x4e21, @multicast2}, 'teql0\x00'}) rt_sigaction(0x30, &(0x7f0000000140)={&(0x7f0000000380)="f08104d309000000c4e2fd32f5d8213ed277c6c4c151e067adc4c3010f9b37000000d3c4e3791daf95690000a30f0f830d000000a0f36318c4c3e9789d44000000f0", {0x4}, 0x4, &(0x7f0000000400)="65da1a260f601367660f382a3d66f0f79d7b00000065360f70bdfee5fcdfd2dd7b0065ea81c9000000000f3800a3fe1a00008fe940019800000000c4c219dd949b6537defe"}, 0x0, 0x8, &(0x7f00000001c0)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x113) dup2(r2, r2) write$FUSE_INTERRUPT(r6, &(0x7f0000000340)={0x10, 0xfffffffffffffffe, 0x8}, 0x10) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x7, {0x6, 0x0, 0x7, 0xd5cb}}, 0x20) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x0, 0x224}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)) unshare(0x10400) socket$netlink(0x10, 0x3, 0x19) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x1ff, 0x1, 0xdd0b, 0x8}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80585414, &(0x7f0000000ac0)=""/247) [ 447.140388] binder: release 18603:18609 transaction 89 out, still active [ 447.165189] binder: undelivered TRANSACTION_COMPLETE [ 447.524021] binder: release 18617:18633 transaction 91 out, still active [ 447.557936] binder: undelivered TRANSACTION_COMPLETE 15:45:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:28 executing program 3: epoll_create(0x5) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r1, r3, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000180)={0xffffffffffffffff}) fcntl$getown(0xffffffffffffffff, 0x9) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f0000000240)=0x44) getpgrp(0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x2f, 0x0, &(0x7f0000000080)) 15:45:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x401, 0x40000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) syz_execute_func(&(0x7f0000000140)="44c4e2c13acab2b598cd801b69e4f56962f5696200d9d9d0c441395bf91cc18fe9589b26e101edfec4660f380a8f050000007d822a2adfdfe4da7676f2168f580879bce00000802000c421513666f3e1dc8fe950939b9b000000c1ea01eff265dc5f001a6645363ef836d880d90000000faee42c24a1a1460f569f00082640c40153fe1d8b49df646736676666430fefb3000000007250314f864f86450f17720d14111d54111d00") 15:45:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:28 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000045, &(0x7f0000000480)="8161492704c5eb372c88761df4b89b4360c92ff6", 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x10000000000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8}}, 0x20) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f00000006c0)="d5c2c9f0643d1535cec41b6cd9374ad741ee5230e691bf67d096abba9df3533faf1a8db17afdf5156a976d4ca72e4dced6eb7facf21836807b6693221a1b2bece32c74aba709f0f2f62042a09c322278452b30c5b03fe083017c06c833f406edd97c82f555a50cdb330d33fb297bcc0f2e20cd858649158916c2017ae410328bdcd92f8a1445609ad639017007bac955a46114a7f397376df9e78f619e048db50ff7a56f3ecddb41fa63fd8a814793eb8e185d43e4a20e1cd8e70c65e14fe392ff710daadf078a5ba597561c9b813956b7e3b67ad6e57ad24f188f84e1847c2389ce8a1a6e0931c74f34187a") sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x0, {0x2, 0x4e21, @multicast2}, 'teql0\x00'}) rt_sigaction(0x30, &(0x7f0000000140)={&(0x7f0000000380)="f08104d309000000c4e2fd32f5d8213ed277c6c4c151e067adc4c3010f9b37000000d3c4e3791daf95690000a30f0f830d000000a0f36318c4c3e9789d44000000f0", {0x4}, 0x4, &(0x7f0000000400)="65da1a260f601367660f382a3d66f0f79d7b00000065360f70bdfee5fcdfd2dd7b0065ea81c9000000000f3800a3fe1a00008fe940019800000000c4c219dd949b6537defe"}, 0x0, 0x8, &(0x7f00000001c0)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x113) dup2(r2, r2) write$FUSE_INTERRUPT(r6, &(0x7f0000000340)={0x10, 0xfffffffffffffffe, 0x8}, 0x10) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x7, {0x6, 0x0, 0x7, 0xd5cb}}, 0x20) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x0, 0x224}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)) unshare(0x10400) socket$netlink(0x10, 0x3, 0x19) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x1ff, 0x1, 0xdd0b, 0x8}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80585414, &(0x7f0000000ac0)=""/247) 15:45:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="92cf07fedbdf25000000a57521ae711016cdfbd00f43ba74311a9a6214cfdf7093d2b7f62cd29ea8b07abbd77f0a8287ec8a0ad72f30e445bd03c2ddcf4412f8bc33418ca20850b67e2cb772073aeb02f0f75f7cf604c3c872de612428285200000000000000"], 0x10}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x180, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x2c, @loopback, 0x4e24, 0x0, 'rr\x00', 0xe, 0x2, 0x7a}, 0x2c) 15:45:29 executing program 4: creat(0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = memfd_create(&(0x7f00000000c0)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\x1d9\x03\xc2Vb\xe8*l\xdcC\xeb\xa6\xe4\x12$\xd1\xa3zz\x85\xf4\x1e\xcc\xfc\xf6\xb6__\xca\xef\x1b\x9d\x0ePw\x1bN[\x81\x92\x15P\xc5\x0e\x06\xf1\a\xc2\xb4\xf0\x9c\xee\x7f\xf5Z\xb6\xe1\x8a@\x17\b\xaf\nu\xd8D9z\x9eR\bjP\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os\"\xfc\f\xfa\xfe', 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x1, 0xbaf6, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r2, &(0x7f0000000080), 0x8) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:45:29 executing program 4: syz_execute_func(&(0x7f0000000880)="6114b20498cd801b86ecf56962c4c27958c5696200d9c4a5769a0f1805fdffff7f9b10c44139eff91cc18fe9589b2667a10101fec4c4c31546d0057d820a2a8686dfe4da7676f2fb1e8f76792000660f383aa20100000021513666f3e1dc8fe950939b9b000000c1ea01eff265dc5f00f0f79d00008020363ef84c03aee42c24a1a1460f569f40009508419508410153fe6736676666430fefb3000000007250314f864f86450fb4b4722d9b14111154111d00") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0xd38, @local}}, 0x0, 0x1, 0x0, "3ea0c7216b06f1951bbe4313ffb9481f5700a789d3b5349e960ded0ec696d193e134d548832a4705f0f5163318a7807ce80654dac4c7405aa576e2aa92ef12fe87cfab37709d68ba0c572db7eb5bd44c"}, 0xd8) [ 449.642387] binder: release 18657:18676 transaction 93 out, still active [ 449.667273] binder: undelivered TRANSACTION_COMPLETE 15:45:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000340)={@local, 0x0}, &(0x7f0000000380)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000003c0)={r4, 0x1, 0x6, @broadcast}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='-(%vmnet0\x00', 0xfffffffffffffffe) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) r5 = socket$inet6(0xa, 0x6, 0x5c7de52c) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) connect(r5, &(0x7f00000000c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80) ioprio_set$uid(0x3, 0x0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000080)=0xfffffffffffffeb2) r6 = syz_genetlink_get_family_id$ipvs(0x0) getsockname(r2, 0x0, &(0x7f00000005c0)) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000004c0)="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") sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0xf8, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc004}, 0x800) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) write(r0, &(0x7f0000000ac0)="e6387406e4be0b9cadf381e033dbe30a80a5b5b2d6d80e96579b7a641f24112ae94a738dce8525e612427467efee31ea326ee8841fb8b6422b0134047a4c3791785144a4051a50249161dac69d26c186f2632e613ddc99cfee3a534315f473d7ab87c210d605433a9b1505f8153b83d229c2e2e59ce51fc688f2ca8ef85b11485998ad9dfdb8d899700fe00dba1c44da2f9b9c1794d7607b664d2737a9cb8dece3e43dd9ca7a6b156710d9abc403dc764e02fe4f9a76f47cfb184380", 0xbc) 15:45:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:29 executing program 3: keyctl$set_reqkey_keyring(0x4, 0xfffffffffffffffc) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x84) [ 450.119492] binder: release 18656:18685 transaction 95 out, still active [ 450.136273] binder: undelivered TRANSACTION_COMPLETE [ 450.350665] binder: release 18710:18715 transaction 97 out, still active [ 450.363957] binder: undelivered TRANSACTION_COMPLETE 15:45:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:32 executing program 1: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) sendmsg$FOU_CMD_DEL(r1, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000300)) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="030060070180b2b1010004fffff3ff5dbfdcbd93f495476af093ff006efe00ffffffff000000000000000100007fffffffffffffff00029c9cc68e755f44b8d130590901f30c70692d115660c39d041d3ac1b3b8f5e7635f49a29fe17791720f7f8bac09de54b750544e02ddd970d1fb2e7210fa6888880e80020cc5fb02f5e3b7b7462524ea52e58d8a248824cea81d48a6833b652230a13f6ccb6fe87a4af1815692e9836b9c936cec2d392632c9e83aecd300294da14db5c7edc55f9757d6c838012b7d42700c1944807996a0e7b702"], 0x1) r2 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x88000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000004c0)={0x0, r1, 0x6, 0x2, 0x7, 0x81}) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write(r0, &(0x7f0000000400)="68d24a99268c3a5aefc4f1b55be535a7d6042973a9d4765c4b7c82cacf6c49b215486a530a22c88a9a826d7f507b80e9840c38af02fe5232fd4620c8c0516d833f1766282ed86bde6b32b25e540a19ac6c905a20179e4b26060d2469dbf1fa78339d20f3f539d06ea51c38c211", 0x6d) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="5798c5afff2cf849d99b28"], 0xb) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000140)) sendfile(r5, r5, &(0x7f0000000180), 0x8000) 15:45:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl(r0, 0x7, 0x0) 15:45:32 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000045, &(0x7f0000000480)="8161492704c5eb372c88761df4b89b4360c92ff6", 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x10000000000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8}}, 0x20) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f00000006c0)="d5c2c9f0643d1535cec41b6cd9374ad741ee5230e691bf67d096abba9df3533faf1a8db17afdf5156a976d4ca72e4dced6eb7facf21836807b6693221a1b2bece32c74aba709f0f2f62042a09c322278452b30c5b03fe083017c06c833f406edd97c82f555a50cdb330d33fb297bcc0f2e20cd858649158916c2017ae410328bdcd92f8a1445609ad639017007bac955a46114a7f397376df9e78f619e048db50ff7a56f3ecddb41fa63fd8a814793eb8e185d43e4a20e1cd8e70c65e14fe392ff710daadf078a5ba597561c9b813956b7e3b67ad6e57ad24f188f84e1847c2389ce8a1a6e0931c74f34187a") sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x0, {0x2, 0x4e21, @multicast2}, 'teql0\x00'}) rt_sigaction(0x30, &(0x7f0000000140)={&(0x7f0000000380)="f08104d309000000c4e2fd32f5d8213ed277c6c4c151e067adc4c3010f9b37000000d3c4e3791daf95690000a30f0f830d000000a0f36318c4c3e9789d44000000f0", {0x4}, 0x4, &(0x7f0000000400)="65da1a260f601367660f382a3d66f0f79d7b00000065360f70bdfee5fcdfd2dd7b0065ea81c9000000000f3800a3fe1a00008fe940019800000000c4c219dd949b6537defe"}, 0x0, 0x8, &(0x7f00000001c0)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x113) dup2(r2, r2) write$FUSE_INTERRUPT(r6, &(0x7f0000000340)={0x10, 0xfffffffffffffffe, 0x8}, 0x10) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x7, {0x6, 0x0, 0x7, 0xd5cb}}, 0x20) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x0, 0x224}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)) unshare(0x10400) socket$netlink(0x10, 0x3, 0x19) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x1ff, 0x1, 0xdd0b, 0x8}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80585414, &(0x7f0000000ac0)=""/247) 15:45:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:32 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="ebab9d72b915b045a5030cb9bdfd8a7bb6dc02620e"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x2000, 0x0) 15:45:32 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) pwrite64(r0, &(0x7f0000000040)="43d50b43b4354148", 0x8, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 15:45:32 executing program 3: chroot(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x3, 'dummy0\x00', 0x4}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x7, 0xffffffffffffff16, 0x400000000000000}) clone(0x10100000, &(0x7f00000002c0)="04506e74358adb79525f3a715eaf45f35a720a5df363874972f9cdbc9f71161f4b07820ee77427f6b1cd390652f26f5ffee108c91db93772aa1559d423dd9de2ca3011ba9d4add7699382e6787fa7cd2f0e1d7716d8a0786a1e32dd5d80a419bb280b65cba24e5db13e19c5545e848883ccc438683193beef5be7bf7a5972c542a8622e914cc290d8000384d4e0bc7c23e68619a514d7846f5f0bb730e189d9264413c682ad6197e52d24f53b1b7891e45ce280b42d550", &(0x7f00000001c0), &(0x7f0000000380), &(0x7f00000003c0)="33581d019b2ce72e81d162602e20ff3f6954a23e29023512581d343f34e292ca954c0bf2617336d131c0492a50df948673907a82cf570bcd2864d32cf7b8641ff76d81bc578dfc8b4357d8224f91db8ff406489ba08a966567a017420261d441c064cfa3e715e415ffba42f1041d426c1324e83476f3d0d4e0aa7b33a00be8660cf91f56a56683549ff67838a0f0c5a39db57cc0e328b0c4a6cadd2a5f73ede712aa75bf122455da595439a97eca1b0206a2ff21aff6f2edaeb3baf08af29bdf232ed29ba98ffcdb113ff7de198d0d024bb5a7135530a8dc09e8d790b0ceeb1e2d25e8e40abf8e3f80859bd75da62a962ebdbcbe4ccfeb") r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0xc, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) getsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000000080)=0xfffffd70) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 15:45:32 executing program 4: socketpair$unix(0x1, 0xa, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x2c}, {0x6}]}, 0x8) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) socket$inet6(0xa, 0x0, 0x6) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x10) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000280)=0x84e5) sendto$unix(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)=@abs, 0x6e) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000000000000000080800000000000000000000000000000000000000000000000000000000006000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/16], @ANYBLOB='\x00'/100], 0xb0) 15:45:32 executing program 3: r0 = socket$packet(0x11, 0x2030000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000080)=0x7, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) bind$packet(r1, &(0x7f0000000380)={0x11, 0xffffffffffffffff, r2, 0x1, 0x20000000, 0x6, @remote}, 0xffaa) sendmmsg(r1, &(0x7f0000006480)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x7, r2, 0x14}, 0x80, 0x0}}, {{&(0x7f0000002680)=@ll={0x11, 0x1b, r2, 0x1, 0x1ff, 0x6, @dev={[], 0xc}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)="b9dcf52f495eb5f0e367278eac457162ff726b16a1de718f4b2f4717ebcc69c6bbe2f2f7ada80bb7b004c1344df45512247a168a0ae459eb349c56376f81aec7dfa9f6d0ebbae58ed76ab113bd7223e1c00a13acb617ad638ba84ebadbb812ea65761ee8b271aa6596c65462bd58f14d37c8525f5567d606f1bec4d9e9953fdc2f89726cf68315205f18f63667d805c94d104218b86d1e780ad5e14cac11d7f60e0c7a17e7fce4896af2eaba91603950d097b82f38aba1c0a6f4a4b761f3aece36dd18cdc315cdea36bcbe6bf2edbd9a540d09e14e70cade53e6793b092e8364ed50cd92", 0xe4}], 0x1}, 0x4}, {{&(0x7f0000004ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e24, 0x200, @mcast2, 0x3d1fc0}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b40)="a9773df4d0eed428fbc1de1664b792725062f46c5b95fb7f35b2632e00f7229fee2714cd36777760714e6a2131808453dab612da8dc272130b6e2a656e901da4da6be62fab58895ab884f294c3c99f6ee24e12fd165072e33c50dafe75b39c69917698656bc16c350a43a2da74f28606ce63cc46f76d7a0fb4b66fe7312b78d1bcbfa91f6ad3465dbfce8730410f624acc60710fcb1ff3502a4d4f037195855e5384b49414351760098e55d865e014ea92d69dd7a1a6f55235575d2e641bd751b31e7d5f75212e38dc7aa8443f55fe09aaaadf62", 0xd4}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005f40)="f30ed63efb58d2190b185bcb735147eae877bb38adf7c70614519968b272151deb56d9e79aaefa39a952b937427647fac32c2c2fabedd252a7f097cfec7d2caa3aff7cc691fe4a66520dabd6c937a95529f4bed6d152b629453aee1fa8267ffc26b316a60543c2404f357f8760066e7f704735b36301457dcf25037c14de866db02f910952d1bffc9b6f2df44db296b7d0ab3ce2456d5ba7d85127157982", 0x9e}], 0x1}, 0x1000000000000}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000006600)="d4ccc5ed10b19133596baf0f667d98f4f63f86c1b5c79944ac89f788a5ae997dc4db10332a3ce96364cb9c3aa6929d4654dd1e32d69863533409f8f784fa54b019039b4cde4d64bb812770a0bcd9e17c03fdf5c6e1ee5541fdabc36b49b91a898b3deb817b93ad0828c17df3e8bf2c46354671f2d4a4d837b663004cc68c9e52dee4bee1cd77150670ae1466c9da5d1d5276c411bdbf76cf6b7adf6ca0e4f2a8e6fe4ddb1afae7402079ae0aa5132503f3a63ee7478e19e72cb79d4b1c268093c8d1c7b45133a3528360f2cc507e881678960a2ab7a8dec5cb9a17cea691437a063d24197158fb222a78", 0xea}], 0x1}, 0x1}], 0x5, 0x0) 15:45:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x800) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x22) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) 15:45:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}, &(0x7f0000001a80)=0x10) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000002c0)={0xfffffffffffffc00}) r6 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000400)={0x6b, 0x75, 0x2, {0x60, "e9667d65872e5c70319e077bf6969437a260fe155c0229fc60c36767a84e7fa2e63352556570470d912726cb6f26cccc07133f5076afb74d55da442c23a2bbe6c040c846158e8ff50a608a183aa5cb09e0d6c51f79d1020900c00cb7ba2b1749"}}, 0x6b) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syz_emit_ethernet(0xf7, &(0x7f0000000780)={@random="42be4ee4bbc2", @local, [], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "7b02ca", 0xc1, 0x0, 0x3f, @dev={0xfe, 0x80, [], 0x13}, @loopback, {[], @dccp={{0x4e24, 0x4e20, 0x4, 0x1, 0xd2b0, 0x0, 0x0, 0x0, 0x5, "3887a5", 0x5, "9a2e21"}, "84d913e12c046cb01ae95a10b3a53afc560f5881f9f6ce7f75c6a1d5299d3d7c430bf1fb7c270d2771e42d3d24bbd58b92dd13ed7cc256361606735e3e6c5c4646e40de9ab06d214ced55a0fcb320020cf1c3644dc3f9578ca9fce48b0b47eb230a55173323aa9d3701b0d428b2c98a49946189eba44d0c1c22b90d465c0e79ed376ea80169b1bc1be6790805891376606a54560ba72cc6597555e999b15e008e5206c1440e5e3a76d53196b1b451a540d"}}}}}}}, 0x0) fsync(r6) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000380)=0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000480)) getpgid(0x0) fcntl$getown(r1, 0x9) lstat(&(0x7f0000001940)='./file1\x00', &(0x7f0000001980)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x6, 0x1}, 0x14) [ 452.965137] binder: release 18730:18753 transaction 99 out, still active [ 452.975720] binder: undelivered TRANSACTION_COMPLETE 15:45:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f00000000c0)=0x7b9) ioctl$int_in(r0, 0x5454, &(0x7f0000000080)=0x80000002) pipe(&(0x7f0000000000)) pipe2(&(0x7f0000000100), 0x80000) 15:45:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) fcntl$setstatus(r4, 0x4, 0x6100) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:34 executing program 1: setxattr$security_smack_entry(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000280)='ramfs\x00', 0x6, 0x2) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x3280, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "a67c10a0b3ec529f15992298b914d712"}, 0x11, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) 15:45:34 executing program 2: r0 = socket(0x2000000c, 0x7, 0x10008) write(r0, &(0x7f0000000000)="220000002100070700be0000090007010a00001e00003c0000ff040405000c008c35", 0x22) 15:45:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x2) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r2, 0xb04, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd04}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd362}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x14}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0xa, 0x100000000000e) 15:45:34 executing program 2: syz_execute_func(&(0x7f00000005c0)="0c15b5b598cd801b69e4d25ff96962f5696200d9d9d0c441395bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d822a2a00c4da7676f2168f4808eebce00000802000e9c4c3ddfa8f68074b074b8fe9509b9b9bfc0000c1ea01eff265dc5f00c35b5b45363ef80f9966030f1fe40f5e5bf44700002640c4e11b580ec401fe5ff6e3df646736676670664336660fd2938c0000000f01c36666450f17720d14111d54111d00") r0 = socket$unix(0x1, 0x5, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)='{\x00', 0x2, 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)={0x4, 0x66, "c21bfc90cd6fd87804c503848350be74948fe7077391071a307b44e636248e14c5a2a3bc1fbdcc2162429778748ca20babc5de6c25846997e54a3a195fc0ff222687c615313f598bce3c9f124312a4dda9009e72fe63c01f5ed694e71ad7aaae59a9b2859dd4"}) 15:45:34 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='bond_slave_0\x00', 0x5, 0x8, 0x7fffffff}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r1, 0x0, 0x88001) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r2, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) listen(r2, 0x80) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x402600, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) lgetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="73656344e1d2ff7c5b69cc5986bd00b088487952c4e78d51bf2aed25dc75c33241db789feeccffa9e54de324152833a617190f018064cf8a59c073656af77f0948169fe6698c5f7ca5a807547e2111f34c4aa73c6d67400b25d685680ed061db58da8821b2c3ac3e2d6287d5841f2893188816a5e5f804c70ee6821dfcbbccb48deb74d9f30defea62ab82cb6a446db017c1a8aced6eae8fbd36a4996a8ea31ff1d9fea6bc8215e9864dc0266508083dc712e728f76278ed67b2d72ff533586cc1435b21e8114b727f0283e2d8b0888e32bdc893e59f"], 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="0b11d5aee6304bf21c761ce27a552a19", 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:45:34 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5500000018007fafb72d1cb2a4a280930206f50000a84309552623690400080004000c0816000400000000000000c46b7b31afdc1338d54455e400009b84136ef75afb83de448daa6927c43ab8220000bf0cec6bab", 0x55}], 0x1}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1) 15:45:34 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x1) socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(0x0, 0x10000000) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) open(&(0x7f0000000100)='./bus\x00', 0x400081, 0x11) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet(0x2, 0x6, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) fcntl$setflags(r1, 0x2, 0x1) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000140)="b15bce8ce05813ce0de1382429205b8f5cb2a6f5361ec4724c241d25f8d4847d45aea10b99590c897cf7a3cb87d48a35ef73b64eb2e29f8a497f9d4358f2d8cb4d385c36e001948b8ed63619a13455edad8540df658bdf710ab5a8ed2ea54f028c1e795f08779139ae718d83295e76eb6bf0e386c3e396ece7a5ff23321c079c626c", 0x82}, {&(0x7f0000000200)="e80653af0964163abc764e21252d238113df1b8ae8fb4643a350e74b28934fd5b85f20f2a12226b45b84df5b207653da0f0987b859102148c4add2cdb803c040d12d80c7ea51f47abcc372174e82bf573f8dd5d33151662120da32cf60dbdc00ef4ec6d0e847bd0b4f6df194f28953a2ddf40b717b368a5df60097036e84a5953d2d0b555ae91359885569a0aa45367181e801c9117ecb31e31008f6f406", 0x9e}, {&(0x7f00000002c0)="eb915773abeb289a72c011b231299d0276c551c5aad2b13ec8b4d80885318209ab0d47b041b83fe9bf47a4c53d213a", 0x2f}, {&(0x7f0000000300)="49036ac501a9a7e7f4c7b6bc244bc103ff1e7a4a91eac40ccead80bcf680ec1edbba1c53619583fb5503d52ec0dd4256ec0acc86ea474d46f6ee3bf5a4b02b19f78db364b5acbbd90f408403b7682db6c63941a5f9c9412455a0c870559df42cd1550a98cf827d476cb8c7a107b1ac300c1a9c41bcc20cd5e4ed73f9413ab6e08550bb9ee1f66ef66c271d660526b46ee6aba8f0dc0927f79668244adcd11f74297496d3aae5412364ca5f9d0f18c3d1fcb2bb07db391984ab87b07218089afc07ba7ee9c7077fbd73638de564d42927668cff5b16b8c0fcc4a7ac1d1a8f9661b511db01e9", 0xe5}, {&(0x7f0000000400)="e5d035", 0x3}, {&(0x7f0000000440)="f76d9abfa78d7f6e08202ac5d5a2ccb396a6aba955a5139a6b70a372521d7a4d3492c6822894e65c3804999bbdecdae8be0e271c44731f15680abb6fb91a16030968157f85a327ebca736e0c51881160678cd5894d2478c2129a7f52251cf7383bbaf02da754990b99685e5020e98f97d9376b6f266f4a48cbcd43cf00d1e8e7d7a39d5ed833f6466ee838503e8b849d9d93d60b3ece5dc35e6f429cf212e2478d66eae967f55b5745901b9a4b9e79e4423f56e1f2eb942df1722029b7fa023bf112154c9b4b2e2fc59c44da", 0xcc}, {&(0x7f0000000540)="199f7b2b0dd403cc890ce63dae47f144468861e659aff8a68b7a970cf522e525f1aafc58b7f2207cf0ea8f5c9f84ad0c68556649fccfe750568175f66f23d8b7cdd768e9d14905837f050b8faf6a6adff9bfec0195bdaf2d68030b1ae8a8c49f634ffda4444d5977f6652ef8a0b6f11cc67a1681d3086d0d92d57abced98561c8cc95b2dc05136e1f0a0a37cf43dd491bc6dae3c17428d0d380ab760bc745f817c1d85bd5bf3a8fd41f28e30", 0xac}, {&(0x7f0000000600)="34509ad956e6b9b75a0e55997bc48bf752d405b25dbab23ac97a41c3ec0d7fff68c6f4899da2922816aa0a555d7e9296c20e6184f49d4e1ca2173055d09f9e0207a69a09", 0x44}], 0x8) ftruncate(r4, 0x200005) prctl$PR_SVE_SET_VL(0x32, 0x1906a) sendfile(r2, r4, 0x0, 0x8000ffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) keyctl$join(0x1, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001bc0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000006c0)="0b7b26eb584aac96c74e91c5d85ef0d4b0a8892bfb260db2a2f790ef1481e6bf295c270bda6090a800a8ce29a3e880f780e9607e2cdc7fdbe0cf79cc917ae540560c33f07a9fd41ba4d9253f9c04b0923f22827279", 0x55) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000009c0)={@rand_addr, @initdev, 0x0}, &(0x7f0000000a00)=0xc) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000007580)={@multicast2, @multicast1, 0x0}, &(0x7f00000075c0)=0xc) sendmmsg(r5, &(0x7f0000008ac0)=[{{&(0x7f0000000780)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)="b3d9eeacb50fe408e6efd90536458c29ed02e72df25ec2f69a59d9cdc318110834dea1fb5b3d1b31e2", 0x29}, {&(0x7f0000000840)="94eeafd03d96905fd052ca13ebc70bea294589a7839a89cffec851b29bf2e8283b808fa5f189", 0x26}, {&(0x7f0000000880)="de06789f08d13580a3951513ba83f46f9a06224154dbb03b94ae829496ffc489ec20b8d496ab542447a18cc7c28ad1b86210f71a9853e735a49c810ac8d50c4e1ab7729bec3cfc1a1609aaae7aec9c703ef2cb762bfda9912ebebf5e90b84c90f6cae2f0a7a5ae4b83415fda3066c8fadbdc205578240f3244336c918df4ff43c4e36d7bc41d55fcc74fc85b52cb38d619712cf74425487d638c2a6eca7e40fb7ce33564dbd150aaf5a07ad2bb7603471465ae1542eabe2b84c396d2777852fcb3b328563f67d06a653e2ddfdf1eada809e095fe08676ba33dd5fea18bfa2dc4b7", 0xe1}], 0x3}}, {{&(0x7f0000000a40)=@can={0x1d, r6}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000ac0)="a4b236bd7d34ba35ec315762e08a191e59a00a0c58f922f8c0d47b1e55f2ff80bc0193ffc6b8138ac34bfcac565e79a51f1e5e8598323d57ad45373a6a178a753c1f0dd07ca757924ff987a1124e6029f245bb13e30433a613afe1f8a920c384ca3a847b10963d8c9230816d7e0d3b58f208635c62ef088e7f18e668399119035cc8b999ce5fd46ce3154aeec13d7dbed0b2bbd0f71555f451fb7111b6c363a4e336a1bbf9dfcf97870f891a6d555b87", 0xb0}, {&(0x7f0000000b80)="2ef0f90ebae52d9afa98e5a2f36c65df1041dcb23c57c9ba519fc3943ce3ebb05fd0d5d7313d6af00456015e88c7c514af0e2728d2402954be2adb92a0bc3a189a50b0e6d7219faba14deba209591f0b8fd114d08c", 0x55}, {&(0x7f0000000c00)="49266ea7f39da79963b0dcf6b0cf460b2426f89c225337410568951454db1eaea2b344a1d0be5392f3cf188226758a56e7d69ce72128b9a82d846184eff29f2d5f75eaa73066c54ca7b15badcf3257cabc21b5e3763cacc9af827e0a55e7688a92343dcf4618613a4804fdb7f66129dcd591c5aec81fb5933414c4ffffa8", 0x7e}, {&(0x7f0000000c80)="9ede2e9a0d259ec5e7e8164607d0524608d746286d4b9e57403608216b7df91aa3e581220273efee4cf0aab2872fb43865f196ba6110031e28ccd52e105d52aa2cdc180f85fa59de5305c01fb81be60f4d66125c9735b7e836e9470428828f3982ba8e88f7924454aa8a0b5e361bfba5681f7b0c7378b11be1641595ec648a69cdd2af38dcd1985d8b85c8f9e2ab034fb48bacd4d37cc5460cb9bd8caed8ad77c764ce9ac4df326fca1f00f0d7f45f7969ebae45ded07bdfc04ea7647bef5f99dcb6432c3d0bd5ad1a08e73195", 0xcd}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000000d80)="6f107b548aeb07086c7cceeab3373b2130809ae3ee84f08229699811f048eafc518284c65bab8352e4b95f92129401d8d60354ebbe16e209809eee5befaa4378901aebb877a2f7412a9434ceafc9f4afaca133f04e986b5229ee583dd0914544628dff64a8834807aeb7412d96d5f3cd27f4d4d671c60078b381c50452847e37e3667988c7f387505ae8b40c223ae08107577b3b08a6d9fe905ab453715c4eecd609a1197f67a5055486284cf12119ea9c9df422b191df2913e8b2aedd019bb933adc95721719b4c34c243fe5709e5bdddd0ccd4f5e5a12ef47d9b9dc194091bd740700e4889740eb2ab1427c78f5675a0cfcc610cfe6d", 0xf7}, {&(0x7f0000000e80)="bccfdfaf3ace91935f5e84134fba9f8e91341cb86937bdac0661830224d5d173cf3b8052d8bbff8abd9b9cc87f568fea86dcad66ef6f806178adadc980b1b74ecff955f762393286405e05460cf0d013e0184bbe571227673c5b454f55fe8558a32e0c5f072c3fbc1735bdb4a4f7acf8e4", 0x71}, {&(0x7f0000000f00)="019223880cc771ad25eca48178cae37ef21081731c4f02cbefe7d3ad863e68bb72ff4acfb9d927ed885c97443a86674910bbe067c9c7911c3e18d1e8d297c5fd181148cc0a9ec0e0228c6b9bf2f46af7c01a6166cbf809570a85b2f14f307da667ebab19a43d90e904ce5f0eb9df7abbfcb38f62902dca3ff34eced8ac6c9a141e987608469d9a01c3f967c948a1c4d138885112e958d4b4d5d8dd768c5bec62256559e8531eca92a75bb0d764988d8876ef148a064bb6f98b536c172731358e90e5260f217ea0593ec02ab76863e9e789a836f5d1ca974073a167b8e7a17fa8d0143a7159fd8a4884f07ecc4e6fccf9b6c623a2", 0xf4}], 0x8, &(0x7f0000002c00)=[{0x100c, 0x187, 0xb0, "9f06baae37ce60440ad5aec7f05314a74e6872f40009a603148a5ee457c813d55fda66e4d56f85c10975e9ac3302193688307c1e2eb3f0cb12e94f5cf8bc5c14581860fc6f67072a26a3280a417b9f4730b22208e8d144adc988ca5dc5e70e363c3cbf09cfbd0677f5a2b4fcdd4b5124a26c3018395eb6141adb195b3c040a0a9e99d4a33e83a9822c1ec9e900f4a21821c5044007187f8f153ac2debcd42646349aeab3dee8c18f24695c881b58132340759066dedc1df3d5bba2724653bfe15ffc31572780d008b5e9c63eaa6826961e6a081468f16c3fdf30f2405c29780356dec8044163122388c650b97761a799d0de11d903237f0f006a28363174722a043fca6b2229354990c3a83e0280c26a753bce3905c7b8e721b73b9d3771b58d55fb32f2a5b75876fc6982c11e894f5334642173d5a58365d9553440bf5b6a5691cd80d11cb40b93f91f4856883878744916cc05f31b60eb9003982a9d6503ac0fa26047f58c52bc77ac07bd6e475b2a863e08aef0a26b8db65e5e27fb271b0bfec959b974d0a3f19a82252a161d6cd4d22fb513bc0f6c7c1af11be1fb49c1acb6e1a626cc72b372847f3182f81d3bf13e3df1f43890d911c0a20fc473c671b761d15e94343eebd7d250779e26d6b6500f293c24a6f6587d7450fde4d721706c33b96bcc0ecfbab4e0a3012ac8ae3c615b2a929ddd1fda9f7f7529751fd14afbb79b71b934b4fbe3a88df39e2545fe7976ba3956bf8f415d7bc55239242990e4e815950cf92f7e214a0a9fc5466e668757ec3ca5940d703f177c1252d558fba851beada5645371d1d5a64eea07e3fd261ed81bd89396094fea5f66c98e3611187a03c404d354606bc03ecb887eb10c5214819660519b8f6647d6905f85811dba05ec23dd1d766475039f0a9229155ea33b7ae7886c659cb6daeadf1ee67332c4ec332c247ac33a921f42fc5d5d9a91f15ed9ea8ef710207dfb4fddf76a0654772dfd47c1b23f08ceb3759eed0fc4eb132392e998f3eb5206b3ecacb3a231e154e9e3cd7aa84f78859b3d39fed87a39913238f973e48d5fd0eea282bdffeef470fc46dd70869eaffe08dbfd44cd32f48a7048014f9552a8d19f4a0039f2e4265d75a71261d69098f7464104fca14bc0af4ef12afefe666f5e523c4afbefbe71bc651ff17d08a730f90568368ab47df1cc876298b1c9e362713cfedd7f5e790d0266e8443e01c8e09912929e694a50a08754483dcacb8c3b8123fcdc02f9343f614d46743c18a9128cd0c998aee8d4d5511f2660f882a1dc3eca37e0caed946bf071bc4b043c78f996d5234167565fe87bdbb9381f40daafca96b76d99c26046a094bf21df1a4acd9729030c4b3ec531dab635ac37641dccbe2d129c99152bcfe9dd7d4b5e6997dced89d816c2d10e05b4849ef68a8a15cb9377b61f34479926f073d85fc6e59800e35020257adb3adf33adee3a16015faf6fa118a0700b3fea555ccedd368d812a7a2216e82710a8353587b1ccb9572f0d0c474326dc1d11b8f468babd38ceb81a4f01536713a92b20cde6f8bdce9de346b06e2edd555bff78a967f81ccc65c4c70aff2f9c03c55df384bd9f3e03ce43265b5f64cbc293da35899ce95537f94aae858cc2c1227060bb964d8aeb084a88e92908e21c6e07e47d2710ccccc44cf473b1e51921e7adebbb8ac88c94de9a46c7e3f63ceccf9e6877627fa0bd0c74a04570086140eb4bcfb25b222b1f727baab1146eba6291cd5c8037c7da13caaec992cf5e38a4c6af73ce0b63c405b8c3054eb7d768f6fd3603d3f2e7b0c3714dc4a8ebd574137ccfd98b85c95d6657d70515fb322d1890812fb10d31f4afec55092e63e44005af35f6530de74566d022e087dd67ceca8b58f1fd1e19552c7509d0b4a84a8041fe5657a3ea2c622da1c62d8809f2831166019e9b1d13c468436d4ce24e8b6b73ab88508ae8f16948b11f0d96665500698fe8ecba692cd0011593663a6c9d64616d0d538a837ac6e8539d69a800c2d7beb0e1e21c20b63e07f4b07b81ef913e6cd0ebf9b1058aa87d96a7af66afb0c2998061bbee21730dca95a77bdfda7594a636203eefcbabbd6a8999af22686ce5633a1f8a3000a19767371c8d3681de07694b66a3ad9f5e27d3956b8a075d073e02925a1b6340c8afc94230bc9b23da18d04c5c1e7faeab20d0034bfd8f3ea3420dd6dd167a1f44eb3d81a1a49d3eff3e795656b3096843dd2c140a22c75b7580d91bda04e0308b33a4cf68ffcd10b57e909b9a5ea581bd10dfb68bd5632c5f69b489987c4716c38c281339c610d82a17feeda0e1d1490b4eda6aa31dbb83672bdb7eeb72a6e6b7cea0d6334988b87d3e2879371d22421af8895844a17281b0c3407f7fc548f23d38ffb60cb8b8aa5429ea67dc02b00319740da4d7f62bef1e6f94c8cf64a219fea675e35b6eba66de4cc65edd543fabc1b11098d9cdd73f3f4157391155c88cb401f464d44835ae2b2d08d49adb217e8a8d9fb2bf05b73f64fa757030e3cabd6c2aeb1f8ade3ced762826b07e15a52ccc5c8e6388f89f9260c7e86eb4d380fe4e692d44a4916d98a0e42e59a590719d4a635db92b53b90cf961d047b2d6ead04356a8dadd9cf226941a47888ea91044f590eb67d5b6b6a579ac7bc69e6d508d3180812d7a33c139a073e68463230211742ae300194fc2420642a87f1c52ee023ebb3a3073d281a0c36ddb10753e808e2c1e9fc2b6ba27f08647c9816b353b3b97476e9329f849bc02f1c297d622b074546bdac5e394c1aa2e668feb05771fc3c782b87bf1b945b75b911b1c18594d9482465894f0f1d50f6648dbae4a98bd6b7cc2c6a4ff133974a3a0ae648d9bd943539d5491cd7d49f786e9dee9b7b7fcd8bd92814f2d41f5497ed0cb6169e1e85565eac193cef08eecaf0fa8876b6c37183997f236df67d2152607fe08aca49e2cbcb9f3c6f4c6fad97d031e4ee4d6911334b29b7a4661d4971362ad36ea607648f816ec1465e4faf96496ada1a3f2e9d8f4bed21c2471da91be49f9d8e51d1cfcae0184cd2a0a72647cad49c49ade4346fcb1ab85a5b68dc1817f98fe3226bb32e06acf44533b2df7219d88b615566f0bc1d0ee08c284cbdc6e16e264df11b6f94c77fdf9688c24a826b67b5a141e3973017d7e148bf36debc22c5330cdd7c12b11a2ec5b98ac3dace23710068ebe400463231c8bde79a9524d8fc113cb6ddad864061b0b457195ea38e4202e2ad58e167b5253604a85289e217051bbec67bb154ccb375946583113b812999bc50cfae7fbdacd1c0288576c39766e86dcaa18f8ca4a30cb03b6a711567d400f5e7530532db01dc80f2975260785d8b92906551ca0d4645b7ffea1389289d2dd19b51ee273e33677f3a1d170228b462bb6491fb63582225b14c4033b58a7b7aeab661c6b66db46285f98a21249aa07ee540b7b8eaa596bd6d85fc3862351c64bd51df7fe888845ace14561c11168261760269a649cad38c3bf78294489eadd81d2309ee879cda4782d29c5c51b0d3adf7e162fad9de47e97634e36732d6aac7082bcd9ffe64cd25f2d194d0019be4786450e4c6c2203e5d24605692f9a17102d4806a9721fd39944048f2e97dbfb7bf650db4ae381551736f50b305604b15c57330c2b8297054628128b0f8da5d42fb1f513a07d2d536fbe0dd798bdb51424b91e9a1694bb91ee2fde3d2b4ab205e2ceab37b883f08142ea455821fb0fe66f8f7125de12ae2224919c75471f095deb3cbf020a84cc34760568818d8180cb12b297ed61584e27b801c3e6d92a4257af64524a92d82459a23aef5a721f1667f9ebc5e51eaf4045d4b138adf6d7e9d087b1ac4b66ef14759caa91db3fc658be0aca0949ff8f236ec95c35990ae88e82c2c29eef2c4de9fe9bcf82a08e417265d1d4bdc15d2b5f486a234ef10fb7f3c668df963deeb969b590259b5b106e9ea1755ddcb41a0e3c110ca85711e2d8467d7bf03eff00f5e91dcc02d12938554d57558f15894e4b61006aa22a62f7f28357e1292ef4383c258360ded54f37f2c4b6dabd70351704a04adf4e37b62ae54d7628ef26f8737b9ad69c34a17327642ed2330da3394e33d544e28c706df6436c60a15cf62c3b2bdee67b6ae9ce880032a2f8b148b9ea055f9a50788dbfeec6f7ee51ef5db0e62ba37ef2bcb86af830a783660ed9839dbf884222b16465807aa5ef2122f21a02bf84a5a054b0d9e58960bbaea166ca2dd9d24bec8f4b634c61519feac0132900341145cade2038d4638f46306d29ba5a92282f27fa6824b2d8ec7a5425e0394f0785ca1f438211773308ba123dfd8e3c7742af62726bfd1d22d7c5b8d5837718b6bb74d5cb2180566bc224fe4e20dde779c38e95fa2b96ee54628836d4a64437ec30df97cdf060d6245d30c764e508f31e89f7e38ef8225050b00c3c1fccbda13a08861d2553a1e5c4fd5da471f6cf6a934e341ba0c3d00a035fa9c984e8ee1ccf89ec7bd798a0c4fbf4c8b7d46821afd230240f8ef5f95b2dd46154eec4e9371759ce585e50267da3db1ca76f897344a2bd92aed1f9e4b4aa368a51114592078e41cb2c670a86618f60147e9248d02db1e1a8363dc9f7f9efe74bf86da4714ffa0d49505410d9e4cc2d645182ae75814e5bca478dc5fa6217ba3faa83b7bb937feccb6a1754da44c940e566190bfee9904c597c57f079e86103906cbe89637d51ecde59f34daac376e1e18fc21f83063b2585d10a642b69e4ee84e79c3d4d2ad1785e5e179abad861b9335df496037097349a03e6be0018caebc5105ea2d4c15dd41a1d7fe90991eff2266919d3e7cbde4c142e743735792c41794de270f6c454b01b36ecc9fc25585ab539de0e36397dd0f38fa53a8f924852d6f2e5c9a05ed4569103e4de2deb1fe4af1fc423dceed862381d90147a0bca1a040bcd68fceedf7959c64f442148e27c6997f54a93c5dcd224589cd501c9ceef027075bf83fc0b975c12200b51f72b92e0fc40278e77ae945ec1de14fe9fdcba7e53ae3295a125cd4e8600f7bd2b0a9a214d8406557b1bc10e7dce7cd554e9b8610858340dbd6d35edad2c31d603491cb231d289b63c509cd96da556990c1515cba2a3eb1fb81881ef64f243398ff82a1ff2105798df52009f59c63c4d92c5db0d593e2de60af66154de85f736332085fd030decde4b040c378c887c072b68b4abfbed91ec9d875221df4ff58da13b5040c76ebf587087e245156283b85088e19189e02245226a5c68c1800611b3f0781a3ad8edbcbfe7cc3a1ffc072f7d9c2b20cfec82c516f65e7f5e7031fa3f0828be75029dd38f3c1394fa8a204f24a78c45ee7fe367634fc94efcf03c9afcbe97a7d7d9966e562c30a6eb0719677fcc8de6cec1295ea6d07decbc110491a27bf861eedc2277375eb77b1f80e4ab686194ec3293160de4bde7ee768754de64b5fd36f4512861bf9f156c2a77242bc5ea95151fd543d8b14a99ec2e7e7e3b663979674d50196d6e14e3c87c29eca6504937d5a2aacbea18cc1e6bb6aea08016d2ab4127653d16765750deacceffe09737b0f1bc8d706a2f38e2662ada33407d0c49436e1a709828c30d232b437b5e7290c037dc05bbe929e8e6415db01c5b1909bc3f851fe393dd5705604e7f811edc9fb58979dcacaf1a9402e9b90905981e70c2953aa2d34da3630a8df495a6aa26818275a0e6f961273f584980c48645a87f5cc524fcb61de4334359f4377fcfe24f94898ca07af543acbe338bc9350587637bacabf29d183608"}], 0x100c}}, {{&(0x7f0000001040)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000010c0)="7dcb64a12c8ee5ca2ce27d26dceab6e13f8a4c881eac54b76eacb3d5256d56fc278d36c81c5657ca92554664ba8745a95bca427d1d1820b7cd157fe6ba923b626ac873e717b0eb6a855aa9ff4706d9db9b393383f569ce34b3995b73fb83ac44fe0adda4022ab4e9e2c44544adbacb12500b81743f5592d8ebe75a3a29b1a9b271166e7d0a579dafb347339d9b3c2a883f0799fdaf20f417167db205ee893eace3e646b6b53f619cb99666bbf8b327cb8e7235103000d21c", 0xb8}, {&(0x7f0000001180)="8f71d5f684e9dde92248e677c149e3603e69e90a856dab037cd6ce8a10e6a64642d987419b04dafa4833bf5b6acf627a5d3add0fe6dd2f92f9b2a1b3844b982db7b40e9588680baecbcc18837af507cc29694d6a45b207ebb4c6d41a2ab9abc6e48a2bb405de2fc7e785dc43fb8f4843222b529dfde72fa79e48e8e43d98537fa50a8b0432656cced31f991081a6aa38f71e1949b782eaac1f4f7845d89d1870b7e304edc752228e12e8aa67052805c2bd329a98196f752f0969edbfc909b7071ef5f854b840cf89bcda78", 0xcb}, {&(0x7f0000001280)="3c00c7a93d94722f9b0214ce548f72515d131eb5675a953eeda8191382cc363f7bbbc87c45d9", 0x26}, {&(0x7f00000012c0)="e5264eecf052594607d0ea30968df669a5768d3d4a168ad8f364b734e21aaf2d594895d8a7ae9e4f9e496752cf4be21dc85f95e08ac9960589da1f308da1ea845b1925d275e4e3ac0f2a78cedff9a0e7352a17236348bfed6c7b5a1718237cfdb159f24d9bf91bdb002e51a9a5b4c5778e315d4530e04eb562e3c9be6f0ef915af97cad471cd8830c33865d810d188b164ac25ac6490e98af097db12959faf37f9de2fdb1915b1fc84494dced1c783e68c", 0xb1}, {&(0x7f0000001380)="4372ba1b3e4da19ae62d529fabacbe3d62d6b2dcdae82b8996c0a6a63d4b5fc1b7511f4f1cc2a53ba1b083834ca7d5fa309d0fa622", 0x35}, {&(0x7f00000013c0)="9ffe3ba3821ac5babf14ccfa5d5a248f43f5ce72719d82e2b680cf9befb64b298ad7283656e85002d6d2169e8ab48bb642e79977dde4cc201635fde4131c1561e654301eab649f32875af6d2ec3a8692da0f537c1a77808af8a147490b78635edc7087303a1058866f2f7b496707de9f9a6e6bd5f7652bea3f21cb8a7ddd50519b02016620fa40690fe5dd7b1a6a175c2e1360c9f36400e756168695f83b6b0b5a73e8f35ee257253e402f038dfe1674bfee011aaa174ed830af291642a5a5719afdaa5e02c5f7b3560e1c7d26ed97b81384cf6e9b52adc760fc1d8000c979569fc45c1a", 0xe4}, {&(0x7f00000014c0)="0138f21ff5fe063ac8867ef04e44863344ff50a49ef5264eaa6d071c52576c40e57cd647489d40d4a49c21e9e8c2d2920b925d2c3db1415f125796185c845948eae8df8592592250e442fa4c573fc0d610ccdf8a1ebd80ace06e83b62234b75d9c1a3c72feacbc59a9d315ef333379b82ea4d8b709f0a2a1e02719fdfb952efa4cc0371c031188be3d", 0x89}, {&(0x7f0000001580)="6d5688fd49d9c87682195238742d90d7104c85a37500caf9bfef3511336b4b305aae", 0x22}, {&(0x7f00000015c0)="18ae347cc482bce7a81131282989458ab1ed1c1070176bf8ad44f7430d83b5cd0a21ed3e2d06cdf66d5fd53645c23bb121ef9d96919dbcbe9517fb5bb7f51392ac71ea1dac78963d6cd9fb5da0f898dea8afb28064c987e86499da0cb25005facfc122e22e64df4a9a0e3055fb6a3298d4e8db9535d138e4491d3e1630864759fb2ed3cc91eb0fa66b1f0875c17007d67d4d786b8b53dc463faa35c4094396abc09abb607a84abe7a4e9a08aa29f818d61eb2fa6e163bb4e90f20703ca09b28d392ae295b906a1f9a80eb9724df933784371d315641531e5d6f68c6e991811b0cc90d30cb95db1", 0xe7}, {&(0x7f0000003c40)="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", 0x1000}], 0xa}}, {{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @multicast1}, 0x0, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000017c0)="9a915ce00822dc45b6d1c326033c1f9dd24af4924747ef5aabd174d1ce4d6229a0f83dba7608398c0cd93a04d940e6c3e2ddf8329a2e2bc4eb345ce45a961af96b81f0c850eb1068bcfb7b48a7925270812b6c67244292bffdbf143ced2d654052e7be76d706bced0b118648f01db8aa4602e57a66765828685b96a93bd5a3bd39e2a6a006368f2b01f372da562b446aac91836b836561fe4c52978218fb2f0a139f817823c2cd31ec279bef0a928d", 0xaf}, {&(0x7f0000001880)="67261b4a542acf06d135768ee62ce6e317a8617e9d03af4eb648cef3a1161480f81ec567818eb730589e87e82355a20a4a5a20cd5a083f107c5162404aa3259f015ba60616b3708eb7285ddc46128bb7baaabc1f7b59590d2a93ca807ff03f7e0b9eab6c9169cd6e147ba38c64370ee223579c9d765fabe0632edade36fbb75232684e01050a9daef6cd40e95be95cba387734dccc37736152fd3eac3b536eeed08c128b05aa9d793847bd103cc4bc406dbf230a8a1a07d259d9634146415b53b22cf02a4a25aa1151bdda2048c4062361cfaa9bfc084e43b91627a100d190dfd8f52597643f4cdb763ce2c466581de36d", 0xf1}, {&(0x7f0000001980)="2a794e20477fd18b8e14c3c3c5e23950450001d263713fff5d693f0ba876d8f6f98e773e95f6b02aa535a699428590b1e525af0510511a3264ca64b0f3a56dde1272288df57baeab8859251a5e0b2442cbc9371ebb64427af32a341b24420820be67c35a416f7df5c5d727adcf78f88681ffde0a69b45f82d06622db2b6c48f6d8c1eb961d5afffa7afad311f5b2ac355dbc31c3f1385e786d927d0a9a0685d9a27d960ddf05d264258b7e89c02456c82304c5b19c7c05415cd5e4caced9afeed0bb7c619f3b84ddae0e0eb0d3b407136436eb7ba32726c5", 0xd8}], 0x3, &(0x7f0000004c40)=[{0x38, 0x11e, 0x8001, "a1ff55fcfed55fe73dab2814ac419a6b5281a828e136ff213ac8241ecf3535e8848a4b918746972738635d"}, {0xac, 0x88, 0x4, "e8f63e5112881a548ef7a9a46b25850eed301e62ea0ee7d1cc54e7df184c3a49bc1fdde61821df667d5e9d115be81c760bcfdd5fc4c00f0e77ddb59cf8a69282cdf173b7f1d20dc5f6d038fb1c9b423f8d5c4a8d6d948fb7fe6321acbb3e5531f69589314e945338a80199e4e71bfaf1d3ca8490f14334a443234f1c051d6c157f073e9ccdad155379a81b93327f65400c9b8c130c4e353de21877b043"}, {0x74, 0x18d, 0x4, "fc85319c53f068794640589e2990dd43c8e814bdf1320770527d7210164fa97d065dc021386c015c2a3a335405f5b256145aaa40e5da768ad8ca0dd3498fa966c1e8950859230ebab4e6e19d9a7210e12f0bfaf129f14a6e9b12619efa923dc076f3772734ae"}, {0x54, 0x103, 0x8, "f574d6bcb0c7cdf52faaea396da6a3240e72cc2578bff14260e0205e29c18f5ec22be4b7bbf4c82dd14e35492c800c40e09905f17960be89ccd213f2758a55434dc4543978"}, {0x4c, 0x108, 0xffffffffffffff48, "e1a399c845fdc4e5e2dcba38365ee56d6a0dccfe95dac168cfe63cad1de6bfe350cc7c7536632890574bd075ba881258cd6dd250ae56c16e61cb02506d4dbdb3"}, {0x10, 0x102, 0x6, "c5d2ff"}, {0x8c, 0x10c, 0xfffffffffffffffa, "5cb1701e01433447ebdd3d42e3e7cee6e5b4a6af39a4d4078807f573ef3e2cd2728635ccb8ca62e4fb85bb39e528c9a6ffcd53fbced285e50caea71dbd7ad327fcbda885a25dff3aad94bfdd1a09a1fda6518100484d1a9dba6385e1d9b1bf42d8e2547e891acd798e43b658015eaf1dcaf30409d27618ceb8d1500c3877fa"}, {0x3c, 0x116, 0x8001, "f760cc3b453f59b518e65d828fdd41ed1764e7eefb9b5b71c2116404fda4a9d1456ef8a59d8cd3004a53e9d5cf"}, {0x8c, 0x100, 0x6, "468104bfc2d35a16c463cb081e27e6b251cc38ac46006d2cf437c00669741cc9e5f582cb03c248c84d09280668efecf0964ecaab5970e5fd04bb175453abddb344a7c28df62094dab34da682b2d36f7270307bf4aef28669eb2f008d5ee8043afc65bbe44c0651e95b02b0110622be92137f22c2e0c4189821dd9e32ea2861fe"}, {0xc8, 0x113, 0xa25f, "116a3ca143fd0124cceedd7d767dd39a0c3ba96df8cff4105e9cc31ac1c14603111ec09e021d88d38f0f80d0a39d6198e73826a8a2be11dd1b05c13579b9e615919b0821ce0b777edb0b02c7dd39f151f52c90aef5c779845715cc9db7e08e8b1b9daac623a4ddf9c668439a1ea7021fc07393bb7dea83c08f79f4c24625b94242a258e127a162e98463b8d9ef4782c312f014839f0281d8c60dae0d8e3cb27fc933a595b80974408d178b16125d627e6fb4ff0bccd5b56d25"}], 0x424}}, {{&(0x7f0000001ac0)=@nfc_llcp={0x27, 0x0, 0x2, 0x2, 0x485660eb, 0x5, "7c03954c2dcb54b18c5a068f6442296f8362b5787f00754b24124d11d64b54858ed1483b122b27097274005b666f35d61f2d3191c6ed1161fe445913d9babb", 0x26}, 0x80, &(0x7f0000007380)=[{&(0x7f0000005080)="1034b0852fe49047d4cfd55335740a058bdc8389628d38f4fb9e8ce462011270dc967760e8b898c5ca54add57e16b89687bb54faf3f2d2e22ff50fc69ff5d0302399b9404b5e758c1aa22ef7c740f7875176a960cfde3d86c087bcf9d95e31c612535d313caabc7c7707e3fbdb6911e5d05013bd09524ac99c85600468a34e9b24f324a07b648f1758c96d783e32c15c5b8155071cfb87ff5620be8a3dd848c9d2b0e361331aef239ce646501f4443dd1327789a67fafefe13ec5db80ff9ce7d0d4264f11f5f31234d1fb4", 0xcb}, {&(0x7f0000001b40)}, {&(0x7f0000005180)="2fd8724ea60fceca20a495f84a169263a9d93aaffb7fb9eeb4009308da0fb416b889f39da401f7690610f1cbc2ff08ba491749c0a4ee861af8f310eacec1277c223bd343c1f8106996af996ccd95e8a4bec7acea61b17c9570166da62d4d1ba4b55088ca245adbc3cb78", 0x6a}, {&(0x7f0000005200)="932e135b5660369d60cbb124066d63621091f1699dcb5e0cfd77aaa376bd0747109a25b20f9099f686df45d264d8ff9b93aa80f968eecd44cc8b87ef86bf06dd31ef1fc2a109ea99003f90150ab8193540067bb37f3f3d252bb2bc", 0x5b}, {&(0x7f0000001b80)="e182cddf045da0167aafb705e9d9e14e03329a8fee8cf226048bfb16c5fed0cab4d81d332495eb8b8a7c7e9e0095c523c6bd065c", 0x34}, {&(0x7f0000005280)="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", 0x1000}, {&(0x7f0000006280)="46b0af063eb132fd7b9344d4c8a977bb6129a09d732ef259c2e14d4567bd1ad731e0ae3c2737220e602701acf11e847011", 0x31}, {&(0x7f00000062c0)="092dc992d5b065b41342330f316ca27bf9c6d4bc350e9e8ab005fb8495690a9204bc057103a041ffbce505ec5d2683ff0dd60e63c3f2211b396185460ddf0c117476d0789a61dfbbb0440b2f18a652b259868dd1a4265430d1168825e62dff31aef23d8b75da6c2fdaa2934d715aab0b5300def5fd5f1228ad61d31acdd0ee4462676c6cd901248e01fac6ca3fd37ca9874f7387004ce3be1edb48d5e0311d98a7", 0xa1}, {&(0x7f0000006380)="5407aa696dab570973f8d2ae4c5472b9551a3b3279bc55d4aba66ab0a5e4098dbd5f38ebfb50d977704be05645f7070efce573d2961961419b0dfa30c05c6e3a150a7e9ad70280941cceb795124049e5604efae0dd6331196679e76a28945f02d15202143cc457dff80aa8b450d7c18cbf5b5979900678436c94ae1c1c3d5bb935b85d37727a39523f9501ca987001e319fc25141c18b55831f192efb8dfb2d213384535b19e05480d1c7c8c2dec9d83e9c39593996b7a12f90d75526ef96c14b0968164e3cbed5c64eb46e5fa56f04dc06eeb39b0c86584d7beb32a1bf332b3dfc552695efcbecf0efcd3abd25a4aa07101bfc4d30bc5449547fce8ce20d6b08d745f0bc4a323d328b95b40c8b074e33957228a13509e272ac24efb1c3e1b4de58bfe0befc7d5b3dc117e8363e13bc1b735185ab290ad280d5f35a65a104cdaae830d77ab7b3b1b71e179f2304590ad40d82ee4d41ff7570370437a14f2fb67f3172c9278a9643339548b1db28d08714153be16648d94b529e68e156e0a29707e5d3e6afeb937bff31b9aecce4f3ad74d798c26e0e9369b7bdf3274f98acac4c466418cd236efe739e02eb926dbee13f915e53754350e17741bbd86b9f67f72344e78a9d6cd7bac7f9b886e1942b5a2224e21316ade4f83c66f7e4ba2ffc7f3ed026ea71eb5b5c3aa5bbdc1002956f5a601e08ccae442cbaf1a0d4822a3d2e50151bc6f08de3bdeeae8fa566f5cf27ad7e2a431224dc80a0127ea0a33063ceabea587fd2ca79e0f82d6cda2fbfb3419adf8b4ab6dc2e2a284ca55e1ebcf4d15c3dbc41955785aedfc8909bdf5cd984d2792422b53f3511c4d8f7921c63a6fe4b5eb429c8f2b286b4fd61e8fce86ac50812f49a54ece7d10d9a4043001bb1ac6d1793fb9673e040500093dd40d75182556f230d58360fbd3cdee4c5a493d894fe1cb146428607e5269337444b4426f2a13bf461fef03505660204a564e86ddc065fc2921fbab1507221ccf0e5e7a833fce8dc809af4e10e7412db8a5ac74fbeb5a808694aca3318f18c73a16bca4e2e0f013178ac0d40de6b43d4b76a0b3fb6a2eeb37912ad02c50e72ca63b35bf27bca897e556db83f134eb603b684fdb70a211584688fc10a92df5480de5602354fd58aade37c6922c76ce3501e8952dae14dfff6112a72b91f09e5876283c366fbf16829f97251bbcef35f972d8ddcb7e25c1869e07cf76c779d5a8cf42d13b1ea83bd87655ed2e52532d9ed23bceead492db803b386d24825a21582868113d7dd2fce9d4f14a1466126536af97e45a50c7a9636adb51bf7c6db546e07ca0d9eaca280fafe88320b881c2acad8937b0aa63423f52bfc854368aaaec3dfce456f71e1324138daf90603eedb1323d1887ea019d0df7c7c3e60e0403dc1a86f4e64b4964e7a6677de23eac6e4a3b33a18669a74731a0e9c1afbc47c7e3f672518fc6f57f13228bc739e8a06ba5b26032b4325b0a2140bb23562f70d074cf54aa057e92f1328ab1664c93709c7493b0e428174200c651fdec7b55d6d18cf60112ec235415c08b2cf6eaf6400baca198cc0f1b7110d3f2a87660f9a7d82f4fe134cf46550766b8c0549780c8a1c0b302480e25dd4dc3d5a3fc8b3ed52afb41ce360303818a8f2ba8fb4fc70724773914375f5240adc0032a6aa401639b6ff3a5657ca77759ec8fbdcfa2dbc9fc2f68a7b710be9fb56aac3f13ac8b0858e13c7c0fe4002c928be5a08e4664102eaf1c3fb8ff1dc89853de7accb49561472b8540b330ad41f3cde37b27bebadbf2503763c37e362d14794ccec8fb35a8e0e38ff07611b17c668e5190ed11061d67113944f82e4f2cf1a9351e36dc400abd3bb310dab5f401e9d32aef0a343e719e88197bc8a6f0d81278c7375497dbab38d68b4f54c7090755175012d2fa620a141c0297b40d5751404d51b6fc233ade6cb2e7d658f3cbc408f52acd2b6894e40813989fbda57157ae4eeeb4d0fec57611aea514269c0b7d872cfa9b3529010c0a2be4d6fce517e380eca2d3d48d40655f9aa0754aa71e69c34d5828452794365c0d47d170e4a269fef7f35e34971cb071cb713ae3d6b9fa782cc0996d66ffb8a72a1c0b66e376dcaccdc452c510a0866857182e7c36d119b16d44288e32c6fa98f7c3699a03f757a55da9353ba42b6f22d3cdd73cae485f3dc461cfee807df7558e6cc7a02074f3bbb84d1ae5249bb109a40e1e9bef4c62500436e4ae971b2dbbf079cb98c5b6910fe09beed61838414db80f0e6214ef55c0b9df441a93444af6740a2cd6bd6e5039f60111c18e4129ed0a8e53267a02d66563d819efe5c4a6831f12198b8a4fd6e548b14d235bd96559d76842a43b37638a39ff5401646e61eba45f893c3ede0b44d92ae7178b00d399012cf6c31f392da30c1899becace4c1200336c8465182e3db5f5cf893ecf6d66acee7ca0b63aaacfb6b848f6b560bd7025ceb94808b307bd4dcfbd25ac3b2ab4e8f8530e6a64006cd876bfa28c17c4fea26b4f8dcf767fdab497aecd9096616a8c9c29e6427b5144341b79d8166d279f8a7b84e8fb4efecae903757c7a89d6d8920a7caba14c067fa059dc604a34ca6025e3c71db8b8e5b62e7e029943f8635940302cfc4606aa5ff35cc3ac90f42b92841cd38c994204cf0c87a8404f3c252d8564803d8739d4df8b86ef22c8aba83a274f878276a7f47f9b810ff62fef82e13630edce7f8c38aa1037bb8262cd77ed735231e995144adb517054ecdd0fa73877f4b3504645342394ebfce1799514f09b99e1031a717a7af5c215bdf9a93afef9d78b6050292024678321371e23d780fe4bab21120ee8f8bd6b8946bb2c716c1539f45653863b33b8e905e627b8465598bff438254de5ed0fab4a4ce3f2775f9e17b6f7ab3939cc32dddcd661c6f26fb15d0d0d88ab7a4938934f11f4c7dff310c45e5aa1f5c62b8b8371db7b333000f59d7160217ef8d443f31eec00d09d21785460fdefd16952fa570d355f3e915a1daaca30f49dab0809289767d80016ff5f5c5882d5f87fc830dc7628be4692b3994d05a0b17af58d2da56b13be79b44d4945ea76cfd9f7f8b68030a6115dab725b02c9b285119b1945fe0dd4bba31a30fd81b545d9ebd403bb968ae83127051b42a3cb71be977f2a24a6ad8a23a2831e7fefc05c06f1d6de520eb1fa819f2c5a11136216b0260f68d5b5a77d10837caee841f0e659759822f8126dedb51d1716cb9f7532355eca145d9f0090e6fa5248828e82137252f0f105a96a151a2f0477920b9c1b0fda76efc201661ba5ce2d9f5d2efec447327b3002808a0471b13804c2ca0c670ea8b214fa48a81d17a6e718f949acdbc522ebd04a0396ab04c5cf3f8dc8e22f736eab1ee9a9249dccc1a81df746900cab46e1e0238300aed4009fa17ae44453d0d4c369cca558f1b2941f24be15f8a7edb8fa96e70905b54788dada301063a22eb48f2677b919749f74b6eba387ff0fb82f718f7608aa9ec8e6369e4cd00e4e88ddbae18b63d6d92556548b80c2e152ab93760ab113c97536ccddaa6d06723603fa7071606204e0ea0381638afee2e2a2e8d01fa09137094a8870f0011a2a86faa451ea924cff4afc5d558e0b7ff0bc7869815f005a817925faebede163929c85edcde5b41b6663be552efd4f1e6cec4530ffdd72e438843e7c4f2bea095010d22f2b399c8bc74530e31d4e3db72060ee4adc6afdff2fcfd65dfb7fd7ed81d129aa0ffa7c94507a9d7c256e5644c08e69ad3bdefcc67f8564bf305a7a045318b8258f19747294f476b3f4b065d93ee64997ff4eec3d80d424e29415c22f761a25e68d3d8a06f60586e4aa532f900d52749807897d84ef78b330cfd3966eb7f3ad64377ab70e70839edee695fba552e44607a6ebbd028c9420b70aeed8856393cda021a3af1d2687eeeb1927ef577d410ffaf327f19008163d9576dc6654b067f43e02161dad65f2ad65b96d71b65f0471cfa80c801d35317202789732d6f0af53f894a605ade4a41ca8196bdda1bf988d5bcb20f46515e803ebb03f10b1341c135499d59319624908bb2b386cdaf0aa866b52234b0a787c6348f9e9edb3ea55beb85f3a0afe8f15ca28a57e0e5a01f324199c15a3e6a96ba9a1f4b77af35fd069df9cfedf62e22454915e8e8978c89a4b3456919afe7605a6aeb8b67a72414d8ffcacfa96945a987a0cfa8d5e6e0a3b3d10b7d84120b1faca5623381c11c081c120b7f132a122bb3a5b4dc619267b63398f445afdb7bc45833e7f617940f923b80a71729016f33e283fdcc804d12c504cc73608acb5d36e0fc9c64a3752faacf69e206be00a05a78af48119646563699765cd791fc84b2dd9e304053e8004e7e12cb0346f57f75a87c68ef95a13289b42c90246bace231b71fa53867150d8c393fecc2b82f94600eb854f3b3ef394d605e3743966ca22add179ab2d529760eb4ed855e5704b5475d9b8d70468dd6f62bf40175f948b77b510b51687e1a0f786e1f1ff5030094a68c1d89f43d6e6dfa50068bd0fe318e720a1a4bd4898d9899bca766df31d6144a7e8c3fcf66d9ad22f986c67aafac66430f5768cd27bdf4033e54d0b336d919a4f77efc47a7cdca0292efcfeb3b7b227867b6ab6c8ca6d3f3389c9a9b8cd91ab32f977eee53ab82642bbb8585db011ea1820bd559ef77aec5237d905c10fa2ba5953ba1cf5db45a56e44fd279eefd083b8d75ac817881b5911cecfdf84878f4cea0cbf78ffab90644bef88176e36fceb171192b4667ebda6f63c646cb263e15512068b2142deef91e7bd8725bebc8a0f83956261b58fef5a881508fa92e6cbbdcf128ae71de4b29bd2bbf7e4d602a57cc778525009db588cc35b53e71d0d792f945e2921f329a13985e2ac11f3b546f14d537118b0f50a03f2fa993d50284562efdccddd2923888310071c99b9fd96dda7f0e2adeaa957f091e8f7a671a889db2e599bf49a2c7dd3644d8262ae1a16fd44f06ba73e6edcac0909cbfbde1599d77b18d9f93f4193078a67df5a43b7449751e1b12e69587b06b53f67b3eff20aa965241b4bb30d02b52963eeb146e1c09d85b077f238079cc6668efcee5a3f118cbd132520e23d037f92a0122add3c43d4d0298c20f23fa5b41d5560faa8852a3a1457ed5bb838ab0ef2be736d1867364f65dbccd55895d89b8785def206c9c1329a78167cc61bf359f2ede381195b32f996b21690259ee89a7dff6c2b542dfa00048d064baa1d04f4cf8c5d9aa1eb3094a18eb1b092440164cd83afd893ecfb46ddd2a2ad56a389e108d66ed2a31b4bf2336988fa2fc18474d2e85c010904520bb760c7e615c819baafd2ff563bfc1f3fece46f23d53a2304b4564cd293b8657fbe1c8fae7d254d81ac71c6dbdef6fdba7820d5229119ca2fd100d5d378a4fbeb8015dea79b042aab9e22a611adb5563b9fdbb0eec7934d369b766e221ed87c0f147474f26f14a7c6f5628dafa60d66980728caedeb4f7d36085b49cbf76fe876cd4818725baa66e76fd6adbeaaba70435ad2ac8c533224fe45ccc3347cbb2290a320f7c2b19e3a47e085ad7ce2d74c790af4402e04e1740427c2cd6808a8a71c05552b163cb602348a0517da625019121196426dca68c4fa3034f810fd8341439b2caff48e82d5e82254a96d941efc7fdc4034583d46fe11f611d000b96fd81b05be50a5dee25d572fcacd3304af8119840ab0d1c16e55dc1503b91d63b42cb39e1505634c7774a8e661674088d9aab2d330353fa38828407b46af17", 0x1000}], 0x9, &(0x7f0000007400)=ANY=[@ANYBLOB="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"/381], 0x180}}, {{&(0x7f0000007600)=@xdp={0x2c, 0x1, r7, 0x1b}, 0x80, &(0x7f0000008700)=[{&(0x7f0000007680)="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", 0x1000}, {&(0x7f0000008680)="49be4228b6c8cd434428888f701c2408743415c8efa1827b921415d85fc4e172289e68bcceae7de4ec72bb34067d70f27552dd219e06f5e1720aa49e0299eaa6660e36d51ce5747a0bf292", 0x4b}], 0x2, &(0x7f0000008740)=[{0xb0, 0x0, 0x446, "40903bf0731878be207a8932ae8fc8a7d8425b87134561f2afb8fe3332eab190659dd4ddb697af9a8739d54b5511ffbf849a8b62383e71ef4a71faf7f2a8b6d618bd96f39600433eda59473b1add74226631186ee274e854b55fb9ade8941c6f70b9254e6f028441c601083a4ac0fd69a2c79e8abcce8b18e23656c399a8e0fab5c9786949a942ca88874bc289406cc85b5eccbf37314dd58a7d3760249ea491ab21"}, {0x28, 0x119, 0x2, "870b8d36a4c5253ef20ade3e57d613bc9302a626ac899e05ef7a"}, {0x6c, 0x108, 0x9306, "91fc32c88e75bf2db27517e1d67314770d4bbc0bf091f487aad48c4c217694453407dcdecc2772fe307ed7d2968f4ea1e151ebac3fbdfd1983e716caa6389e4b87a2881ddcb31624d7b551e977596c74d52fa447a561d9e286b6defb68fc"}, {0x58, 0x10f, 0x3, "276c45d26fc32dd99fb352160f02674ae0275b72cd59b49228c5dcadcb955480ed84e1811397d45d33c51c2bcb3af7d37ad8acc8f4872a093f89283f28fab3e8056175a79c52a96dccff"}, {0x58, 0x11d, 0x6, "6dc9320a699a4ef24573c93396e30361b0645d3bf9bec688d4a61f82760af4d6061ebd3c5d1cd61204cb1a901acb60844d188b0ff8c8af607297f46d27f9c218780f39e1a17531baf775bc"}, {0x44, 0x11d, 0x2, "afd04c1ae6301d11dcc692b16309ce2cc891dc7ddf4c6b9e019658d58ba7917dc61f0783ef404275a65f6207ab72a9568601742e5f"}, {0xfc, 0x3e, 0x101, "daab619309c3280d1d7ed7dc664a8181684368cfc4f9c1839a6a95120e1661b9824eafbea2783764958154c96a7ba6c4310162ffa999fdb25e94a505413d9acd451f872e7d4c895956f25c7078270eda84382a0664893c2e915b07c0d638c3c661cffe3e1661352b37dd0ba50a71af9ff1abb3fd20cd5ca90804bdc80aacd9284c8cafe3110a056a92c9d340afe2137ce88d5308169279658f2c6d2d3fe25e9c140c0665501835034ceba348dd84e19196c95a8d1608f378e2f078828ae33fb941433845767c8013c1173c0e344a0b3a4e847a0bcec1a388e8a0cf903763d3ded5e235fad3772c373b1efbc9999c5b04"}, {0x18, 0x103, 0x8, "eba6b16223f348ddc71682"}], 0x34c}}], 0x6, 0x4040000) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x404000, 0x0) 15:45:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00\x13\xc5\x9c\x82\xef\x1a\x0eQz\x90\xacb+m\xdaJ') io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0xa000, r0, &(0x7f0000000080)="85b78ef23b87235f5e3360cb3556c7c507a7f7f2951ecc6b9463d88b2d46cfa03ec741476ed0f7f0d26c91b96a28f48c163516384904dc648d0d2c8fe14b344e9fbf4ec53c27c137503ed54bc2244bde920f3946438a3aa536165fc5498cf7c97fb8f0dc822bd33dec23c9b01dbf45e2a5aa701dd67fcb732c14d44a6b9faa3b7fd57545e5a60f03c983dda902", 0x8d, 0x1, 0x0, 0x1, r0}, &(0x7f00000001c0)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x9) exit(0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000480)=""/197, &(0x7f0000000580)=0xc5) execveat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='cmdline\x00\x13\xc5\x9c\x82\xef\x1a\x0eQz\x90\xacb+m\xdaJ', &(0x7f0000000280)='cmdline\x00\x13\xc5\x9c\x82\xef\x1a\x0eQz\x90\xacb+m\xdaJ'], &(0x7f0000000440)=[&(0x7f0000000300)='md5sumsystemppp0*\x00', &(0x7f0000000340)='cmdline\x00\x13\xc5\x9c\x82\xef\x1a\x0eQz\x90\xacb+m\xdaJ', &(0x7f0000000380)='cmdline\x00\x13\xc5\x9c\x82\xef\x1a\x0eQz\x90\xacb+m\xdaJ', &(0x7f00000003c0)='(md5sumself\x00', &(0x7f0000000400)='cmdline\x00\x13\xc5\x9c\x82\xef\x1a\x0eQz\x90\xacb+m\xdaJ'], 0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:45:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f00000002c0)=0x1f9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', r2}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/enforce\x00', 0x53d16d93ce8ae384, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="23012bbd7000fcdbdf25090000001c00090008000100fa990000080002000400000008000200010000003c000900080001000800000008000100974ae2ff07000200050000000800020006000000080002000900000008000100070000000800010003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) setsockopt$inet6_mreq(r0, 0x29, 0x1e, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'vxcan1\x00', {0x2, 0x4e24, @loopback}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0xf0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) setsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000140)="65d72e77553a0fb589935aedc54b2727f51d74afd3a07cdd2d3e982536a2bc033cde9b7e0dd4144ffef73a61039e01fceb416e209d514cdcc4796714bf8b3087f4d8e27993092dc9e678fd38cf610ae693779a6230eaf078ff38e59f0865833833665e1475203bc9279eb2d8308e3fd12d2a3e478b57c689438a2739797bfb04e12b42bcc09111d22794c139fde725980ccfacd4746caf995d35cbd2a6f9986b6161cc85fab6ee5c40329de8ce092781c78c7f1a77f1df0c57cf42fb57a0f069217e046c5ee8c2e2", 0xc8) [ 454.700732] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.742283] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.794596] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.860004] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.902000] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.933907] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.941492] binder: release 18802:18831 transaction 101 out, still active [ 454.955804] binder: undelivered TRANSACTION_COMPLETE [ 454.972798] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 454.984964] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 455.012429] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 455.033735] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 455.041780] hid-generic 0000:0004:FFFFFFFD.001A: unknown main item tag 0x0 [ 455.073360] hid-generic 0000:0004:FFFFFFFD.001A: hidraw3: HID v0.00 Device [syz0] on sy 15:45:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) creat(&(0x7f0000000480)='./bus\x00', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000780)={0xfffffffffffffc6a, 0x0, 0x7, [{0x2, 0x2, 0x4, 0x1, 'self'}, {0x6, 0x4000000000000002, 0xffffffffffffff06, 0xff, '/selinux/policy\x00'}, {0x4, 0x8000, 0x10, 0x9b3, '/selinux/policy\x00'}, {0x4, 0x9, 0xc, 0x7bf5, 'vboxnet1self'}, {0x3, 0x1, 0xfe6c, 0x8}, {0x0, 0x4, 0x7, 0xfffffffffffffff7, '}eth0*-'}, {0x3, 0x1, 0x10, 0x4, '\a\x00\x00\x00\x00\x00\x00\x00/P\xa3lic\xeb\n\x1b\xb1W\xef_\ty\x1e\x99\x00'}]}, 0x108) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:36 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x100200004) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 15:45:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x1000000000000000, @in={0x2, 0x0, @multicast1=0xe0000002}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x200000000000000}, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$inet(r1, 0x0, &(0x7f00000000c0), 0x800) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="4ce03c794acef4e322361b5628e5822f1be5e7c064a3ebfce02ca7c95b77805c435ee4ce3601b2c26731a01c6eb33b5d1bb1bc4385a42ab9c3b71359e5f590abf76b83e9d0f859117cbff82181b1073b8bdb58939bb55d9b2c82a5b8776e7dcc7a33c5921e9d3ff0fc985cdbae4d74bc082bb4df87018f996bf6567e0a5850fd1167daf7b587acb9b7a3093203924ea2417113a754614214fbe21cd9d5842d0b77cf287add31771e5336ccfbd3dfe06e07f115c397a9a6a5dc2cad0e76d7aaef7250c534fb7950c72df49148fcce9b6a4abda5965d93dc44cc472793deeabe99fd253a14d0d999fddf61c42cc1c5e94dcaf625e6e7", 0xf5, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r2, 0xfffffffffffffffd, 0x3}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'sha384-arm64\x00'}}, &(0x7f0000000340)="e00afbb0d0358f55e3d8add5a056cc8ca1579d14e1afaffae3ec07a9e87c9edce7ba3522e2ef4c210cdb547f8a9fcd7c229ed7f7a42cdfaa7dc6200fc0ccd2ce751268433f6a99", &(0x7f00000003c0)=""/77) 15:45:36 executing program 4: r0 = socket(0x10, 0x80803, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r1, 0x1, 0x4}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'sha512-generic\x00'}}, &(0x7f0000000300), &(0x7f0000000340)=""/45) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x100, 0xffffffff}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'sha224-ssse3\x00'}}, &(0x7f0000000140)="dbe250eacd61f8e02db907ae589eeb351fe22f7d91d07c1b10bcbbca009c760809b81d3c0b702e8b61d16717df41d81295e66510d5379d5a7a658b39edc718dfc44671ae4bdca473eb761e1b3497d5f9cfdf4d1ed1a61666cfb43a8c7bca3e6ab5afe1e374790bf4bbdfc487ab3d7dbac9a99f76ff732910320fe45e875dd8de641957de9bab88c2b6290348a9956086164e47ebc3e9cac37e937747569b35ecc19ba1ffa2fc427b1094d999efd55ab32fffdd7ed1c82b022d874b6cdc892e95ff9a57762dec9e323c40a4eaa3a8e8c62b16dd36dd59626befdc5b4afed88d32bf482d0937791b8afa78b0cfb8af212704e2", &(0x7f0000000ac0)=""/4096) write(r0, &(0x7f0000000900)="fc0000004a000700f677b8ed8641a1c10aab80ff000000000000369321000100000000000000000000ff000000000000009656aaa79bb94b46fe00000007ec020800008c17f2899b0a708639cb1f29c443269a0c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32d2082038f4f8b29d3ef3d92c8334b3863032000048b6e4170e5bbab2ccd243f295ed94e0ad91bd0734babc7c0f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b00417cc821d9565187dc48deac270e3375e63fb8d38a873cf10000000000f7000000000000000000000001000000a9030efd479da2dca61659257cfc88a4fefe71983a98577b481d8183a15db39c1a17c080a38160f4098bf1f782cc0ee059b6b46c11b21bf52f56ec021de9327b5152ce636f5ea0ab75afabe370c26239c1a91b482977cc4f67ecd08396fd01d5bca2bf390be7e14ff04aeba9a7bb453f9b5700be6b67e61e80d2e9397c9c0229fdff3bb833b7b2f1d32700"/411, 0x3b) 15:45:36 executing program 3: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd2(0x801ffffffff, 0x80801) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x280080) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7d, 0x62) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) fstat(r1, &(0x7f0000001480)) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@local, @in6}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000001500)=0xe8) getgroups(0x4, &(0x7f0000001540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) getgid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001580), &(0x7f0000001700)=0xc) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000001740)=ANY=[@ANYBLOB="100002000000000020000400"], 0x1, 0x3) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r7, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x92) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write$evdev(r2, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x521080, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2000c7) 15:45:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x8) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r2}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0x0, 0x8}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000000) 15:45:36 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8800, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f0000000240)=@ipx={0x4, 0x8, 0x35dd46e2, "8c092d050d3b", 0x200}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="1d64fd90c1680149c88a578805993b48b606e05504630520a741961340b0ddd2522a6cd42054bec20417da0d4967e36bfb68ce7b1bc25c6f05c0384a569ba818f0be4cc5402822f560128ba35a79ca15997acee4dd56af91baa8e4e5623f39b62d9e68c0f9fc36c6ffab65aacab248215074eebc297183b38b805e94a194de6e6634a0362c0f1a1167597703dbccba29a1d9", 0x92}, {&(0x7f0000000080)="7927759689ac36d9de39847b5cadd85e15a26751a9338c3c3a1bf6d40b321b52c2d757", 0x23}, {&(0x7f0000000380)="1c58ba8bf10557bba3f2f3bb449ec328db14cb7ccf52787c96f6339ddfbb52a563f49a2ee0b57d5b9fe35fb0a452e9f45f9c46a556da1a899c278ec2025cafafb7abbcfcae1c4d9ae566a354ba37292f5bcd560479b1af6aaa3e38f372063f29e87855c2ff1882302d0d38de2ef1e0ab7c0fae0110ae23fd137d96d9bbce65d028d119b17f5f367c8a19dba8367f9d4a69e11445a166e72280", 0x99}], 0x3}, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) fremovexattr(r0, 0x0) 15:45:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000840)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0x7ee) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) 15:45:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fstat(r2, &(0x7f0000000500)) getsockopt$inet_buf(r7, 0x0, 0x2f, &(0x7f0000000640)=""/145, 0x0) getgroups(0x5, &(0x7f0000000140)=[0xee01, 0x0, 0xee01, 0xee01, 0x0]) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x8}, {r4, 0x18}, {r7, 0x100}, {r3, 0x8000}, {r0}, {r1, 0x2022}], 0x6, 0x1) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)={0x40002005}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000000c31780000000f600c1c75639978619456b284e3b28c91023ec64b75ec214b9d1f53d02a0c8f1d195b135623e6f505d65ffdd068ef6012111dcef88d92ee470fa4a5e0319e077bc6d33761e848f2827d614d21b0f0cab8ae3b054c268fb374764f3100a7873da9397f6f860c6990e3f8455c7572b674d1f2ef6df74a1ba2791f1d60b14accf661049645899b7c86ecfd67f757327e4cf8a1425ec7daddddc22bcb34e6fdea2e481d9477d09d471b1e4987b51b9f080ea34642a640b1d88ff12e30d76f98f54b620cf"], 0x1}}, 0x6bbd7d56db7a0917) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000580)={0x18, 0x1, 0x0, {0x1ff}}, 0x18) [ 456.508486] binder: release 18874:18892 transaction 103 out, still active [ 456.515541] binder: undelivered TRANSACTION_COMPLETE [ 456.545730] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 456.554723] input: syz1 as /devices/virtual/input/input70 [ 456.574066] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 15:45:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) creat(&(0x7f0000000480)='./bus\x00', 0x0) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 456.651562] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 456.700884] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 456.748765] input: syz1 as /devices/virtual/input/input71 [ 456.795779] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 456.915994] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 15:45:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e20, 0x4, 0x4e24, 0x1dba8893, 0xa, 0x20, 0xa0, 0xab, r3, r4}, {0x1000, 0x8, 0x65, 0x20, 0x101, 0x2, 0x3, 0x2}, {0x1, 0x4, 0x1000, 0xf18}, 0x4800000000, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@rand_addr="b6d4136e11bb319a8e99c4481d1bb651", 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x3, 0x2, 0x80000000, 0x7, 0x6, 0x1}}, 0xe8) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2462}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe05}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x40) [ 456.962065] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 457.000276] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 457.030875] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 457.077824] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 457.129689] hid-generic 0000:0004:FFFFFFFD.001B: unknown main item tag 0x0 [ 457.216163] hid-generic 0000:0004:FFFFFFFD.001B: hidraw3: HID v0.00 Device [syz0] on sy [ 457.518797] binder: release 18922:18929 transaction 105 out, still active [ 457.525851] binder: undelivered TRANSACTION_COMPLETE 15:45:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:38 executing program 3: futex(&(0x7f0000000140), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x7fffffff) r0 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0xfffffffffffffffb, 0xd259, 0x8000, 0x2, 0x0, 0x7, 0x800, 0x2, 0x8, 0x8, 0x7, 0x0, 0x8, 0x7, 0xff, 0x8, 0x7, 0x800, 0x0, 0x81, 0x1f, 0x1ff, 0x1, 0x9, 0x0, 0x100000000, 0x10000, 0xaa9, 0x3, 0x0, 0x7f, 0x100, 0x2, 0x2a71, 0xaf, 0xfffffffffffffffb, 0x0, 0x100000001, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x2890c, 0x60000000, 0x1ff, 0xf, 0x6, 0x200, 0x4}, 0x0, 0x9, 0xffffffffffffff9c, 0xa) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000040)) 15:45:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2000000040004580, 0x0) r1 = dup2(r0, r0) lremovexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='system.sockprotoname\x00') write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x81e, 0x9, 0x88, 0x2}, 0xe, [0x6, 0x2, 0x80000001, 0x9, 0x3656, 0x10000, 0x5, 0x80, 0x8, 0x1, 0x5, 0x3, 0x9, 0x80000000, 0x10001, 0x4ea2, 0x7, 0x7, 0x7f, 0x10001, 0x7fff, 0xfffffffffffffffc, 0x1000, 0x10001, 0x4, 0x600000000000000, 0x0, 0xffffffff, 0x4, 0x6, 0x1, 0x0, 0x8001, 0x1, 0x6, 0x8, 0x48, 0x5, 0x1, 0x3, 0x5, 0x6, 0x2, 0x9, 0xd22, 0x7, 0x6, 0x7ff, 0x1, 0x5, 0xa44d, 0x7, 0x0, 0x1, 0x3, 0x8, 0x0, 0x7fffffff, 0x1, 0x9, 0x1ff80, 0x4, 0xfffffffffffffffc], [0x100000001, 0x0, 0x385bdd59, 0xa37, 0x400, 0xfffffffffffffbff, 0xfffffffffffffffb, 0x7, 0x80000001, 0x8, 0x1, 0xbbe8, 0xc0, 0x800, 0xffffffffffffff80, 0x1000, 0x40, 0x4, 0x3, 0x100, 0x20, 0x3, 0x20000, 0x6, 0x0, 0x0, 0xfffffffffffffffa, 0x80000001, 0xffffffffffffffc1, 0x7, 0x1f, 0x8, 0x7, 0xe7, 0x7, 0x5e9, 0xffffffff, 0xa75, 0x9, 0x3, 0x400, 0x1000, 0x0, 0x1ff, 0x1, 0xd7b2, 0x8, 0x6, 0x6, 0xef, 0x2, 0x0, 0x9, 0x3ff, 0xfde2, 0x1, 0x8001, 0xdf0, 0x80, 0x100, 0xff, 0x2, 0x2, 0x8], [0xbf2a, 0x7f0c7363, 0x3, 0x9, 0x2, 0x200, 0x3f, 0xfffffffffffffff7, 0x100000, 0x0, 0x4, 0x7, 0x0, 0x400, 0x80000000, 0x20, 0x7, 0x44709cba, 0x7, 0x89e, 0x9, 0x7, 0x3ff, 0x3ff, 0x4, 0x2, 0x7fffffff, 0x8000, 0x2, 0x74, 0x1, 0x613, 0x5, 0x0, 0xd71b, 0x4347, 0x0, 0x6, 0x1, 0x100000000, 0x3ff, 0x7, 0x2, 0x4, 0x6, 0x127, 0x3, 0xfff, 0x10001, 0xffffffffffffff20, 0x1f, 0x1, 0x2, 0x2, 0x0, 0x6e8d, 0x36e4, 0x8, 0x3, 0x0, 0xfa4, 0x401, 0x0, 0x100000001], [0x2, 0xfffffffffffffff8, 0x81, 0x3, 0x9, 0x100000001, 0x100, 0x8, 0xf2, 0x4, 0x1, 0x0, 0x7, 0x4, 0x7fff, 0x703f55d, 0x4, 0x3, 0x5, 0x6, 0x78, 0x5, 0x1, 0x4, 0x10000, 0x2, 0x6, 0x4cafe8fe, 0x7, 0x2, 0x1, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1f, 0x1, 0x8000, 0x5, 0x100000000, 0x1, 0x4, 0xfff, 0x100, 0xff, 0x100000000, 0x10001, 0xe3, 0x20, 0x3, 0x7fff, 0x5, 0x800, 0x1, 0x6, 0x8, 0x0, 0x3f, 0x26, 0xffffffff, 0x6, 0x2, 0x2]}, 0x45c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) 15:45:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) creat(0x0, 0x0) getpid() r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r2, &(0x7f0000000200)={0x18, 0x0, 0x8}, 0x18) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x802c542a, &(0x7f0000000100)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r1, r2, &(0x7f0000000140), 0x8fff) 15:45:38 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:45:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:38 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000040)='unconfined_u:system_r:insmod_t:s0-s0:c0,c1023\x00', 0x2e, 0x0) r1 = memfd_create(&(0x7f0000000140)='dev ', 0x3) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)=0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) flock(r0, 0x8) 15:45:38 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10000, 0x0) recvfrom$unix(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x40002020, &(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) [ 458.413381] audit: type=1400 audit(1557589538.192:114): avc: denied { ioctl } for pid=18956 comm="syz-executor.1" path="socket:[65578]" dev="sockfs" ino=65578 ioctlcmd=6602 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0,c1023 tclass=sock_file permissive=1 15:45:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)="649d", 0x2}], 0x1, 0x4081806) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="9ed2161efa6ce6a3e0820c88b2ac3eb3c526fe4d76df3a6d5a08f8a74537ac7218692e5f42019074eb2cc612"], 0x2c) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) 15:45:38 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001400)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000001500)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001540)={r1, 0x1, 0x6}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) sendmsg(r2, &(0x7f0000001380)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="dd0c338ae855afbbddb76b9b7e62dd7fa7c72ae7dd40a3dccb4c1db32c2bb87e28ee9e10b77780ef8a890fef66b141993297f551249f0a63892e72fe01be1911db6dbecc497eb2e69b613689679f57ab8c0c58089fb1a83919cbe19d886c63b74d4262d244cc7f32a387d32f6cc1cb6629a216a1b8759accea0cad0a9562f3eb26deff565bda2299f8c66261f8e67ddcfb571de8104cb8bc7e535bedf00fd59bbfeb4d2ffa57a288b8e4e5c1053f277b1f33e5bb7594610d599eb665777b363394e44523fdeb547b76fc68abd4469562ceaed4e77f1564fad44f835be882cfded876877f9333929089d1128ecd3ad39efe5ad1f318021d90591f47bb40f306cea987306ee7de62c156dd0b095b8c517e18dcd2a09bff7cc7529330cad2c14a1a756f80822d7727ac7c730a9c371d49cef97cdd2faf0ed54fe47c92f4be39d2634958f84b5cb68aed5aefb582e6b530016b32ad52970ddb1d0119ad18836883424ae979547d727e5b50707b85ca39763da4f726f8dfeb3d5d726883b4f888593f418b2a9fd458b393f1d8b15011e4037ad0b35526f6e29c2ae04270bd922df232050cf25457afa5cb2e8c0978ca60172802b3695e4e48d510daced962028667dd5033a2f677a72eefa71ee6d4812ecd48c848677b8be97fd727fc7a7a9eb88d1ea04d9a793c35303f70d942911c4535b470ab227836f9038f32e7851be01fc3a721ffae79e889aaf1be7c9c4044b0fc3af71618e676335afaf2b8048bb2ca45f7c3ef473411414fd5f437d2b331d48a28cf74b7ebab5ba291cbe8d6bde87423921010957a6f7733b35ebefa2d6a36c452a7ffbb87ff093390cfa10e65ed586b0d0e9fbc96a746c9b9d56cb42b7b61e82b0a75d05695214f49a86d23a7b182b89f2b4307dd705fdac8e68257ea6539228bd637dc4f3edfbc3cc264d7b30e2af6dfe88f7f9ea4a9c9388c16cbd85de9d97f3e5d159106ffe9bf96102a91e42e18646b6485ad2bcd7a7997adfd4623ceed917f67d55a6b127419fc55287c37741af326c79fc256ad82789e895e73601c948976bd36aac6f5f2ae92ccc733a0f2e1f5a0bedb1dcfd881bc7317a88a5b079be3db06bb240e4996049075e114bc7ae4901f3d3a15d1cbaed1f65a64d9d2472c14a698d6c749753c23247793ba3601b3629f57f34a1f3eec2c62dd77a3f8bc1221ece103ad7c8c078dd3a6793b2071046dd9d76da26561ca8a6ddbaa69f13fd784eae0405896240d1c4d053787edc57c5e9a8af8fecdbccecbbcb20a5bc5fa50b11b0972b6ec45afbe4479771623389d6be3cf823905c9cc162c77e6bd683e2c621296e216ac7fc6ca51392f4f40e02b2368b7b29203845b3a2f1196f4ca5b6bbd5c925c6599682aede11a61f6cf7d0d2e1caa07a9b21fa666f2aea53a603befeba67bed95a5f3d863ba0f47f0a0524e9a9568128d5a6cc0213b9b449194b81ae3a8091c2965a5e95b8a4d7aab11c2e4ec167dfc33cb3c393e237749624289c3acd886b8c5ff51a2d5cd71d402916065cc61401113fd79b5acfd6709af006cb5230ec1d02a4323cd1e13e7f957c2bb6433219b5beb36277ec6096fe6beeb1cacfc83f1bee4d6c05bbd4272675c3337379a743114519ae5f902531fb9695c77ee4cd25176a35a704e99b39270f3cfe88d61c1b084e12e1ff90e7d3ea6e14ce78a446b9f578243395a9bb73bdcd416d44c3a01ce2c8a5c75389c360664aab0290b3599390d47b453cd04a853b9477783fa9700646fccc5733110703905c730f108e466f9fa46886e5c68cac961b465571ad77a261a913f6e2b647a86e7a4da79d18cf7aaf9198c442b5731662d29bfac1c85472eb747f7e01f810888949d79fe536454ebd76845405635934bf380d75c7de97378490f7382c9415f2ce4351f26e9db8a97ebd809ef284879c49ba9a1e16155e2eadea003c4df4136bc72545e5d9e3f39dcbf6935cd2c0f3beb84a338d0adcc39be0790b084915217a64b3aa3604bdd324bf95ec7d6091e7ae6d9f06a0fda8da3c69b96e2479cb1772b3568b0e1097a42c45d016e36adccb4f679c7535054641cd942bce30dc3c87762a4ce14ed59361b4127c2ae6a9185a26e8e52702d88a5c09138db03831e89b7b3ae7e42c73415a0731a5c1274327589e74f28ffcd5decb3e9330010548588dfb186caf391b92c6d5d3cc61105397d9da9d62885059d3a44a93dfd9de87f5b69c85af8842b6a7917a49350b021ce009c6a7f631b872c700f5b958a87eba648e3398654bbc6472465610eee024ce58450a71c84886ec07f449d244544ca1063e4bd562f62bcc4095ffe144446ec206a8fb06883174349b5bd36108ba66e0c4f86854ec62cfc7c8652f28407e1535a5ec3eca9dd9a092dad1d445ff6d77d8306858396da5c2033e94f74f0dfb9af66b0987082f82414152a159eb09429edfdb63c9bb465e4004dd855dabe187d3fcb063adebfd8064b87cd682f93c1a8a76ce5a55bd7eac95e795af73635934c521dd21c27a67d66cf29f5c52554497c0c83afb430c99b0f8912c88b0a6b76396af03cc3bc869c9e3fcbbafb9ae7993c4aa2708402538751903b367352f1f1506aec28af220fd27b7ec26add877059c4e1323e39a132af55236b936909a11df9e353711145eeebabd69ec24a7ff24d5d2db0600b374cf6fe5afab8293db6b18a6f2142c911e616dc7e420c3716450b24656d29f3234ee2816aa89ea0959e55cbfda39f9b7a062523a9e5f0fe9c01f789ab94ba8aa721c80384e5b844081c68e5ffc5fccb202d38bbbd7515d42e15f3a498f19c6d0bc4e156c3544e07d508e56255fc38a1c03eed3592cc86965d6a6e9c0e92e2ac861963395128ba18618e5b97b2c6e7cc7e4c41f9a4eb1d2193cc17dae80394fd5290565f6f4a6bba2326c37f29d937a52ef81dec64ee2ea2cdc74e84fd32689f688b9b8af775e6fc225d9603cdcf44de1255c4b4d936fbc7ab2ef5756ff4a3db5da0529aaf9362ddf8e383cdf657bc2689c9317cb2101e7c9c09b1727e6c3322980fe17c64030c1f8645035397ab4e09e15fd1fc9c943f62663a549a09cb8b0a240a6a4146f85ab0cb67f62df265099472876969aedbb8f9361f2641724587d921cec2ec6bcd4a510c8a03446f2fe462a72ca936c3032955694e6033f663aab922508ff580c6d513e8725be0c403804dd58fdb25a07811851760ae536ea483bef0876ae9b2181f781a654cc1f76d55ce5663b46d66fe46fe775765d81ab94b6a6358a8612c8e3b92117286c740999c05804ab46b749a5f0a6ab84fb07ce015d25a93dd1d393d440960e6448e4f036d475e4091e612c5dd168fe4063e70b374a0b5fc1f222d342d32fd3f7a47924111cb81db0621c3a559873242608f51a50bedef25d9bb8f7b9c29e713431c63bb2ff0a935ae21481ffea7071f814df5072f515d68b16237d2079153588abe87327aad1af685e903b1d6e121242bd75f319faac621dc8dd44244c29b54190a95e457ccc70c79988a2d17ca4359e831f4cf3b1cae9d2b03317b2d670c1bd8d055392dbca0382d0e378cfeeb59f396c04dedf6a49bb71146ce3e19a6236d2cabf70e3ffdc415ab14cfa216bb7a12eef755b2f7fdf01f6638521e434e1be03d659e17846c989c1465d7426269a705161fb8dd06a7ca61a177bfc3a235124f1aa5adb581d61148c96feac0d3a173ce83522031b0f460c179e20fccde3fa4eb7cb804577ff3ecf7f6c30e4b56c0fe1419634a263f635bd83b766b2f5f7daef6c18968884b39e50d123ea9bd1e6af03697414fcc5a987b44bfa6972f1b21049e234f1d39e542a6211c8b98329ab3c048cdf9b32a0dd84d6c91357d668fcec5a5f2222e1c572974f79e8f9df3bee1cc4dc69776c807efdba988de9b974d9e0f47ac80dd43d81c7b7f9ac79871de93a160b6e29be04452c60b7a7307913dc9534f2189265781682b0521bf2186374fc64aaf9ff17ee760cb870116e21af423467d565e273a149f2999562a3c7c73ac9c7c1334c948d0a7bd2891942cac554adb02e5db22392bdc37a58741f0d148b996c1a388493174725e7b327b880938ee06c0907abf76000757142ee0e155cb56960ac3967150c2e34c9458235249dd683385dc5afce72cbfae1043af10cb39ca35fea73e697e5ba6cdc32a4c7bedc67e5035c5e745bd13b9d80c2bd16b7545ab050adc930392d99b3fc5434ac0c66497f33a8f5f3bc4f68fb3548e54dad6eec210253443c83909474e4eb32d0b3a1ca6f40f692a53a6b8b0248acad1fd9a3e55be9195a2870d9436842de1d19aa00331ec2c1f3d14158d5f484bf47e24dd735fed7f2681bac602488a0892f6016648d3a3df544483484baf6c451f8c44f9e4377c2faf4b2d6256c23d559d87a669e37fc8754c686df60471dfea36c9212a98af3e72c333c918ddc69448ec557f0a786c27c36d9a96892e39870990011e9ec4b201f5b7e52db773f026be4d81fe24a4e636d47061aef5bd5b7f60fa3065b4b2856d4aa49538038ff6204f870372b2014c1a4fa354f4eb556cee9733140c4f8f3a4dd387e518f5b1737b52ef3a9d49b4ea9681c2e1eb8386c59235895296168763ac0c9eda867a285167eecafa833a539db8d2af9dcc1373ef54608c5dea29a40ddc8c50b9f6ae3e34f4e330620019bc42f3e1e1b3db6d4f3b57a1b87a043554c37ab926d26721eedbccd98071e5b4ab3904e0a1559d12f0763f289730eac04814206a77ca0c8a382759f524bb239298f47f29af8d8e067fd142d71c36f984fc85e07e58e849b248ca7c5a5d3d5b5ff4ebfe5ffbea8b4b8109ccb5080edbb7593eb6d6625f197ee9fac08920721c12c20a305853df1f41569d8a7ce989fe72d141624a0839aa7e9c7a8311f527dcbbff8e875326c6ce63dfc69ba79078d5bb6c970dbdd8ec85685db3e82013bb1e453e96fade4e475c19fd0988aa32d190699f4bf45a183331ad66d25aeb58db9b737ebae889679ac1b239d661ab9edbc6bd05899b5f11181b27ba41b27ead074bb1a8f442a17395760a67174120b59bd746c4c14dd074e545b5088e009bec784069cd47fe091961975eb1a12f5a2e5b48d476bc5f3923698fa6593ec4f356a36a07663d248995ca71c53b5db124c6215661e7568615cb369a233c03fe24a8b6d6fcb6e8b1ffbb6cfed711911671d9821acfbfe26a25e1b6b18d930b115fac0a74238afd1e0a1be6a8642e5640df15646c014a3e3ae0a48142750494f2280490f2e2f29ab6afb37630aeef7c64bada1652756a3e004b86efdeac2a730e88fd10824d27945a7b586f76b4a2e4bd7822315ae3f83f8cb2c37bffcf0a23c8d52c31f5344fd61f65bbc629ee09e532551cbe904ef8ec058d1ea09e50a85a25e9af118dc7091fd93eb406037094a8d8e593b956daebf6c7ca878c8b277de369305a52e58b305b4310b16068cb7a9bc489ed828fc7cc79549ce4a0dcbfaf1890f955b1969c712e8f0ed6ef7d0396ad9f515141cc0f1443c974428c79aff93041e186c73b12a4da3868c8a7a4e95e94a5b79eadeb2ac030a2d7d1238eecb2dd6b96e2be37c608c4c20c7a7ec9a104d334a99096cabc38aa6895d52871e08b874c649b39f604f5ca68e96d3288c147476b0e5efd15ef67d2180f97fc2878796cd7c2f735764660689efc35113a60b5f7291797d8c7dc8cdd6bbdda72ed60ae626eddea3f431cee2998e092e3bc566c95a0b15e2aa3c775b221279e6545c6698cf6277cf8798fdc803f2b53ec047d164402b66185ccfa5e", 0x1000}, {&(0x7f0000001200)="2b3a6f61247cc9eba1b2ff9571e6d41512e3a68830068d9c02ebbb85d725b55c44e30dce9dd5861c6589f60d82b503bb37a652169611c42fd41b6e9b250c8ea126f2173744492c4d599cf2750357e43d0ab896e0c73a50f67c5d0d00d4f1abac4d0d5cac785f309130df16b971be3abb396981408ee13899f22b93ad8367fde575092522e0c9c68a4cfb9d31f95c34fe6046edac3e3dab1386f29ade5b7cdf34200756c5c5466b14c535facbd819d1d47c", 0xb1}, {&(0x7f0000000080)="0a8fddb04512043528cb8d7fb2e79fcd6bc756d5210bfc52d9aae886a382d71bb7ee42844256408e5b28093c61d459c1ea5ebda442510d95612c", 0x3a}], 0x3, &(0x7f00000012c0)=[{0x40, 0x11f, 0x20, "992ef025cdffc6e4d2f38eb9923521a1ee1146e2f4ec1dfb95f7d5fd99989011b2b0acf9dbbacdf7200b5bf68a71236dd116"}, {0x7c, 0x1ff, 0x9, "bcfa734062e278baff4b43a72a63abe01d2fc006b077de6bcb226cca95e014c4316bab4962e93d5b18015c0cb5d9d7483ce81e13bfa6e332c55b1e5c152931581edb8e4b88c704dc1375d4d5f30dbcd0801a17cb190ab274c3d1778ad9f6e7dc7f1e32dac1053fb993e5a7dbc4f1b459"}], 0xbc}, 0x8000) 15:45:38 executing program 4: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="008c054b1c223d4e6aff4308e935c593ce75b9f4dfad48d893065b1ed76fd568cee9e2404a6a862400000000000000b2af22e9d9f36d9d4b1cf5485a6faad6259579ab9703a95fc0e32649bee2b8dd965fc67b975e5c62e098d3263a02c1cf9777b918d96124eaf903dd825fefee3b4c97f0657172e56430dd3a34f0baadf2e5f7bf8ad9c4ada618e08208bb97665337364a3fb5a0b8577fb00d8f880cea3e1032bfd3965b06a89590bcf5aab1cfce9808e71428497e2489bc1fe2dabe27ebf7651dd36ff4b41034a2cc104b23ddf30a99ca920a18c618a9a53be96ed90456"], 0x1, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 458.468328] audit: type=1400 audit(1557589538.252:115): avc: denied { lock } for pid=18956 comm="syz-executor.1" path="socket:[65578]" dev="sockfs" ino=65578 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0,c1023 tclass=sock_file permissive=1 [ 458.587494] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.646699] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.667328] binder: release 18950:18966 transaction 107 out, still active [ 458.686288] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.688461] binder: undelivered TRANSACTION_COMPLETE 15:45:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 458.812368] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.870057] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.907133] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.941000] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 458.979345] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 459.000653] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 459.038007] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 459.069205] hid-generic 0000:0004:FFFFFFFD.001C: unknown main item tag 0x0 [ 459.118865] hid-generic 0000:0004:FFFFFFFD.001C: hidraw3: HID v0.00 Device [syz0] on sy [ 459.199334] binder: release 18991:18994 transaction 109 out, still active [ 459.211992] binder: undelivered TRANSACTION_COMPLETE 15:45:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0xdf8, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') preadv(r2, &(0x7f0000000300), 0x28f, 0x10400003) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 15:45:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) syz_execute_func(&(0x7f0000000040)="c40b660f38f6cf8fe9a89362aec4e2c1404b0e3e26360ff1b6f9ffffffc4e27d25f1d9f1660fead9660f6d2d07000080c4e27d46b500080000") fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000140)=@v3={0x3000000, [{0x0, 0x7fff}, {0xa7, 0x6}], r1}, 0x18, 0x1) 15:45:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:40 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={r1, @local, @local}, 0xc) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000440)=""/84) listen(r0, 0x2) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x82, 0x1) sendto(r3, &(0x7f0000000500)="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", 0xfc, 0x95, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x2, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0x3}}}, 0x80) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000680)) ioctl$FIBMAP(r0, 0x1, &(0x7f00000006c0)=0x3f) write$P9_RCLUNK(r3, &(0x7f0000000700)={0x7, 0x79, 0x1}, 0x7) pwrite64(r0, &(0x7f0000000740)="52068bfdc98f54352445d13c294352b853c000ade60e3d7de25a2bd0abf5048502a1d9d5b9c31188ee42c8e9b3b666077147dbfaadfa01ed74722d1a996cbd50bcfb300660a1ebd8633526ee1d8012c9a2ba172e559eafd9", 0x58, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x6) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7f) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={r1, @multicast2, @local}, 0xc) write$P9_ROPEN(r0, &(0x7f0000000800)={0x18, 0x71, 0x2, {{0x41, 0x1, 0x1}}}, 0x18) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000840)=0x0) write$cgroup_pid(r3, &(0x7f0000000880)=r4, 0x12) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x89fb, &(0x7f00000008c0)="63d63a2ed10f01b744f823c3ca466fcc7ef8f71fa59bdf56a635f3ff9870ba5b1e533be9764897aedf639ebf0b064ddd207d8833ee34ef615136c96cfb464563ee60e8c148ef65536ed419ae3eb6994d60475e77859f5f9c879fb466469d18448a709f753aa6cdaa8a8f7c2a860b9008b17c3c14093e63") fstat(r5, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) fstat(r5, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001500)={&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001000)=[{&(0x7f00000009c0)="c50afea7b435a06dfac25ed8157ba487c349574ffe5c48672435456538b40ea6d35fce9fe0c4c997751f3c2162c7c7990ecaa48f72d2e6c0dfdb125fa0a2c51dfabdd01bdd12fe24a4fdead95f00ebb08a154cf16c03738d0b40ff9a9102c67595faed123d3f25484215e95d5c3e12af04c36421a6da547d416ad22425d2f05061f26741965a78c3c12aea165f54e4457dc32c0294391eb468e66438618f6dc5586ee84344960f87af166401b3f892b63ec94ac896ad01b1ee7a0c04aa9d5db360767650ebbd10", 0xc7}, {&(0x7f0000000ac0)="7c52d5b7dde9a47531a9", 0xa}, {&(0x7f0000000b00)="0076e7875904b7305fc50f9d50e1a9df5d9693af45cc693f62a8f5c48024a57c386b2fae38ce6a0d1a8218378719231b834a872efd57bcb55d098df3b15d1b3d12b4d6bc0cd3166918faf164f1bcbbad0462543ca506", 0x56}, {&(0x7f0000000b80)="dcfa4dec1ff28e6b528d4e91bf11a15fcd495823c4ea827f12d98f58aabfc4dcce46c54b733ab3ac9dbe532ba6054b15f8b554add3a6872ec47f5cf7ac5b0ab22149a32484f7b41f2a529578481a4d66f7427cf86c4fb99c27f32c678aa4d27c7bb1d3c50465d7f4a56296c8de92eb608f", 0x71}, {&(0x7f0000000c00)="7b735eebfdc9ee02bf1a7fa23b6e9a5ad5b77aa1836cff51ffbc0f5254842169fd9e777814c4b43ad6ba9f14f8599a3a1b312ddcafd5029bf770973490da6931422686b11fc92270d04c4fde3f29ad5d5ce7f7bd7e131ce3330058a1b3dfbe317b6aebdf27cb176f81becf60895631e6c5d0bc68e392e5a682f71c51e4a8425af8fb33819d2476324679e314a38a6d8f78c74bb5b6de9151af4487b1f932daa1b0049dbc6c", 0xa5}, {&(0x7f0000000cc0)="21f63a8ec7aa6d76b9449230d9566d3a8519868ae6cced798114a8ae6efc9768a64a8d0f5f500453091b0eab6309e495abba02dd12efe983e94d8f293e6773f84010b45c319bd1efca531099773953cc0a4fc2cc394bccb0d803897cf2903bf5c9ca437676dba318a8ee006a2cfc647f05858f159c2880d799faff", 0x7b}, {&(0x7f0000000d40)="c95b8f126c1415b8a5c743511cb9e2e6e9da0cc60a00065f9a319494f5ef079aeb61f0dcb514f7bcddfd6a61dbef98830283ff3d12a84d276df2f46b6ea7d3e215cfdbc6b7966afda855df7d1bd95933d0c20dde7130d700a71ca4d50198725fe4ba5e60e0c0c61652f8264e", 0x6c}, {&(0x7f0000000dc0)="247e7aea76d9a92341da4e385824e24865245dbaefa730a6beb3fe462c3c08eb1adc1be62e11bca6fe318799d4c7ddb70753c5f73a778f18da7e4b94bf275c852b086a7f10638700c341c10eb61f70ffa0afebba392cded860db087677b9e1b68df8320ae16f82a5", 0x68}, {&(0x7f0000000e40)="d94dd322720691fd8bcf2b9012fe9740eb8baf273a45bce2fa15df3b2bcb8876bf301cc5e989f311db0f38b15f404d04cf4d1a2a0f4de51275dd79635692b01216fdee43ac0f4d737ede4385b1da259f966c899b529d63caf4db3c45c7a3625870c84cd8b88686c19e7fe04d16e78242aa6f0df213d233148cea190b1b8c67a5f357f62f9d0e6da67cacf26989713ac34ed2b2b16e", 0x95}, {&(0x7f0000000f00)="2bf594719a2f47941fad001a748a954fc7395518d2d09f36363015a2f66448585d13905a0f65ef2e69310c63d4028a5ed9b58f9a13d8e5f757563cab6f9caed5bc138b5c385b347646c841c481fb5d4ee3632407116e52ba885a6bd54f91f15e2f41eb2611b2018b0d1433268503091a294470362c130077da6c7dac78df4016171259125c00781954933a1e23d1ae622d87243f8c301e9292cddc80cfce1e9fccdeed4aa048c437525e775991824625222a39aafe28817b652796657c00db57c240aa7cd17e8bfda220e87b2c8e932c943852b2206bbc0b467132", 0xdb}], 0xa, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r3, r5]}}, @rights={{0x2c, 0x1, 0x1, [r0, r5, r5, r3, r0, r5, r3, r0]}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r6}}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r7}}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r8}}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r9}}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r10}}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r11}}}, @rights={{0x30, 0x1, 0x1, [r5, r5, r3, r3, r0, r0, r0, r12, r0]}}], 0x114, 0x44010}, 0x80) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001b00)=@nat={'nat\x00', 0x19, 0x4, 0x580, [0x20001580, 0x0, 0x0, 0x200018c8, 0x20001a04], 0x0, &(0x7f0000001540), &(0x7f0000001580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x1f, 0x25, 0x9200, 'bcsf0\x00', 'nr0\x00', 'lo\x00', 'syz_tun\x00', @dev={[], 0x1e}, [0x0, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x98, 0xc8, 0xf8, [@state={'state\x00', 0x4, {{0x1}}}]}, [@snat={'snat\x00', 0xc, {{@random="81f8d4f31b79"}}}]}, @snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xffffffffffffffff}}}}, {{{0x5, 0x8, 0x86dd, 'ip6gre0\x00', 'rose0\x00', 'veth0_to_team\x00', 'ip_vti0\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x1c0, 0x1f0, 0x220, [@m802_3={'802_3\x00', 0x8, {{0xf8, 0x417, 0x5, 0x4}}}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@remote, 0xfffffffffffffffe}}}]}, @snat={'snat\x00', 0xc, {{@broadcast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x9, 0x10, 0x8809, 'lapb0\x00', 'veth1_to_bridge\x00', 'hsr0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xdc, 0xdc, 0x10c, [@stp={'stp\x00', 0x48, {{0x2, {0x6, 0x20, 0x0, @dev={[], 0x27}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x4, 0x1ff, 0x81, 0x401, @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x4e22, 0x4e24, 0x5830, 0x100, 0x8000, 0x6, 0x4, 0x870, 0x5, 0x3ff}, 0x200, 0x1}}}]}}, @snat={'snat\x00', 0xc, {{@remote, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x88f8, 'team_slave_1\x00', 'bond_slave_1\x00', 'veth0_to_team\x00', 'dummy0\x00', @random="a7612cd74818", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x26}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4}]}, 0x5d0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000001b80)=0x4, 0x4) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001bc0)='/selinux/user\x00', 0x2, 0x0) 15:45:40 executing program 1: r0 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) r2 = dup3(r0, r0, 0x80000) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x4) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) fstatfs(0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400200, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000040)={0x7, {{0xa, 0x4e20, 0x5, @ipv4={[], [], @rand_addr=0x9}, 0x101}}}, 0x84) getcwd(&(0x7f00000002c0)=""/191, 0xbf) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 15:45:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) pipe(&(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0x3, 0x2, 0x95, 0xffffffff}) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) tkill(r2, 0x40000000000019) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) 15:45:40 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) write$selinux_create(r0, &(0x7f0000000140)=@objname={'system_u:object_r:mouse_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x0, 0x20, './file0\x00'}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x29021) write$evdev(r1, &(0x7f0000000040)=[{{0x77359400}}], 0xfdda) getsockname(r0, &(0x7f00000001c0)=@hci, &(0x7f00000000c0)=0x80) [ 460.511443] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.544845] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.589050] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.622948] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.648370] binder: release 19008:19029 transaction 111 out, still active [ 460.660164] binder: undelivered TRANSACTION_COMPLETE [ 460.674370] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 15:45:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x8000201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) sendto$packet(r0, &(0x7f0000000100)="2104ef0b8c2df2408896523fe96c52aeb34dd664ff559d316205d1a563aaa77e9bc9aedf37290e3b8b3eb18e84df7746c12c93b2ed5d4db3ded99cc6d6c939dd285c1bc429ca532adfa8cb5cf8326fe16b4991d95384e3b127eae56cdc94b22b5c56bc11021373d67ce293cad284d01c7566cc5c9113e96ea1d014cad133dcea8fb76261afe82947b609a5c6c48a66b53db4ea21febd215dfdc997ee9656748e95e723b121deaef4564f240e7ef9477261819a032a382a8d3cb99e88d316c69bd347f6dd30d24c35", 0xc8, 0x4004, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0xcb5c25603ec952b) 15:45:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 460.704383] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.780998] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.809687] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.825944] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.834390] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.842105] hid-generic 0000:0004:FFFFFFFD.001D: unknown main item tag 0x0 [ 460.876983] hid-generic 0000:0004:FFFFFFFD.001D: hidraw3: HID v0.00 Device [syz0] on sy [ 461.153103] binder: release 19042:19046 transaction 113 out, still active [ 461.167734] binder: undelivered TRANSACTION_COMPLETE 15:45:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000ac5000), 0xfdef) r3 = memfd_create(&(0x7f0000000240)='selinux\x00', 0x0) write(r3, &(0x7f0000000040)="16", 0x1) prctl$PR_GET_CHILD_SUBREAPER(0x25) sendfile64(r1, r3, &(0x7f0000000080), 0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5f) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r5 = dup3(r0, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x6f, &(0x7f0000000140)=0x9, 0x4) tkill(r4, 0x1004000000016) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x9, 0x7}, 0xc) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x3) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f00000000c0)=0x6) 15:45:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 461.847690] binder: release 19054:19065 transaction 115 out, still active [ 461.856066] binder: undelivered TRANSACTION_COMPLETE 15:45:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:42 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) getpid() futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000)=0xfffffffffffffffe, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) fcntl$notify(r2, 0x402, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r6, r7+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) 15:45:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0x7b}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 15:45:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1f3b743a1d4642f6f714140e2ff20e33a75f914b02210415660ddeea70962cfb40b810574be4841a9de75c6678df430a948ba0a5818c594c0ad9d90910229fc7", "9d03ab87a1a3f9a181cd34fddb9cdf7e6640d472559e71b85c5f3f2568973cf2"}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000cc0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) setitimer(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d00)={0xe8, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10000, @loopback, 0xa5d1}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7169}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf935}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x67deeff04e129604}, 0x20000000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000f59000/0x2000)=nil, 0x2000, 0x1000009, 0x8011, r5, 0x2000000000) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000f56000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f55000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000f54000/0x1000)=nil, &(0x7f0000f56000/0x4000)=nil, &(0x7f0000f54000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)="151bc810c7adc1059e30406d36d726d9fb591593517b83989609c34bb8a69af4fd0cdbf05d600e23507420f9144ae1f939dcebcc6b0fa3436f6211538b5716c2e0ec99c47a0a9c56880848484981deec8921c307d87cf15e05c957742c2e9692e39bbeb427647ccab34431a37840653682f777f589fea4be1d1e763fe30c5f6fa4bd7791af013f9797c4118562dffc4ee100b5afcf8571dd0ab5a274cdc5f29d6e3370f072bec6496495f7e5ed32b9d063c92a06a6ad6e0da45f0eb256c24b63d709c50a5e172533554a6af12d6ef8", 0xcf, r4}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x1000)=nil) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x1f}, 0xfffffffffffffe3b) creat(&(0x7f0000000500)='./file0\x00', 0x6) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000300)) clone(0x210007f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000580)={0xf97cff8c, 0x8, 'SE Linux', "90a5796fb86623d017675df1c48af0844fd2e5951bb8e5ecf090accb5983d6c4bb89eaf0fd7241c6d868ac82bae46e2cb28542baf92952a718a65703687dc260ff3759970a30a0cf862296545a0987aa143ad03f6db68ac6d668b5d2fc8d2dee8382"}, 0x72) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000600)={'nat\x00', 0x48, "0bbabd13e42a9c799123b7c5870907c9391d7b97876f66c82315cfc6e4982c70ad94ad0f2db03f8c6681170152c1899e7591aca8facbd9ff439664514cb16d20a34686d1bc82662b"}, 0x0) write$selinux_load(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="8cff7c0e28a2106abce1aef48335f7000000fff90004004000000000c9910a1ff9dc010006009d000000000000ff3369ffffffffe779bcc70b9103000000c01cbd062d97bad643cfec443acf54b085ec34a4cb325ccf028dfd0f006698be595c6eb3734dda5ad0880000000001000000ae010e714ef5c41b3cca73fa26a036fae3e26790116958c03e619147e22fcde0a5d7cda4e3e58cdc48c0b1051c0215805b17e2fc316b8cba325e982904458dd25c762064bd1753e3badfe7c19bf42126e1617c0017fc5534c7806dd5b197c18f131a7bd048c886b23e779c86f5aeaeae78be6b592ad2ba4e3a954f9649a344b9c3dcd29b914570bbe8e2079782ca48a53cb6edadac9a602c0b516a74a6f79616a4cd8612242fd5ee5c6f73899f38f4a714b8d2dc3e06297de96724b1db49fc6b9191d4ad5c278bf8895d259fab8f6ca792a3a8ef372ddf9f320c3195efcd88d8b091fb70cf3a492007c43601d598c2e8576fddad4e3725fdd8bd30e592756d00ec1d29b75acad36347066ed57a244456f6112f8b746d946d3b3137b74dca4768fb3b4d7693db4377ce8f6cfce89bdb6db0d8e78ddfe247611a6de3fcf47d0951a8fedf2e276f45cca1d43e3ab03f3de7576c7f33d5cbacd96cc15aee18ad0b9f696856be5e3f7b94a813efdde37f2faff914663f39fa365f9169e77ab8e35d58236f956d6378609ea52cfeb6e7690580c22cbbb8dc845aa3a70dd5ec6df8a38866c7f5b9e5e45be6f3fd1a34c99b995a25a4a52e874173cef4f15e9b399cda1dc3a0fbc46d094c39fedf16bdb7a2f7c156ea22627ab6a1184849d30dd894b313552a9ff1c9ff92b9655c8c24fcc72b6a211275a7ea820514760b44080e68ccc5016bb5e726da0b20c2f7eab699f5f144166f3b13e29eb264c4a2d84fc764f6b9c91473145b764faa3d5be7e1d007930b5ae0f60f3c1171945d4dd5c1121441bf44b0a1d762962ef0be913444715a4cfdeb2136e2aacaa2aaca185cd9113ac680377a52d61406375bb4f63067ea18d6fa89497a0d3930423f969bd0c0f30a2d11d52db631e0c23266f0fa3670db34f80ef622a85c0aa1bfd5ebedd1b020b4253eed5156981e5eed69042ded9f71898a98b10e8644e46c47a40000000000000007abc6cf2a51455c8e184c251e57181e55ff4e14cc8ede8d36299bfd62b161f1d0bc000000000000000000000000000000000034a7bb753ad9833c2832d2fb17efa1c84e2e52d645d5d62da5c60463af63c04aad0c9e20becbfcb05c9a156b03120ada9c48c0cc0d283f3a15cf7f7241f6ea771b2582e07b203c81b1519fd3aae3f910675031d540a146fa69cfee92838ca372e389983b4f58534e758e51c3ae21d7a18f73957b6cb8cc64144ad058112f8c7032238462ea20642e3988e40b8782319857b76c7721be431661adba51bdd5d41b67bf4a9d97afed632290d9f645592b6c81e8d9eb872db7cf39d1e42e2119d244bd5f9344aa3e0bb3cbef8311f7b77b171120d396560fda97ebb9be6516296ecd8f57bad5bf17bf231de641c8fe7b0691413dfedcded9f2fe6141be6f69dbe002ae55e42aa42a89e5f41619ae90b25613d8e850ee5cc3aff50dafb0295ed2a6a12cbfbae2e930b90c8bf23e96e0738c993bac0fb39e4e763843aebf640582e95873e05aa91296c1607d4189d6094ff444aa6eb0a5f14ec7432d1fff062b63db6da4d7b2d700a126d2e30a4c23b068d68788281904ccbb8f21293b3c0f4827441227286403af8969a6cbfdd6f54217db8e61b40328a1a0dceed3d6c11974ee962e74cca300000000000000"], 0x50c) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000002c0)={0x6, 0x6, 0xd853, 0xe75, 0x9}) rt_sigtimedwait(&(0x7f0000000040)={0x7f}, &(0x7f0000000080), &(0x7f0000000180)={0x77359400}, 0x8) fcntl$setown(r6, 0x8, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000540)='ip6_vti0\x00', 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0xffffff23) 15:45:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 462.342430] input: syz1 as /devices/virtual/input/input72 15:45:42 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80, 0x80000) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/211, 0xd3}], 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x100, 0x1f) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@generic={0x11, "e1228f4519c96bb81648e90fe7ba6e9821076336405eefe7e1387dce63f8c567c749105b28b0c70a07ad11ecdd5de7bd4e5188b6fd0c10bd667b33087e8a7b4f42d7d50541e27ec3368201dceea63a0dc3be1fdfaa20752e08a9ca6f5dd7e95627657091e823abddf95f300cae3ac3dbac7298b3d3d06c45091a51a18e0f"}, 0x80, 0x0}, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=@known='security.apparmor\x00') read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @mcast2}, 0xfffffffffffffc1e) fgetxattr(r1, 0x0, &(0x7f0000000bc0)=""/106, 0x63ce22e69cd848a) ioctl$TIOCSBRK(r3, 0x5427) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) creat(&(0x7f0000000ac0)='./file0\x00', 0x80) socketpair$unix(0x1, 0x800001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r2, 0x400854d5, &(0x7f0000000600)={0x3, &(0x7f0000000440)=[{0x1ff, 0x0, 0x10000, 0xc3c}, {0x5, 0xfffffffffffffffa, 0x3}, {0x1f, 0x1, 0x3681, 0x7fff}]}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x40000000000000e) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80)='/selinux/status\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) write$FUSE_INIT(r3, &(0x7f00000009c0)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x1c, 0x0, 0x400, 0x8001, 0x20, 0x42, 0x4}}, 0x50) accept4(r5, 0x0, &(0x7f00000000c0), 0x80800) ftruncate(r2, 0x0) [ 462.398048] SELinux: policydb magic number 0xe7cff8c does not match expected magic number 0xf97cff8c [ 462.544252] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.590384] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.628827] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.664343] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.700626] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.726567] binder: release 19071:19089 transaction 117 out, still active [ 462.737389] binder: undelivered TRANSACTION_COMPLETE [ 462.750484] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.781659] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.823971] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.843370] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.859409] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.875618] hid-generic 0000:0004:FFFFFFFD.001E: unknown main item tag 0x0 [ 462.906955] hid-generic 0000:0004:FFFFFFFD.001E: hidraw3: HID v0.00 Device [syz0] on sy [ 463.178284] input: syz1 as /devices/virtual/input/input73 15:45:43 executing program 2: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000000)="a858ceda97bfb3d3562b80d2f50083156f794c05e0b02a0398185addde9e46e1145c5c3fcb185a36d20d", 0x2a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) listen(r0, 0x10001) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x1, 0x869, 0x40400000000000, 0xffffffff, 0xf, 0x5, 0x8, 0x19e9, 0xdc, 0x7, 0x9, 0x2}) sendfile(r0, r0, &(0x7f0000317000)=0x1000000000000, 0xff8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0xb2, 0x2, 0xe06c, 0x7}, {0x0, 0x7fff, 0x7ff, 0x2}, {0x8001, 0x7, 0x80000000, 0x1000}, {0xfffffffffffffffc, 0x6, 0xa7, 0x10001}, {0x3, 0x3, 0x31, 0x7f}]}, 0x8) 15:45:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:43 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1000800, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',g|oup_id=', @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000001a00,default_permissions,smackfsfloor=eth0em1-,fsname=none\x00,fsname=mime_type&,appraise_type=imasig,\x00']) tkill(r0, 0x1e) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000380)) wait4(0x0, 0x0, 0x0, 0x0) 15:45:43 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001300)={'team_slave_0\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/221}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x40000000002) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xbaf, 0x6f5a, 0x7fff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r5 = getpgid(0x0) sched_setparam(r5, &(0x7f0000000000)=0x3) ioctl$TIOCCBRK(r2, 0x5428) r6 = dup3(r4, r3, 0x80000) write$UHID_INPUT(r6, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) prlimit64(r5, 0x9, 0x0, 0x0) set_tid_address(&(0x7f0000000080)) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000000c0)) 15:45:43 executing program 3: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x10000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000000)={@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001000)={'filter\x00'}, &(0x7f0000000140)=0x24) 15:45:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xb90d, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xb20b}) [ 463.646603] input: syz1 as /devices/virtual/input/input74 [ 463.652582] binder: release 19105:19116 transaction 119 out, still active [ 463.681527] binder: undelivered TRANSACTION_COMPLETE [ 463.773130] input: syz1 as /devices/virtual/input/input75 15:45:44 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x8) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000300)=""/34, 0x22}], 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpid() ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000140)) fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f0000000400)={'L+'}, 0x28, 0x4000000003) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x7f, 0x5, 0xffffffffffffffdc}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000200)) getgroups(0x0, &(0x7f0000001cc0)) getpid() ioctl$RTC_EPOCH_READ(r3, 0x8004700d, 0x0) request_key(0x0, &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000480)='syz\x92?\x00B\'i\xc17\xaf\xb54\x90\x8c\x85P\x16\x06Pa\xffHtH\xda\x01\x00\xf3\x11T\xb6T\xdc\x17\xf9\t\xc0\x86d\xfc\xef\x1f\xfai\xc9\xe7H\x94\x82`637S\xb7?\x06\xdb\xfaO\xe2\xff\x7f\x94\xd6 \x00\x9f<\xc8\x9c\x9e\x1a;\x8f\xc4H)l\r\xe5Z\xf5\xfbM\xa6\xc9E\x16!oz\xfas\xd6\xc8\xa9\xc0\x12?o\xc7\x1cY\xfb\x8f\xb6\xc5\xdbz\xb7\x12\\\a\ai\xc9\xc9\xae>\x99L\x96\xfex\xc6?\xc5\x00\x88Lac\x923<\\:\xa3\xba0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)="649ded", 0x3}], 0x1, 0x4081806) sendfile(r1, r3, 0x0, 0x20020102000007) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffc000/0x3000)=nil) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="9ed2161efa6ce6a3e0820c88ac3eb3c526fe4d8edf3a6d5a08f8a74537ac7218692e5f42019074ebc6126d8fd00b7a7f9c3e6d0e32960d227688f16e4ab922ee97886db693a9fcbfe523544865562a89e30000000000003e86537bbf5609336cac93609d4dd2d14a89fb2ee9d76ad17936362a0d794a0f67501018eb022a5d75f7d14c12239e686c672abde1091ec2913040a022fe167cef5e70d4e0049cc1a1a04f17d9d05817b7b237f8317ec5ae5be7746933519c22198e394e"], 0x68) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x48, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x80000000]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3f}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x92b]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) write$P9_RREADLINK(r4, &(0x7f0000000580)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) 15:45:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:45 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r2, 0x0, 0x88001) sendmmsg(r0, &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(r3, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) listen(r3, 0x5) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x402600, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0xc0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r7 = socket$inet_tcp(0x2, 0x1, 0x0) lgetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="fb0200000000c1bb"], 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000000c0)={r9, r10/1000+10000}, 0x8) 15:45:45 executing program 3: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x0) r3 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) setreuid(r3, r4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="020400000008000000000000fbe55b2bb90516db4d916102c555cfe7572300a44b29d9fde6cb492084f8794b8b5b98aa9d890600000004000000711608ecc3621e8100000045042804186e13003ee478efddfc86a15aaaf3cd1ad1dfff0040000000f515ef0939f0", 0x68, 0x0, 0x0, 0x0) 15:45:45 executing program 3: socket(0x18, 0x0, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x179) socket$inet6(0xa, 0x2, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c1100000000000900000700000000000000000000000001040000000000000000000000000000000500000000000000000000000000f9"], 0x58) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0x6, 0x6}, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) pipe(&(0x7f00000000c0)) [ 465.519598] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.548858] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.583874] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.635763] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.686920] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.728802] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.759528] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.795840] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.836801] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.870940] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.905168] hid-generic 0000:0004:FFFFFFFD.001F: unknown main item tag 0x0 [ 465.912812] binder: release 19144:19162 transaction 121 out, still active [ 465.926639] binder: undelivered TRANSACTION_COMPLETE [ 465.954555] blk_update_request: 379 callbacks suppressed [ 465.960996] blk_update_request: I/O error, dev loop5, sector 0 [ 465.967329] blk_update_request: I/O error, dev loop5, sector 1024 15:45:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 466.033278] hid-generic 0000:0004:FFFFFFFD.001F: hidraw3: HID v0.00 Device [syz0] on sy [ 466.190844] binder: release 19143:19161 transaction 123 out, still active [ 466.246832] binder: undelivered TRANSACTION_COMPLETE 15:45:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:46 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x301040, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x3002}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) close(r1) 15:45:46 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000fc0)) r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc004240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:46 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@l2, &(0x7f0000002640)=0x80, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000002680)={'veth1_to_hsr\x00', @ifru_flags=0xd101}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\xcbv\xe7H\xe3i\x7f\xa2o\xe2--\xd3\xc3\x06\xda\x9b\xe2\xd9%\xf2\x82X\xf0\xc1^\xc6\xea\xdd\x06&', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1d91", 0x2}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="980f50d2d44d72b902e5a13baf8c6e8d85b3060e00e0319aaaddfdc8c698ceef536cf13759aeb7d254770daaae0061f73ae2e7dfc897a1284487971ed95f9a85b8a1a55a7db475258ded43f653df95d3ff38be971f4c80aa84a1d4ec23b66a1eff5922775b3bc5616f2551ed6b02c970bb55e04327b22b5594411181b576f169d06671727fd52bb02886209114534fd353836d4ed323d9b9f25e1d3046788af56d64fdd143e7d6e04db39c4a519163d0e8dd3d2539642e0446d90a0b9b10ad0663cc71c059a2262a91c3ad951909a4a839ef4ac48da4c6560a59da059e50ed0f2ee9e349a9f4d8b55014dfafc371fcd63ab673dd80ffab0b06c46680fa45102cdd7e49386642594cead4719d070d4d92267f8cbbc35dcfd6447d74cbb73a9a3278fb74806ef9ee17e503da02c750357e2f8e6fd2f882a5d8aef468ff7c2fe3645d230ec91220794f9757651bd54ecf4993d1e19240f4319a61d0e0b1ec61e95efe77ef45a483a78510f38a1fc66b9174d90a1a39490edc5cd9f8f88de5b58be1e69b0995f5368f8fbea0704236f2e3ff496ef36bf3257d2e5ca8b20dd52cfe18b8dea7d68864e4424c45f5225c3645e037ea3fd0b9b404f87f394938b1440d2f8e2ea18efb72e886f02fd7de946984d48cb4c17f8cf905fb8ff3199cc02ed17b0eee59adef5ab2ec6c3326d8308c1c8541cb84dceb93ac8cb01dcde3f019008d983e53a74e4c9247c813b7d544408c5528980ed10c536c8f0e659e2ae8a81854cd91468d4ae8cd7668ea92728fa288f32178a2dd85ede1d093bf671d4a97dd9a55f8e2f0083f04ec92886b4c14f1dc2a286abe94223222e04f23264cffecd76758e3a3b6dfb2ad337f020c8f3d5aef6f110485f025d51e51630ebb51b8945be4e0cb4273e701e030d3e7a3a78d47adc5c3cd7ad22c975fd31656bf49a2d0789ba0efc8711f694b0b1ca09e06ed6bfffd517676c623080f68e4213119d9c75444395a629b0c7e15731ed026b53b7bb4c9856e71c84027c77dc801b18c5485d3543afe274055b7a92d81af842def0f0224fe7c3d2cd0c913a44b8a646d50ba8289ea3e9cc7c4c174fa404d681f7454e9e86ad5648d0c7c50d921d21f53e6f147ef2199596774337efd53bbfbb7348c5151441755d431113ed7d042ef31c37cb2b7dc04c14bd15ea232e5726f2b8f476e1850c9d663f0b44a0bb1f9086691251eb9a871a225d67c7e0db5c1c02d594c7efde7e59e6613ae89f2b0f4cec3cad88d686a8684f4e914ed04543d1183a1ee138b73509d3bf68dd98f253be61fd671ab0ae8d2978cf2a6e6f72b7c729498711a0b6c828108665003addcfc518b67d7c9fe7440bb1a4acb8e1f5b6e40f7856b3b2e4f5493abaae8daef6c175e0c6ac65c9a648f0366ffd0b6861d3944e77e38851cc32e691b66d3e606d633bd5a5aed27ba03a652c591b50c60e941adc1a4959ab974290f557cc8baf33389851a63828477160b645ffff5034008f9b1b4bd6ac5d4a4e319e560792e0df06c57bbe606075f409ec4442fe3feab0af61a20bddf02f38260e0acde7eea5350b25660448fd40657a47025af82fc131f68ce4da71d7a4652b643af78430b8c7353eca8d672a14c8e2d72e84fe024f1dc43665e6653cbaee00c640ae1cbe480c4bc5b5b1b7f8869845640a67afb796c179088fa10b29bd374a667b9be1586361a51c871816fd973ee103860bb138483b0e88c8fe65646db02fa30e1f0691cf12e17c0f88ce1501cf991c87bad8a19aed60fbeec53178b2068df6230fe5fa3cddddd83e7b8f6d4260c8c9f8884b1de02a67539aac55aeb7830796d76cda01ef0811b5b8788f9dad414d6c41bd3923cd9c45a3ec196184c09e687d4a586c772cb42b985063991bf00d2cb246e9c0aa6b0bc759947cbe82a06db7dca950e42874a366f636bda4069ec321f27a56d53782aa0b9d2cbb42d773fdcbb317da1ff5c1de63fbcb43eee0d9cdfab1eb7e2f6405e486e0a203528c3e564e302a3fa8eb7f433cc7429da180aa7b2a157356884fdcaf333e8eaa28997d8325ab9305ac5062a6520f71a202f6c444517cb3e353d223bf8da7f21be006cc0588c774b0f440635777fac566773beb06187ee1af6de6d712f3f9a61e6a06cc36d97ccbf0887193feabc2e945dff2273f2ff6c54d6e456cf494f711b58d20240a88d9505d9875fbbfef800a1818e5860b9ec94b7415bc07a5fc213e0f2c4272929a7826e04ae81a9f02366a987f2b2b199eaeed4753d4e900487a1043ebeae822e3be68b4182117de479cff435f3a32ead2e435c4b1aa3718be430070175fadd164174a36e2747acb426d3364e39a58e4b411a3172a540641697f3791f04c2b280f8907f30110330ca9f2af0263d88048328283186f83ac2eb4eec3209dd0c8d07934d36b453d74d7d49932c797790ef7da37f68b356d82693346d9e389a75bffa89c7438140ca968ee48356945f4cfbeeca75c62c3435e379dedd13aa32219fbdc592d0e5db5e312e8a9bb5e06f0af019ad3d47ba81f331d072b73f47f9d3971a59b92b6a5d1b712012c1f38a3245f051e0ed50195e0b0fa38a87e6f7c76a5b5ae9ce85215e4dee911fbb9fc142e121bbf1222ff91e5c57b8af0fbac112121b90fb1aec33190a2b6d876e59fb12e4ba0fcec46b3d2084b8f21e23944e206bd4a71aa510fc690a258ce66bb901db4a0eb3db5d4835ab010c06f3e7694e9a428b151fe6a1f9e570831e9c9d2d0bde04957da4672d89d7c1bfa664e7f5d9514464824ebe37740e4270314fb9c77272c93eac2f38bb8a2c7e78064f15485af1b66caaaf2021680f74be654fe9ab8d4536556a1941a939c19f12049805b87e5844b0dff16d6f55e32969afed08b72cb4d9d44014fbfb54e3a5526516743d3e78473c4ad3de980cc1ac5951c78cd76eb43d18afe598ee698d98144b9f347ff3f7f39d7dc82bfc942094838e50e1ef5ab678cce24904c4638ecf7c2e2c80a1402e064eb888b02ab6135d4714e6446db9e386051afd50f1d18ae8547bdfa3c72cfd538c47a4d49ef39cdb82b0f3bfa523a78025c03bd2e76cbce36ae79fc75d7d280573b6364a61f7b754f12f6d9c6f5c014bdc7604f45cdf4775750abfa0dbebb96132d16430a9af9b54a53975591ce87d7ff193c5aa0a51177fce546157bb3d6d50df8021d3a7e3d1d9339fda866381007f01aec5e193c6a8748a5558c908af50f7b64efb9871ba3cf26ab22e892cf6075cc8d90822f4678fa614b79c2011943841e1688e4baf4e2b30229cf943eeb5cf67c5dfca3b92eee5e73f8ebe65c471e47438a27629192f332326f9cef5c8de40f3e267f28f5731ca030d626b638b217c5535927419e9a0c1c0fd06c9e161114a1e20fcf6d06bacaa452db9cb268c668d7ba05fd429ba4eedfb08663cd22efa71eda46d34f4edfcfeab7f0d38dab76d8e02db0e8fc0f345baab7589a23f88a05f4ac165d865447f530e0ca13f285d816f1ddcd791f02875ea72e3fd79199beed073700095d06dc9345346c35d0aa83c5451270b38d6a7735c3c0bb4c01a5896887b03bbdd6a0952e4dedf268644d5fec48c95219467da78372c9227f385d4e7b3e5755bb52922497cfc99ce9924637e3a6bdf17983f9702a900d763716492845e77ee11a149d5dccda43772b1419ee06b3b127400eba3a262a34c8f7769f30aa839de51e31f62dbce4627bffe87742023f0d2d3d561e43b5a33b3fa6a238f40fb50964a8d6f6ecc451326147b0720da588769f3db8edc2c580496f446a39441a3a62a85f7c29247e70147a79bbcc625ed0f6a6c9931890d918239cfee27346ee55ae524125423821537d9a10a447fb6a6ae024916031c57dc9b22f3e6ace241087438d92782c2b25d3feec3a1404598415dba14d434c309a5b7043983022e4fbd791262de20426457c623ab7c1d98819cfc323a053e61c0a7d60d4dc3f6a1d749a0029916f04622eead3651c7ce718d48e6b6da8b5ed8bd9d21360e28b50ce0fd2cffa4c2a291ae81775439bb2da200d43ef70fe5482ca7b5014312f815c39e5f6dead75593b24c16edf9a4597f1943025f87dae954da9fcd38f956492b7e7b7debcadbf6c9c973e16eeb501b7cb8c782ddb924953dbe9afd67af1f576abcef421e67342e6e7cc1139892545a0b1578b5db48a0ae10f2c66a0efa169d639a0619cf775dfbf16353119ee4a5327a49b0c41bec5a3efcf4e542133da2836c55cad5c6aaf81a81b0c69c0a54ee1a72136fbca8d30c03e2d1afae65a52a96cf3ab786e5caef09c231c1b424c43d143a70bc529988a123d165fd0fcd4fc6ea04bef8cb5d610a9f49beb4cfb4774c75207710f42578938a3e653095d1abaf6b63bc4100b9e74caaf9280d11e4e59319d0f261322437377a6916edea8d2c145413c32a7cd8f9d479ee9b11859527ca57ce13872af58e7e3f300be978a914ec2a2d67cd2878bb3c030b9e569c6607927bada9b8e75c03621a8dcb7273b9d25db4ad01173e70ef5a6e6b1a8c3e35da6161f54a272b5593671fd210df6560270abe4d15beb2942d2bc011ebc10c92cef99e1283bef7eca24dbee02cbd87c4994ec9c2ba45015a657acaacc939f96827b9a9a346ae513fba8687f6ad09cb33fe9b92aeb4b615e72ecbcf952ab8b1f50d41e75cf528c7f152632193d0c243eef3b36548a9551738be9bf547537b34e96f5a0a6abb64a6cda7770ebba19a50f2a75ef957627f852cffa0154cf0c36f83954cf0b0fcfe9fbbcebb806d02cdc4151e6896481fb0da44871658bdcd6eb40e38a832ec945f26ae12fe12daae42e793e3eac0f8a55c282c8ea46f8552fa97affbdcbb9bbbb0b4df52469bdcc83b78d2752f48878ea6e4e600c505ab3b4deac8f28d8a56aed6553680d4a29a12d08d8148d2762493a994152de8fbd21e27cd5e05808ad891181d396e16809ab1b9fa05e917241c8e00aac1c7981687540e2b7214b4cb81893c23ba7ffbb78847c6a1a9887e23669389ccb873e8f404b8c1a15d8759a7a72769925d87dcdbc15c95c7ac0baba481630ef73e4f4e5484e6e1602794262daef96d710392fc97ea2d968e728cf2c66035912b51c6c1f8be823ea4a4e0c1d10cc61f2859380282e7fc9f2815ad2c1b2a6882e46aaad87eb12fb7f1885332a30605724962e5abe7bebbdd3b04d523adf1e55fbd87b9b248d08f7ef65fdf580b37099a82a1bf19e2d5b6e7cc425e663f77ddbc699b2bfd40c3e9d9205d658f003be9c0cb1c1e7b2e1c9926da17dd46a14e812aae4f0afac23dac9865b44b9fa189acbe9f23946c1907bb97d0e24b2faef1a5b990d87672211ef04d20029864c5cdd4755cad24e126e2fac8c7fecfc962cc99c8ad1214ed66d21585fc7b0ae9746d8ebfde5f1f92ba05e31e22c96746a7bd65dafdbf8947eec782682895a5a9bd283f5afa9a8c0d2f81416da6fa765de8e8f4fac7d67d5ca9602326ffb52b36960c0e86d0e5d74eb8a6c84d71a340727085c3dc0656240798ada0ad943657948810522f7437cecb6b4e7473a6e53cb87a4c5c1caa07fddbf33b39efc6ab5edf8e69558b2d64ffc76ee96bdf709ebdd9b06db78fc68141d565d398266a618e4f163b767d773756ac6a4290aeef3ec6fcd81febc30453327639fb8a4e3513c0103335ada7d8c14e1dd47180932b489f0b9846e5d4eb2ec803f26b015346cbbe06cb6aa15998e21f124fea5a68209531e1ec5374b95c5d722a8d6130e590b98c5a2010a2effe2de6b78879a2a207444e800d081723d40b48", 0x1000}, {&(0x7f00000000c0)="2cb17d2749f11e38d583146cd609e29f807c6e11adcac64b29ea1bc133a39583906de0bbae41df722517b547d235e5f027c5cf88344f9c2a96db3e43cecb52706869abf9fde71a98ef56398e3200c9f4426759a0e1fb16ec1f4a6ec385234f5130d59b3a0c6a6773b9cd203c0495c521d2c761529d243fc3fb81dcf425f786f027108450608ee5778ddfe9ff84c4bd6273c13c188da9797ebe5ae7220fd45d9afa823742706a02de923526eaff1a35f5d9c6520a376e0118956a2f927496ee64ef76f20ba1aa43a2e16875ab47abd9a853cd95a531fe7ea826", 0xd9}], 0x4, &(0x7f0000002540)=[{0xe4, 0x10a, 0xfffffffffffffffa, "1440d67bd9a04626880afd6dff2da8a13b513e0827a8f53412085753e4ef09b9c6b746687762222071fd93c857f8e3c4f2655b8adff728d2eca07e077672979ac1869740a35985904b576baf85110e783bd229ca343908fa762440d971a8bd2ae9743b5ed689d0368f8a32133fa4a48072ed15c2d520c74b5d6afcff4a9f24564619e4fad1b4a491bfd6cf1198f5535b6e81a39e99adf6e947d27d8d8834314e49cb67b342de9e4e3e98b4c5c3d114a85393350e071c715d0f07f793ad16baccae3391b5ed7a23d20da06873faebb75efa3c3d24c5"}], 0xe4}, 0x80) 15:45:46 executing program 4: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x5}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/enforce\x00', 0x8040, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001380)=0x2, 0x4) fstat(r1, &(0x7f0000000040)) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 15:45:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:46 executing program 4: openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/member\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f00000004c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x800, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) statfs(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/183) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@abs={0x1}, 0x41, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000001440)=0x80, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffeb0, &(0x7f00000015c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x100) statfs(&(0x7f0000001580)='./file0\x00', &(0x7f0000001600)=""/8) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x1, 0x400}) 15:45:46 executing program 3: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x7, 0x8) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x8001, 0x8f7, 0x100000001, 0xc306}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf90801040000000000806e757916000000d97c27940100fffffff800004000000000e908691ff9dc0100df010000000000000000000000005f"], 0x3c) 15:45:46 executing program 1: r0 = syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0x2) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNDETACHFILTER(r2, 0x400854d6, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0xfffffc3f) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) read(r1, &(0x7f00000005c0)=""/250, 0x7e3be68e) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setpgid(0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3d) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/pid_for_children\x00') setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000200)="88e28c1e88c38a54bfac226616b530f00c244ccfc0d6175a00e74cd4e3407f0e88c83367016271653ebdc9eb0fee998a9a6fcec1769ed42b7352b3bfb5780431da6813613bba60153b8f214fd0bdfa6ec4e43a892f667700676c06bb89fe4b4f18bcb853d3186919426bf6edc07cf38815c5a11872258793936a71e46cb5fa33b367fac6eb873ed8ec34b9a6ca975911da5cafc8358aca940b67d98e92c11469024f83d054cba8eac00d209369d95c2b3e7d888edafabef40ca5d9872bc8444464", 0xc1) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) pipe(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 15:45:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="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") ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 466.790507] binder: release 19186:19193 transaction 125 out, still active [ 466.834853] binder: undelivered TRANSACTION_COMPLETE 15:45:46 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@x25, &(0x7f0000000000)=0x80, 0x80000) recvfrom$unix(r0, &(0x7f0000000100)=""/66, 0x42, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000240)=""/228, 0xe4) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000840)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 466.873273] SELinux: policydb string length 262408 does not match expected length 8 [ 467.011148] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.060906] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.121269] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 15:45:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:46 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) fstat(r0, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) 15:45:46 executing program 3: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000001400)='./file0/file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="9ee5a407e27b467d8ce245b5bb87d03ea3"], &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000580)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x40400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='limits\x00') ioctl$UI_END_FF_UPLOAD(r1, 0x406055c9, &(0x7f0000000400)={0x2, 0x7fff, {0x55, 0x70a, 0xfffffffffffffffa, {0x7, 0x5}, {0x55, 0x6}, @const={0xff, {0x1, 0x200000, 0x8001, 0x6}}}, {0x57, 0x3ff, 0x0, {0x5, 0x6}, {0xeb, 0x2}, @period={0x0, 0x9, 0x1, 0x400, 0x9, {0x1, 0x4eb, 0x6, 0x800}, 0x1, &(0x7f0000000280)=[0x12]}}}) select(0x40, &(0x7f0000000600)={0x9, 0xfff, 0x6, 0x5, 0xaa79, 0x5, 0x1000, 0x5}, &(0x7f0000000640)={0x81, 0x3, 0x10001, 0x5, 0x0, 0x3, 0x6, 0x3}, &(0x7f0000000680)={0x0, 0x80000000, 0x5, 0x8, 0xffffffffffffff00, 0x7, 0x4, 0x3}, &(0x7f00000006c0)={0x0, 0x7530}) mount(&(0x7f0000000240), &(0x7f0000000040)='.', &(0x7f0000000480)='\xb3\xb8\x15W\x13\xfb\x18\xde\xa12T\x03\xcfIE\x8e\xa0U\xd7Y\x19\x82\x90=I\x1d\x14\xc2\xe9\xcb\xc3\x9e\x8b\xf7\x05\xc2\x1dL\xc6\xc5p\xba\x1b\x1b\x03\xc6\xdb@\x04\f\x16:m\xee\x93)\xd6i\xc3\xa8:\x02\xef!\x19\x95}mM\x06\xf7\x9c])\xc3\xf9z\xcb\xbb\xd1\xa0\x03H\x98\x93\x97\x12\xccc\x02\x0f1\x10\x7f1\xc3\xa7\xeak\x05Z=\x9c\xd0XE\x1e\xef\xeen\xbd\xb05x1yga\xe1o\x81\x0e$R\xbe}\v\xbb\x99\xee\x89\a9\x87?-\xe4\x81\x87B\x83B\xa5\xe9_b^{I&]\xcb\x01\xcd\xb7\x18\xbd) \x86>\xd6\xafH\xbf\x04J\xd8s\x94bZ$B=_\xef\xeb\xc9=:J\x96\xd5\x82\xc66\xa0\xbc>\xc3\xfa\x80\x85M\xebA\xda\xa2!\xd1.\xd5\xbd\xc1\xae\xaa\xbe\xd9\xdc\xbb\x85\vG\xa9\x8a\xb2VI8z\xb1\x1d{ Z\a\xb9\b+sl\x17\xf9}', 0x1004, 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x14c7e310498837d1, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000013c0)) mount(&(0x7f0000000040), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000880)=0xe8) r3 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) stat(&(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_nlink(&(0x7f0000001480)='./file0/file0\x00', &(0x7f0000001500)='trusted.overlay.nlink\x00', &(0x7f00000014c0)={'U+', 0x7f}, 0xd, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f00000010c0)=0xe8) sendmsg$netlink(r1, &(0x7f0000001380)={&(0x7f0000000700)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000001340)=[{&(0x7f0000001900)={0x1694, 0x25, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x184, 0x56, [@typed={0x8, 0x5, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x1b, @str='lo(\x00'}, @generic="4aecd3c203439737ead2dde42f32df12593c734373ff8942e84a36026c15c90c8ee8069a1b357e8536d51968b38b99a0c5517653c35b1e5c278e5b796e7b6a6528ddc60ec6824cd2c37b02f39caeebf62b0b425571fee6e621303da75d55d3b94e25788640e50f61e9044fc107e0dc1d1a01dfc1383b88bf3b2c", @generic="e48c90b70d32eae65fc20e0b922144452c28e620a99de10a55bce9d5fab4fef59bc562c31a7d1579afe428f37052ebccc6aa4f11366f2bd3d97b75b82424b7ec5ce9ee80a4fe374c77978f64810e0b3cb90861ecdc6b89fa775410ced6e64efd9df2533f8b57205a6a1ca97766e76523b9172b306f7a1ff2112dc0dd975543cd265c646fe6b1ce8503bc0f3132e4ab97a46bcffa2f8d3ce4e31a608665cc2caab107f5be4a990c8ee9957108e4333977c4d5ae0fa99bc354d45cdcb63e69b5f0ae850dd98c7c5658652468b2dc4fc22b2f4cc37e66dbc6b856ceb07628ed3e22457f06f274f17d2534feca23cfe65a18281e2fe0ccc6"]}, @nested={0x110c, 0x76, [@generic="2aa0029bc01377ff5a32fa2f4ccb79cd8025633dfc4e3868590b837d74634dc4593fc055369ebc9f16918901115633c944e3f8ce14e599f75433bd2da7f32376f9f84316ec43c3ae722ddcd3e608ad86756e545f839a96d232ebfd8faa477a393769e16b3eda610c23154cf95caeeb37566abc9d222bf5e7558fe747", @typed={0x4, 0x54}, @typed={0x1004, 0x36, @binary="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"}, @generic="7a5b582683341fe762fc09689d288abcb5cc5eab9b803ded7a0e2f3b231a20afe4dd59ceb3d86afac25d0ef538fb322a49fc15165fe88defdc4b830bfa870479e9322308815b48cc27283fef454ba66b093af19eae083ea1bc1cf08c274a2b90989236f275c94a86c7cd1990391bc8b29490ab41ababbd94af33082eb1d0390b3edaa5"]}, @generic="71dd26cab3d8900ee896d9b52c394d3470d46727740aeed0bb2b84c40d4637038cc8e29968cf090bfeea32c92714f0c7d9842db999436052cf876e4e92698b15c9fcf4cf3989b0adc201dc4e21bfafe745d3b6c83d77b108a153ca932ecd376acf576c160d4fce6ab68fbde1371aa889b8b92728310c2f44a12577342288555b81ed9495b8967ba317b0ba94a6bcc66ced693503fdacc6d66f0bbf70d5fd78e375df5dfae8e2254264a850c266dd245db86006", @generic="89488631f2664e1488fdc43a713893e879f0d77a33bc21222033ce1c25754fef212316bab0413cadbb0459e89d1fe05a771747aeafcdd75adbc4f51060285eb7bcf078826be13b09623cd6a59ae6a7bf9765435452d2092e68ce436ef5d706ab50e7c3b841e8a75192ac", @nested={0x150, 0x79, [@typed={0xa0, 0x56, @binary="13081d49327edebb93f4e201cd1d63562fc6f99d2d36ae0069e8d9755482f2b2ef82c5c3bb07a59b13b915abb30f2517e1ee50cf3e5e1efdda8065eb8a9508252b7934e79b5c75295133375f3b1d19806b4a94a3e28ed33f54cd038735b45bc35b3347b33705114479f72169fd66f7140246b1b63de574e1e619a48f79f8fc13dbe2e7bc25795320d74a2adbb4645d14c55a3e4b8f2487102af339"}, @generic="1a2f17ec15357351d58be3a556401b30182eddec17abdfcb860eecd82ef9f1d4f7cd5a037597c62b8c089c8b3246bfb86e6f1e96b2ef1ac17e81f79bf2ef2cb2f11df2a1479cde2d8676da8a89b19a6b9635c74bf6f652cdf23286565ad04ec48f0729ffb141bf26572e5d342ad1df6dc3692c4c23e5fbc70f8afc3e9f9f967c516b84e19732a96b105360789b4a537b4da58a8091ad5994bdd1d560ee867f1b379922cfbe0bfac3222b"]}, @generic="f2b46c2f70f5348433d2ce259c3e42fa10e369d6b3c3cc9c632b50dc65a9dfe3cd832a84954d0be00ab51453330429df673cb32f358bb34f520a0879a2af1e8474e6e50f0963aa4d9e4be35b8b3a80d3e295dc8d8f21f59fe0700758aa987f4fba025b40d3c593902ce62ee67c48a91143a9503416dba4c387b79e3c5c0b65bba3d94fce", @typed={0x14, 0x50, @ipv6=@loopback}, @nested={0xec, 0x84, [@generic="958098b62a9deb85066b921e1612e9a798fbbe58cebfe0e524e86f0db0020e2edf425ab3b9ebe36f62a116f9ef6ff32f8838f920e140962121e93c9c6867a84a935e7b76443063f82b1b46da87fb3d1982c947dfb948535350da6754669b7d6423670df6f996b80e0038ff4cd0f22ee18ccb6b2ae804084279127db7b1b089b8912044c72d46bf067abc6aca99d951464e8255374f75dd731712cf9c125aaf66ed1ad4937762cb1024dc838eb02806532314090e09ef0b3b839791e9fac00dacbe71df0fffaf5cf9d9b598816e", @typed={0x8, 0x22, @u32=0x2}, @typed={0x8, 0x0, @uid=r2}, @typed={0x8, 0x20, @u32=0x800}]}]}, 0x1694}, {&(0x7f0000000a00)={0x2ec, 0x13, 0x300, 0x70bd25, 0x25dfdbfb, "", [@generic="b1b93e73d839dd247c7790bbba7fb8d950afb4b8d4d8565ee6e9a0e5854ea729364e559a72b725070d7118a40b7ae14a4f7e1a9e47d1ba2158cd03ba7d385bba899ee10eb279bf7227208b16b69d4a97ab6e348e9cf8797ec13a86f730bfda447fb243e711ef1335aa2db1bfeacda9b29c1b67f4a8c02931cf2c85c7dba053aeaefbede0e3e77d", @nested={0x14c, 0x55, [@typed={0x8, 0x88, @str='\x00'}, @generic="79d6621fc67619c4d24ba9f18d5b698ab0f3f36ca7e718fcdc842b778853d150c2dad7f0eaacde6409e6cd2f41fa24db1aacdfc6540f35884fae1f724511f3317add94fbe8f0f96377b652b6d20f8997bba1189296014787345668e6765e33e52abdfdca6295c34bed15931d60c2b1159b569069beb9b17af5126f5e50a4a5267e0645895c980df96386b47e207e3c784414bb54c02c90ce37f1b50913636348a12b35a2020e5481bd3087ad461531f2479ef8018325ab682e6657a8c40fd77f8b2e", @generic="cb3860e1270bcee472a6040aa778dd5f2dec760f72c4af7a06c986f205", @generic="5bfd26c4ae344fecd4d299ea66bcfc26df2fb76f80b4e016d0d1efc2847cd813edbf7d1440d9ee6c3280af0938dcdddc3140b39d2491f773e393b9008d670a7f7783", @typed={0x14, 0x37, @ipv6=@ipv4={[], [], @broadcast}}, @typed={0x8, 0x66, @ipv4=@remote}]}, @typed={0x8, 0x56, @pid=r3}, @generic="67a7be64ca52d995f8f5db3d1ea0ddc9797fa7b5dc4f8a6cdd868ff35a57bd9631766d380acd55f74debfe005201fa26050e2dd7ac6fed41f52b58fa96a24f076ba180da754db6de9dbd11162c70613200bad5bd02f94f3dec2f90e907de965c2db9ce2b8ebb8261b8a300dc6cd9bc02d0e4", @nested={0x8c, 0x92, [@typed={0x8, 0x68, @uid=r4}, @generic="92b2efcd252f8c228948cbaf9f9ea1df8f0bca97b41b699b30b80b750b673e3e4ec6d01f2b0cc52fbc7cc3eecc44765dcbd651e1418c46561bf45bb340a0b4fa8211b2f531b094f6ae7bcbdfb4eb8d62e15b9f984b0985672a26566a2949b050a6a8499666e799c943f69ce4cb4544b251b0f126bc6345ece848e406b9daa5"]}]}, 0x2ec}, {&(0x7f0000000dc0)={0x15c, 0x26, 0x0, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x4, @ipv4=@empty}, @typed={0x8, 0x4b, @fd=r0}, @generic="3fd5a4ad2eb8e8665623bb33612c3467a92c5a4c9ca2e24a434dec8b506c98fd0e336a9a268b36f8e3540447b6086a45b615c53e1d70ef851dfb49e87090ab5ee4f6aebd3fe0e58ae43a8a9ecc1e3e8a3f0c12229d0895d34e0640f804fe17762a1b8acbf05b08cc073637d0d96e33a69767c0d6d6ae6c48654a1cab43c630176ca799dbf1da4354e8217a5157abc87e4c478736b7b06665632e", @typed={0xc, 0x47, @u64=0x100000000}, @generic="693bcc09e4033a442aa65df02a95147c1616f1d2a621d3ce257ee369444824d5b97664d253f2c85b8ae43031e9c4af9a15698dbca3594d4c42c5afaf5235e0c50e1ffb37e02d233a5a67ccd30f0a8441de560092a82d0664f8035a3e85be89861acf42757cf4448bf731680e0cff0b", @nested={0x24, 0x6c, [@typed={0x8, 0x8c, @fd=r0}, @typed={0x8, 0x5b, @uid=r5}, @typed={0x8, 0x46, @fd=r1}, @typed={0x8, 0x27, @u32=0xfff}]}]}, 0x15c}, {&(0x7f0000002fc0)={0x16e4, 0x36, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x1e8, 0x55, [@generic="5d966b7069bae9f244cec7d4738a354640be9fee6cd63b49cdcfe5f7151d9f23b553ee23437e5a414ab04cea19e159258bd2d6fdc2ef7945ab68e4acb7fab54089db45ad4e690f9f139bdcae3f952a656100cd7fc6afa608fc3fdeb3439bb9e04aa95f3b386f380237cf27910af2cd2ccf9387265d37974c840bb7727b58a1eb29772044884511d1a93db5abee77e546ea5fbb2bbe61fbfe659d2f132c4a2e2b98fdc218777c8ee82bd2eb9d55f55cab1159b44ec063e8a117c24471c5d8bdd853b4d054f293320340a4fd853ca4f56eece96d3f13a851d606d837c31bd6", @generic="71b59a7575b0939c45799b8e05e5681363c5ede1a1aeefbeeb0f41774500a37ee7", @typed={0x8, 0x89, @ipv4=@empty}, @typed={0x4, 0x63}, @generic="cfb3015f11565485cafeab008f7344dfa11deb370e229d3a2c7e09ae0f6fb54a16b88322e9bbc859316a3ebd98c527b2f3cd2fc9623e7c70a048ed47295beae26783fe2890edd52edf4c1407fd66566e61a20d85412180ace5a512e6da1a466f92dd3d537c6237679b9d6b2a977bc1f3e2fbe10890d5b7011a4ac6655c1336508ca6faf4124c9ebd4e310f1e86bd85e296cf18d8dce4449526ba6571c5c8d1addb813ed335bb6acb0d90957be39e4309e495547c491a9b2e53477981f8f72b079be28344c62b103d2f5ee933583348076fe743c326946c"]}, @nested={0xdc, 0x3, [@typed={0x8, 0x38, @fd=r0}, @generic="fa800311cb41ec79f9a1148586c30f4531704c835b20f3b4fb2ef32c75833d456caa782f563fe3ff605ff3e527bff1486e7b2d449780", @typed={0x8, 0x40, @ipv4=@loopback}, @typed={0x8, 0x17, @ipv4=@multicast2}, @generic="14e32be165bd6d6606fa6b39419c12db11b2a8301ca0b9aa3cf7885ed72e94cdceb8eb434734255459b72b2564d7d49a09e891411c64f7bb7cf61fada2ed0a3d995f5ba3dd272ad88eb3dcbed05e9347c7983074fb27d12c3be690", @typed={0x14, 0x4c, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x16, @uid=r6}, @generic="ad1d3443134f97d0be93caa168bc47d0fa"]}, @nested={0x1184, 0x10, [@generic="e63782148ef2522d697cf4e1cfb010abb6529352ea4ff3f886d7e51f385cee4ebdc575d6a3ffc4cdae7168781af61386d56ed2c0001661a0e49b323f1ed4144c44e13c4a2cdd9321d2148d5a9d7085e5b3f4c9d39d659b9dec1ae284263f02564ef17901fbcd617c44bc73bb9b3776213bd0166210173acb588d3c30d9a2faf36f6dac9b09dfb25cf89379cf485e8726d5434091c54dc29f04", @generic="f700f7667baf3e9fe0da75fb1f747b56f820cb901af70758151b3a41ffdc350ec28c5fde8e552b63777df5a68deb9fd5f5241afc1b66cfd054d5126915930748cdeff036937e12c00793d8c9269cbe5e8648d523054aa25fa182d5365d5d16fd2cd2c91a2e0fb73ce347c8ca63a00878a308b4392fb64f5af07336e75323e266a69881bd8637916688a5babe05176c6103d6a0f7325319f21fbe9af321f5ebea7012211a21b8f116872b269fcf43856698511d1cbb2c25ff", @typed={0x2c, 0x16, @str='selinuxwlan0userwlan0system-+wlan0@,\x00'}, @generic="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"]}, @typed={0xc, 0x1a, @u64=0x200}, @nested={0xc0, 0x6, [@generic, @generic="5e4095ad0aafdae8e06f04aeee379894b3488c19e52a64c3eba54be7735d2362935ac1a0bb69e1941123ad7a0eebfa226732cf885a654908a44fa50b427d1aab58faa6cbf5a3aecc1094e1ce9dfd4bcc478db530bf81ec52b8ca6ddb97ef495f35dd7e8ad8aca774525fedad9eb0cc9d8a73c32ae90c129e163383fcce2b90c4bb4af4547fe1d50899a3be2fda2a0d83569746edd3aa43d940badeaf39c412801893fd27a5e888e228b70a64d3e2ffb82f6cd4", @typed={0x8, 0x49, @fd=r1}]}, @generic="df1fcd148ec4c7a32c4e19dfbe81f7babad14b09666cd7ba7675ead132d48b7defefe8627f1e3b491d78d27bb83f655fc7526611090d780d70471068dcb72a20c7cf041a4a83bc9306cd8747c17514ad784c1bec5e4c8b1ae6009dc3a554eafc75b384d560ad4f4086d6f9405075001a39b6cbedd12e946e98ae3096027d5c758351c3c07ad68d4279972cc163ab1548163c6624df7aaa26f51c2f98ad7cc811a0cee5e6315a42902b6cb8de79aaef84de743ae3656ab6451a149a330228994610a43896bc1b7a466d0db3ad41b3d389b16fb7", @typed={0x8, 0x52, @uid=r7}, @generic="49a75d8f6b34ce86e6d75eeb75239872ce655ed775ac32a6e7cb2f7d5727bf66dd0393927ec0578e00582ecf7b5d7ca9256462b72dbc1bae9dd83631d1e807f4c280664eba7f25802ffa0fa60b7e795ce9b0e5cbc617af61ce26c6890351c82e634fac78f24266c735a767785438ccec95fe2e9b1ec89db23989f2c4f9b1b431027ba247815110f605252109f85f29b14fb6230ba9f5d520f0a823a1aa9fe6879e54592274c2ebabf620ec410cc0e9afd5e354c72d60c4542a85f949aa1cff8e779ec9db400c05b1249add1c7876", @typed={0xc, 0xa, @u64=0x7a0}, @typed={0x8, 0x1c, @u32=0x7}]}, 0x16e4}, {&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x1b0}, {&(0x7f00000012c0)={0x74, 0x2a, 0x100, 0x70bd28, 0x25dfdbfd, "", [@generic="372c6489fa7f0f74be33de35fb69f9e7d2d086dd34d6243fb3423812a0e5b1661ad9e4a2fcd7b2c92771e17dc0db1a82a52c0effb8625c8e281d4ffad96acda4ff0ea7e97d49e322ff8271e5aa72c5ac2e0c23406b0502f7252473b4f1a36c4ee7"]}, 0x74}, {&(0x7f00000046c0)={0x138c, 0x37, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="e908527c7f9868bcc643d112df51c5416722a2b6b5af2425ec4bd19d4dc8d710518e3a07b69f84468bc78a28b2268283eff4d17c3bfae843bd2e76d0396f426da32d27279867b7fafd8253b4752a9bc7a54c1af4054aac1038cdad7c4c22d30102b681ff0bcd91b5e313146b6c9879591eea27bc2d708d769ce5f09d3e7e6f08466db9b06b5688067ed435f8623d471d3981989bb411f07c0eb793fd35bf3d0f84c1c5484a593d572c0868d52d386e22ca11ebf1ed8a6e8d99d7e48776dbf377bcaedb6958b05cba158c8d2f152babf4e367fe2e99c756c749127231e8bc24a58ae89e4ec5c330a7dbdea3e4a36b124e129eca19", @nested={0x54, 0x28, [@generic="cb6cd526f47a85cc1d63f56940bc980ba601f56924e913342a04aa58ed6c311702fa9e0b085841b4f7e9166e1b6fee3791b8e841a2192f4f6f8a1953fe00aebeb1ee1ab7abdd69fa0e0f7133d4"]}, @nested={0x140, 0x50, [@typed={0x8, 0x1e, @u32=0xa56}, @generic="db22664c66d35c679b9287dbc388dc24241997eaf25797b378e858d2638e44a9279a5c09c7ecab460c6dc5", @typed={0x8, 0x8c, @ipv4=@empty}, @generic="dbaadd5ea3bcd35996bee44c", @generic="4778440f0a47d4ee680906648a36bfc8d670765471e4f2fd67b6f34c3895be0f81a84fbd645c871a1793458f818ce22147f0f8aea83b15fb28486e9be1a4f77510c5d325ea02e3e914f044ca55d12d28f640c7f04ec1d59360636de46f0cf3f87ad4df57d713f43ab3f042aa8a3c0ab5a9dfe76dcc3634ad768f035f32dd460e1dde760d5b38da1b5dca5fbfdc3d1fa006925ad89fb00c24e3b41ffac9928e692a55afdc541dbf79256d2c91e5f3aa2d259403747be323c3b5ca18ca4851672e3b2d45efb0f907d315e278a4fa769ef50e631d3a16ce678b1205d74a9c1bdae62813ee73d19c8f920414e297ddc9acf414d2df73"]}, @generic="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", @generic="711d941118b5f60e494d3e55f18cd83b49f032615acb6baa7c896cc4d9b82ca963c5c5603fcf06cda2abe1fe19cdacf8bbe38a4762d655685ab63547687ab96e2f232a8bd23c4e11e57130d1e14f721dbc664921eff21b54b525165b879d315bfc054b313932ffc3ff4e436ab5f377a2995a9177a76fb05defa09d9ca43f7f23b374d33f4edb2a6953b20bdefdb8c6169e1ac4e170889b5f9fd2c5c1fdc4e57cc687cba9b7f91b5b7e7b293601e85909b4c4de4d209154621f9d6d466d185ab1253caf58bd5fdc5f5e8c6ccbbceea423342d96c002387839dbb51c82bc449f433e239fd671f1d1989147096eae83b7d419"]}, 0x138c}], 0x7, 0x0, 0x0, 0x4000800}, 0x8000) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000580)='exofs\x00', 0x400, &(0x7f00000005c0)='\'bdevsecurity@\'@\x00') [ 467.161949] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.169997] binder: release 19192:19202 transaction 127 out, still active [ 467.195416] binder: undelivered TRANSACTION_COMPLETE [ 467.213494] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 15:45:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0xfffffffffffffe4f) 15:45:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 467.272602] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.290262] binder: release 19261:19263 transaction 131 out, still active [ 467.307398] binder: undelivered TRANSACTION_COMPLETE [ 467.364335] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.424967] binder: release 19268:19270 transaction 133 out, still active [ 467.429100] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.429114] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.429126] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.429139] hid-generic 0000:0004:FFFFFFFD.0020: unknown main item tag 0x0 [ 467.507026] binder: undelivered TRANSACTION_COMPLETE [ 467.511378] hid-generic 0000:0004:FFFFFFFD.0020: hidraw3: HID v0.00 Device [syz0] on sy [ 467.594889] binder: release 19225:19245 transaction 129 out, still active [ 467.604579] binder: undelivered TRANSACTION_COMPLETE 15:45:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4000000000000e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x0, 0x10000}, 0x14) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 15:45:48 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80900, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2b, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x8c) 15:45:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:48 executing program 1: fcntl$getown(0xffffffffffffff9c, 0x9) gettid() r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000240)) gettid() r1 = getpid() r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x600000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000340)='nej/ip6_es_names\x00g\x8d\x7f\xf2\f\xd4\x96R\xbe-Q\n\x062-wU8I2\x01\x8a*\xcf\xfe\xa0i\a\xa2\xbb\xe3\x13E\x0f\xef\x12\x92\x10E\x9e`U\xbe`w\xf6\x17\xc0\x1a\xc4\xa3\x01/:\r\xcd\x01\xfc\xf9\x82\'\xdaV\x9a[\xc9\xe3Cq\xed\x98\x9c#\x1e\xdcL\x9f\xd0:\xd8\x83\xf9\xc0\x14,\xa5\x17\\Z,E\xdcX`%\xd5(\xf2w\xb2\xfe*\x12\x99\xa5N\x93u \x82M\xbe+v\xe0\x18+\x89\x1d^Ob\xd3\xf2\xb1R\xaf\xe8\"\xb2\xa83\xa1WW\x8b\x00z\xa1\xfa\xf5\xd8\xb3#\x1a!~\x8b:\xd0\x03\xf9\xbc\xec\x1a\xa5\xa9^\xe8 k\xb1O\xd6G4\xfd\xdeF\x84\xf9y\xa6\xa1\xfe\x14\xec\x14\xc2\x0e\xaa\xbd\x1c0 \xfc\x82\xfe\xb5\xe9cxQ\x8e\x16@\x9e\xc6S9\xe7%\x93\xec]\x01\xe5\x90Z\xdf\xb6D\f;\x03#\x86\x85{t\x86/\x06\x00\xf5\x9c\\\xda\xfe\x9b\xc2\xa4\xa8\xb8\xf4\xe3?\x91\xfa\x97j\b\xf7\x93\x94\xa7\x1b\x1c*\x84w}\x03\x97\xbd\xd2\xd4\xda\x91u\xe5\xb5j\xc4\xcf') getdents(r3, &(0x7f0000000100)=""/49, 0x31) getdents(r3, &(0x7f0000000140)=""/25, 0x19) socket$inet6(0xa, 0x7, 0x1) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000000180)=""/82, 0x52}], 0x2) [ 468.883423] binder: release 19279:19283 transaction 135 out, still active 15:45:48 executing program 4: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000040)=""/38}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto(r0, &(0x7f0000000380)="755cfcb3d47a430878d29e4034fad3c52f123f1f8f744552721c39112aae8bed9c1efa2b9e84d3873b762be0c3aecd43a0f23c5191f115aee2d6207be3c8877a95ec150879b21a04d6eebb90a7006aa36ea669016a2d44ba9e52bf42bbddda39b8e1df202c51438a42f128d15ebf737dd94e5ab58f1459340ed1f2e1338bd04681cc01de31c7438808907115336824d3edb90204ec30cbb553c72972a39362b3bfd08bc3cda32bd86d415a28daaf68c6", 0xb0, 0x4800, &(0x7f0000000440)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x80) r1 = socket$inet6(0xa, 0x7fe, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @dev, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000005780), 0x4000000000000d2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) getsockname$unix(r1, &(0x7f00000002c0), &(0x7f0000000080)=0x6e) 15:45:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 469.007555] binder: undelivered TRANSACTION_COMPLETE 15:45:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x404000, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000180)=0x134, 0x4) 15:45:48 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0xffff}, 0x28, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)=ANY=[]) flistxattr(0xffffffffffffffff, 0x0, 0xffffffba) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(r1, &(0x7f0000000180)={0x30, 0x7, 0x1, 0xa3d, 0xa819, 0x8, 0xd9}, 0x0) syz_genetlink_get_family_id$fou(0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r3, 0x0, 0x4000000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r5 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000016c0)) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="eb3f8f103318547859753d52a6578905353629da402d3793efa2349da071f233bfd7d90c8419c59294668064aec755f7652e4a04be0e233db9e40b2d0111ff74b5abfac94d6f3f2bc8c5b0009ae5569e525e6073384d62a18121062995ee10b5ab3d4fed9675b5f8a9c9f1a95edc388b68760b3b9e08ff3f3ebed492ba51d92b788332b079ca8193fc5b9f529e72b42c"], 0xe) getpgrp(0xffffffffffffffff) sendfile(r7, r5, &(0x7f0000000300), 0x6d99) setsockopt$sock_int(r4, 0x1, 0x2000000000002, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000380)={0x34, 0x0, &(0x7f00000001c0)}) getpeername$inet6(r5, 0x0, 0x0) [ 469.190463] binder: 19280:19299 got transaction with invalid handle, 0 [ 469.197645] binder: 19280:19299 transaction failed 29201/-22, size 24-8 line 3228 15:45:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$setopts(0x4200, r2, 0x28000, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x8001, {{0x2, 0x4e21, @empty}}}, 0x84) r3 = gettid() setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2b) fcntl$setstatus(r1, 0x4, 0x42803) [ 469.245512] binder: release 19301:19307 transaction 138 out, still active [ 469.263256] binder: undelivered TRANSACTION_COMPLETE [ 469.351561] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.366398] binder: release 19320:19323 transaction 140 out, still active [ 469.385980] binder: undelivered TRANSACTION_COMPLETE [ 469.430830] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.464110] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.491379] binder: undelivered TRANSACTION_ERROR: 29201 [ 469.503225] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.550950] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.585410] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.604929] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.621849] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.629387] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.641952] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.657826] hid-generic 0000:0004:FFFFFFFD.0021: unknown main item tag 0x0 [ 469.712472] hid-generic 0000:0004:FFFFFFFD.0021: hidraw3: HID v0.00 Device [syz0] on sy 15:45:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:50 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001b40)={&(0x7f0000001440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/32, 0x20}, {&(0x7f00000015c0)=""/255, 0xfffffffffffffe63}, {&(0x7f00000016c0)=""/206, 0xce}, {&(0x7f00000017c0)=""/100, 0x64}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/3, 0x3}, {&(0x7f0000001980)=""/141, 0x6d}], 0x8, &(0x7f0000001a80)=""/161, 0xa1}, 0x2020) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001b80)={@ipv4={[], [], @loopback}, 0x17, r1}) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfef8, &(0x7f0000000000)=[{&(0x7f000000dfaa)="5500000018007f6800fe01b2a4a280930a060001fe800002000000003900090035005000060000001900054003000000000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0xffffff5e}], 0x1}, 0x0) 15:45:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040)=0x4, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x240, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0xff) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 15:45:50 executing program 1: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) futex(&(0x7f0000000200), 0x800000000005, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x14000003) 15:45:50 executing program 1: syz_genetlink_get_family_id$ipvs(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca4055e0bcfe47bf070") syz_execute_func(&(0x7f0000000880)="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") 15:45:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:50 executing program 3: 15:45:50 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) [ 470.900557] binder: 19346:19369 got transaction with invalid handle, 0 15:45:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETCARRIER(r0, 0x400454cb, &(0x7f0000000080)) 15:45:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 470.949621] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 470.983186] binder: 19346:19369 transaction failed 29201/-22, size 24-8 line 3228 [ 471.027822] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.066103] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.107018] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.148960] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.191181] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.230519] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.265500] binder: undelivered TRANSACTION_ERROR: 29201 [ 471.268242] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.268256] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.268268] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.268281] hid-generic 0000:0004:FFFFFFFD.0022: unknown main item tag 0x0 [ 471.292442] hid-generic 0000:0004:FFFFFFFD.0022: hidraw3: HID v0.00 Device [syz0] on sy 15:45:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005cc0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='m', 0x1}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4000000) 15:45:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:52 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:45:52 executing program 1: 15:45:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:52 executing program 1: [ 472.284101] binder: 19391:19398 got transaction with invalid handle, 0 [ 472.297624] binder: 19391:19398 transaction failed 29201/-22, size 24-8 line 3228 [ 472.307423] binder: undelivered TRANSACTION_ERROR: 29201 [ 472.317149] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:45:52 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 472.362399] binder: 19407:19408 got transaction with invalid handle, 0 [ 472.380035] binder: 19407:19408 transaction failed 29201/-22, size 24-8 line 3228 [ 472.399642] binder: 19394:19410 got transaction with invalid handle, 0 15:45:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 472.414661] binder: undelivered TRANSACTION_ERROR: 29201 [ 472.452526] binder: 19394:19410 transaction failed 29201/-22, size 24-8 line 3228 [ 472.464078] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.503495] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.526614] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 472.542711] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.558048] binder: 19421:19422 got transaction with invalid handle, 0 [ 472.571399] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.589862] binder: 19421:19422 transaction failed 29201/-22, size 24-8 line 3228 [ 472.614536] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.636935] binder: undelivered TRANSACTION_ERROR: 29201 [ 472.648341] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.693541] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.708825] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.716259] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.724765] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.737325] hid-generic 0000:0004:FFFFFFFD.0023: unknown main item tag 0x0 [ 472.762745] hid-generic 0000:0004:FFFFFFFD.0023: hidraw3: HID v0.00 Device [syz0] on sy [ 472.782444] binder: undelivered TRANSACTION_ERROR: 29201 15:45:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:53 executing program 1: 15:45:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:53 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:45:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:53 executing program 1: 15:45:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:53 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 473.711223] binder: 19432:19435 ioctl c0306201 0 returned -14 [ 473.727448] binder: 19432:19435 got transaction with invalid handle, 0 [ 473.739362] binder: 19432:19435 transaction failed 29201/-22, size 24-8 line 3228 [ 473.746565] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:45:53 executing program 1: 15:45:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 473.842189] binder: undelivered TRANSACTION_ERROR: 29201 [ 473.856827] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 473.883331] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 473.945951] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 473.970619] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 473.982794] binder: 19455:19456 ioctl c0306201 0 returned -14 [ 474.016808] binder: 19455:19456 got transaction with invalid handle, 0 [ 474.026108] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.059727] binder: 19455:19456 transaction failed 29201/-22, size 24-8 line 3228 [ 474.072020] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.096937] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.109956] binder: undelivered TRANSACTION_ERROR: 29201 [ 474.110255] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.110269] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.110281] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.110294] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.110306] hid-generic 0000:0004:FFFFFFFD.0024: unknown main item tag 0x0 [ 474.123032] hid-generic 0000:0004:FFFFFFFD.0024: hidraw3: HID v0.00 Device [syz0] on sy 15:45:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:54 executing program 1: 15:45:54 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 15:45:54 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) 15:45:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:54 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) 15:45:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETCARRIER(r0, 0x400454dc, &(0x7f0000000080)) [ 475.104466] binder: 19468:19470 ioctl c0306201 0 returned -14 [ 475.113154] binder: 19468:19470 got transaction with invalid handle, 0 [ 475.143435] binder: 19468:19470 transaction failed 29201/-22, size 24-8 line 3228 15:45:54 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 15:45:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 475.167052] binder: undelivered TRANSACTION_ERROR: 29201 15:45:55 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) 15:45:55 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) [ 475.236539] binder: 19482:19486 got transaction with invalid handle, 0 [ 475.273587] binder: 19482:19486 transaction failed 29201/-22, size 24-8 line 3228 [ 475.318231] binder: undelivered TRANSACTION_ERROR: 29201 [ 475.388259] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.412903] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.454868] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.474480] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.507197] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.515008] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.522797] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.530888] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.538282] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.556541] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.563692] hid-generic 0000:0004:FFFFFFFD.0025: unknown main item tag 0x0 [ 475.588139] hid-generic 0000:0004:FFFFFFFD.0025: hidraw3: HID v0.00 Device [syz0] on sy 15:45:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:56 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:45:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40041271, 0xffffffffffffffff) 15:45:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0078668681735c8c5e"], 0x1) syz_execute_func(&(0x7f00000003c0)="f2af91930f0124eda133fa20430fbafce842f66188d0c4e18014d1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac462b99cbc0ce8000000c482310d46f449f216c863fa438036a966410f6c244dd68dbaa9f340ae955b955fc4c191fd19c401405c6bfdd70fc7f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa5b3609c0f01c4288ba6452e00005480") 15:45:56 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 476.601553] binder: 19504:19508 got transaction with invalid handle, 0 [ 476.633673] binder: 19504:19508 transaction failed 29201/-22, size 24-8 line 3228 15:45:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:45:56 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 476.680837] binder: undelivered TRANSACTION_ERROR: 29201 [ 476.822058] binder: 19530:19532 got transaction with invalid handle, 0 [ 476.852403] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.859810] binder: 19530:19532 transaction failed 29201/-22, size 24-8 line 3228 [ 476.893555] binder: undelivered TRANSACTION_ERROR: 29201 [ 476.899108] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899121] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899133] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899145] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899157] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899169] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899181] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899192] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899204] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.899225] hid-generic 0000:0004:FFFFFFFD.0026: unknown main item tag 0x0 [ 476.953532] hid-generic 0000:0004:FFFFFFFD.0026: hidraw3: HID v0.00 Device [syz0] on sy 15:45:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:45:57 executing program 4: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) 15:45:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0078735c8c5e9daa49"], 0x1) syz_execute_func(&(0x7f00000003c0)="f2af91930f0124eda133fa20430fbafce842f66188d0c4e18014d1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac462b99cbc0ce8000000c482310d46f449f216c863fa438036a966410f6c244dd68dbaa9f340ae955b955fc4c191fd19c401405c6bfdd70fc7f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa5b3609c0f01c4288ba6452e00005480") 15:45:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:57 executing program 4: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) [ 478.032454] binder: 19545:19547 got transaction with invalid handle, 0 [ 478.056546] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 478.072395] binder: 19545:19547 transaction failed 29201/-22, size 24-8 line 3228 15:45:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:57 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 478.096508] binder: undelivered TRANSACTION_ERROR: 29201 15:45:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xc3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) 15:45:57 executing program 4: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) 15:45:58 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 478.206622] binder: 19559:19566 got transaction with invalid handle, 0 [ 478.217529] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.234513] binder: 19559:19566 transaction failed 29201/-22, size 24-8 line 3228 [ 478.264039] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.271665] binder: undelivered TRANSACTION_ERROR: 29201 [ 478.303450] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.332938] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.375429] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.394066] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.401519] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.411023] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.418342] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.425619] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.435973] hid-generic 0000:0004:FFFFFFFD.0027: unknown main item tag 0x0 [ 478.449738] hid-generic 0000:0004:FFFFFFFD.0027: hidraw3: HID v0.00 Device [syz0] on sy [ 478.830394] binder: release 19546:19555 transaction 154 out, still active [ 478.847057] binder: undelivered TRANSACTION_COMPLETE 15:45:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:45:59 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e21, @remote}}) stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) chown(&(0x7f0000000040)='./bus\x00', r1, r2) 15:45:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xf8, 0x32, 0x401, 0x70bd26, 0x25dfdbfb, {0x18}, [@generic="e7ab263a0c65f8feb08482fd312bb5cefb7cf7472dbf4edceb5303acc07584e5103af6062d0e8d8891af11d3344d4e85d828873e377ad3846fde75f4ccdfb9f36b0ca410136523be4cefe90d07419237035a005fd2f9a3288eb18c4686fa51030f9b0cc022", @generic="e1641f554eaaebc418ba25c1bf558c31a0104212dcacadad4dc9f79f7f07825b59567576efa36c5892104f89f8ff8fbcfc6a2a988a98143c25b80825178c3ab181fb81ae72c297f2c32e4b5614fd42f4357b0c39c975befdd147c6d1210e7d4e621d7d3c59b01806fbeb2b47dade783c48713d8ced876479969156b4d006"]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000004}, 0x840) timerfd_create(0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000240)) 15:45:59 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:45:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 479.429629] binder: 19581:19587 got transaction with invalid handle, 0 [ 479.454454] binder: 19581:19587 transaction failed 29201/-22, size 24-8 line 3228 15:45:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) [ 479.476733] binder: undelivered TRANSACTION_ERROR: 29201 15:45:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000000)={'veth0_to_hsr\x00', @ifru_map={0x2, 0x100000000, 0x1, 0x3ff, 0x6, 0x7e}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) 15:45:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:45:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 479.504565] binder: release 19584:19590 transaction 158 out, still active [ 479.525300] binder: 19597:19601 got transaction with invalid handle, 0 [ 479.532607] binder: undelivered TRANSACTION_COMPLETE [ 479.544399] binder: 19597:19601 transaction failed 29201/-22, size 24-8 line 3228 [ 479.597743] binder: undelivered TRANSACTION_ERROR: 29201 [ 479.688173] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.695577] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.716020] binder: release 19610:19615 transaction 161 out, still active [ 479.740179] binder: undelivered TRANSACTION_COMPLETE [ 479.772524] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.822059] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.857177] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.881122] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.900624] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.919278] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.929866] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.939225] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.946377] hid-generic 0000:0004:FFFFFFFD.0028: unknown main item tag 0x0 [ 479.963199] hid-generic 0000:0004:FFFFFFFD.0028: hidraw3: HID v0.00 Device [syz0] on sy 15:46:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:00 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x60080, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x800) write$P9_RLERROR(r0, &(0x7f00000000c0)={0xd, 0x7, 0x2, {0x4, 'proc'}}, 0xd) pipe(&(0x7f0000000100)) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x202801) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) pipe(&(0x7f0000000140)) 15:46:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:00 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:46:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/59, 0x3b) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 15:46:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 480.961228] binder: 19632:19640 got transaction with invalid handle, 0 [ 480.968231] binder: release 19634:19639 transaction 164 out, still active [ 480.975624] binder: undelivered TRANSACTION_COMPLETE [ 480.991274] binder: 19632:19640 transaction failed 29201/-22, size 24-8 line 3228 [ 481.000327] binder: undelivered TRANSACTION_ERROR: 29201 [ 481.082327] binder: 19648:19653 got transaction with invalid handle, 0 [ 481.087042] binder: release 19652:19655 transaction 167 out, still active [ 481.087046] binder: undelivered TRANSACTION_COMPLETE [ 481.158265] binder: 19648:19653 transaction failed 29201/-22, size 24-8 line 3228 [ 481.176077] binder: undelivered TRANSACTION_ERROR: 29201 [ 481.230900] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.239915] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.256740] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.264544] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.273863] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.281160] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.288731] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.296040] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.303541] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.311083] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.321734] hid-generic 0000:0004:FFFFFFFD.0029: unknown main item tag 0x0 [ 481.336966] hid-generic 0000:0004:FFFFFFFD.0029: hidraw3: HID v0.00 Device [syz0] on sy 15:46:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:02 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:46:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:46:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21108000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000027bd7000fedbdf1e4a00000008000400ff03000008000600090000000800060061d10000080006000400000074368668ae81af17310e31988c576a266cca19537107255047bb18fbc9fca0028d7128bada4100a01804224b788f8921e09443963871b2de361f7c2e309cb39061f34bbabd1a80be9d3051983aa9f217e8265f07d466156c273b4434ad55e916b249f5b5f41873e737c0cc5138d258793e0d148815a74bdf2b00d119a2"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 15:46:02 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:46:02 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 482.603093] binder: 19668:19672 unknown command 25349 [ 482.614642] binder: release 19665:19674 transaction 169 out, still active [ 482.640304] binder: undelivered TRANSACTION_COMPLETE [ 482.662081] binder: 19668:19675 got transaction with invalid handle, 0 [ 482.669221] binder: 19668:19672 ioctl c0306201 200000c0 returned -22 15:46:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 15:46:02 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 482.713835] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 482.715800] binder: 19668:19675 transaction failed 29201/-22, size 24-8 line 3228 [ 482.721920] binder: 19677:19686 got transaction with invalid handle, 0 [ 482.721987] binder: 19677:19686 transaction failed 29201/-22, size 24-8 line 3228 [ 482.751805] binder: undelivered TRANSACTION_ERROR: 29201 15:46:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 482.768991] binder: undelivered TRANSACTION_ERROR: 29201 15:46:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 15:46:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 15:46:02 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 482.856881] binder: 19697:19698 unknown command 25349 15:46:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 482.898663] binder: 19697:19698 ioctl c0306201 200000c0 returned -22 [ 482.907697] binder: release 19702:19704 transaction 173 out, still active [ 482.914802] binder: undelivered TRANSACTION_COMPLETE [ 482.936652] binder: 19697:19706 got transaction with invalid handle, 0 [ 482.973003] binder: 19697:19706 transaction failed 29201/-22, size 24-8 line 3228 [ 483.037749] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.046942] binder: undelivered TRANSACTION_ERROR: 29201 [ 483.074649] binder: release 19715:19718 transaction 176 out, still active [ 483.088021] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.106037] binder: undelivered TRANSACTION_COMPLETE [ 483.123029] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.130614] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.138384] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.145828] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.154911] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.176652] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.183912] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.191120] hid-generic 0000:0004:FFFFFFFD.002A: unknown main item tag 0x0 [ 483.205111] hid-generic 0000:0004:FFFFFFFD.002A: hidraw3: HID v0.00 Device [syz0] on sy 15:46:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 15:46:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x95, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x22000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) 15:46:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 483.919275] binder: release 19727:19731 transaction 178 out, still active [ 483.930377] binder: undelivered TRANSACTION_COMPLETE [ 483.932651] binder: 19726:19734 unknown command 25349 [ 483.932661] binder: 19726:19734 ioctl c0306201 200000c0 returned -22 [ 483.932895] binder: 19726:19734 got transaction with invalid handle, 0 [ 483.932961] binder: 19726:19734 transaction failed 29201/-22, size 24-8 line 3228 15:46:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101001, 0x0) write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:hald_dccm_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xefb8, 0x20, './file0\x00'}, 0x53) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs(r2, &(0x7f0000000140)='timers\x00') 15:46:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 483.978744] binder: undelivered TRANSACTION_ERROR: 29201 15:46:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 484.045206] binder: 19739:19745 got transaction with invalid handle, 0 [ 484.048636] binder: 19743:19748 got transaction with invalid handle, 0 [ 484.048702] binder: 19743:19748 transaction failed 29201/-22, size 24-8 line 3228 [ 484.048984] binder: undelivered TRANSACTION_ERROR: 29201 [ 484.051138] binder: 19742:19747 unknown command 287493 [ 484.051147] binder: 19742:19747 ioctl c0306201 200000c0 returned -22 [ 484.051327] binder: 19742:19747 got transaction with invalid handle, 0 [ 484.051388] binder: 19742:19747 transaction failed 29201/-22, size 24-8 line 3228 [ 484.051556] binder: undelivered TRANSACTION_ERROR: 29201 [ 484.112322] binder: 19752:19754 unknown command 287493 [ 484.119194] binder: 19752:19754 ioctl c0306201 200000c0 returned -22 [ 484.129415] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.162888] binder: 19752:19756 got transaction with invalid handle, 0 [ 484.178851] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.206381] binder: 19752:19756 transaction failed 29201/-22, size 24-8 line 3228 [ 484.225911] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.227041] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227055] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227068] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227080] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227093] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227105] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227127] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227140] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227152] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227165] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.227177] hid-generic 0000:0004:FFFFFFFD.002C: unknown main item tag 0x0 [ 484.258503] hid-generic 0000:0004:FFFFFFFD.002C: hidraw3: HID v0.00 Device [syz0] on sy [ 484.281719] binder: 19739:19745 transaction failed 29201/-22, size 24-8 line 3228 [ 484.289609] binder: undelivered TRANSACTION_ERROR: 29201 [ 484.356178] binder: undelivered TRANSACTION_ERROR: 29201 [ 484.445529] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.453389] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.461002] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.468707] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.475967] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.496557] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.503624] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.526534] hid-generic 0000:0004:FFFFFFFD.002B: unknown main item tag 0x0 [ 484.551572] hid-generic 0000:0004:FFFFFFFD.002B: hidraw4: HID v0.00 Device [syz0] on sy 15:46:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 485.469219] binder: 19768:19771 got transaction with invalid handle, 0 [ 485.481176] binder: 19769:19774 unknown command 287493 [ 485.488070] binder: 19767:19775 got transaction with invalid handle, 0 [ 485.490541] binder: 19768:19771 transaction failed 29201/-22, size 24-8 line 3228 [ 485.491034] binder: 19769:19774 ioctl c0306201 200000c0 returned -22 [ 485.491647] binder: 19769:19774 got transaction with invalid handle, 0 15:46:05 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000000)=0x9bb, 0x4) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) 15:46:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 485.491692] binder: 19769:19774 transaction failed 29201/-22, size 24-8 line 3228 [ 485.504135] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.505863] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.537517] binder: 19767:19775 transaction failed 29201/-22, size 24-8 line 3228 [ 485.556527] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.578007] binder: 19777:19778 got transaction with invalid handle, 0 [ 485.620695] binder: 19777:19778 transaction failed 29201/-22, size 24-8 line 3228 [ 485.639534] binder: 19781:19787 ioctl c0306201 0 returned -14 [ 485.648514] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 15:46:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 485.672037] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.684262] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.716916] binder: 19781:19792 got transaction with invalid handle, 0 [ 485.740199] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.750022] binder: 19781:19792 transaction failed 29201/-22, size 24-8 line 3228 [ 485.767995] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.782150] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.795708] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.823882] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.854446] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.886523] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.894101] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.902367] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 [ 485.909485] hid-generic 0000:0004:FFFFFFFD.002D: unknown main item tag 0x0 15:46:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x7fff, 0x800}) [ 485.931695] hid-generic 0000:0004:FFFFFFFD.002D: hidraw3: HID v0.00 Device [syz0] on sy [ 485.980792] binder: 19802:19803 ioctl c0306201 0 returned -14 [ 485.990191] binder: 19802:19803 got transaction with invalid handle, 0 [ 485.997964] binder: 19802:19803 transaction failed 29201/-22, size 24-8 line 3228 [ 486.014767] binder: undelivered TRANSACTION_ERROR: 29201 15:46:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) io_setup(0x7fff, &(0x7f0000000080)=0x0) io_submit(r2, 0x7, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x5f7, r0, &(0x7f00000000c0)="751156e8df3787e7c06f7cc8fc0b76b97f91e2aa37d522e617b27003df2a86d6d378d6b649347a159bb4ab53fdb0b18b29e66545a3aba1079070519b4e11aef4f1656afd16366d7a76a8fcfcdf39b3d615ed0ea0ea7b17cbaa11ccb6e4bfd83f5cbd76c598013c5e16ec89a82877e82ca2daee4b421516cf6706cd0064f82c01567f3c7cc27e69edd165ffb13fd271fcb6fbc1d3c55b87f900672cb85e19", 0x9e, 0xcb, 0x0, 0x0, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffe00, r1, &(0x7f00000001c0)="f1fad6ae3d", 0x5, 0x1000, 0x0, 0x1, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000240)="9a23e37bb77c5bee83af519a4a429c0f551c2af8ad2d7b4f41570d819a425d82cde1534174329c8ad1e6561e484a87cfeb2271cd8a94f6f3bf9d8e0c4ea8c9cd2519be917719aa498dc0406d2d2fcf252977a066707019197982f5c99a328f7d0e4d27118d9ee16267d17ecf236dd18a0dbb019810d363c2b7a1db5139118fe096488ec655bf5c7a974fdbb5a59c727fb1e5c33732b73adc0917414f59703df91e47ae9969c882ec22fac68d6f70d3eb532916cb", 0xb4, 0x1, 0x0, 0x2, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000340)="12d4b2f6bec18a9c09a5fed0e93a11e73984b84035eb42159810ce274e6ee80c0e82c30a43871be54d52fadfc5e9ad759e75ac35367a7ba4a08c35cae6116849baaea5ecc71cf1a9171fe6d21bc2e86bb26a09ebda4370bcbe8f9c31a39963053a4673a5fd438040f97f2fe16fcd91c65d55127c57", 0x75, 0x7, 0x0, 0x0, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000400)="fbc5c60d599b04ffc0d80378c7165b1e07cca4b9fefce08041c9bf962607bb2982cc5881f00bebaa7710581a351d059915d970718d957f61ae014cb985c7f855845d9aed7cebb4f2a4cceca25621ef84482d13de0d7323f3b26b1729be8182e0458e81c9acd6d1a4", 0x68, 0xffffffff, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f00000004c0)="ee54d4ad1344311de7fc8c1400327b9ace0f9df21016fc08fb28a5ed2589d1012cf815ed1b968d246cdb7ce46f4864d1342f36e2a85cfea6da7b82382e5e12d6deaf3a418a6dbb6254217ca1cb01562f0baaad01a067c380960751d70d710d59b54f8ab83c754d459d5df04343b2269243e1f1d6eff01d1a2a8034293dfc8b3aa04b4d92032d6da3e8f192f373f488a8dc5c0c417246d549e33c714940d75689cec7d75f120a1df5f2dd9a5057ed77e4cb8938835f01e303421f58a7518a1cd6223fa11c2f7b88aaf070f6ebce0a07956537e76e66", 0xd5, 0x101, 0x0, 0x3, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xdec7, r1, &(0x7f0000000600)="81460a2f271b6ab09d885ea071ba6c0ce81a13fbfd199a06ac7688df0696240784812a3b2fab267ec8b467bcc9d52a6180eae75c243f7084c4ecfce3a66cd0387ac144b2daab07defd5377dd89af2892339c14adf1faf84a021008", 0x5b, 0x7fdd, 0x0, 0x1, r1}]) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 15:46:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f0000000240)=""/70) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x100000001, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40081}, 0x800) [ 487.157912] binder: 19809:19817 ioctl c0306201 0 returned -14 [ 487.196840] binder: 19809:19817 got transaction with invalid handle, 0 15:46:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f00000000c0)) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000040)={0x6, 0x2a6929fb, [0x401, 0x1dc3, 0x0, 0x40, 0x9], 0x2}) read$FUSE(r1, &(0x7f0000000100), 0x1000) [ 487.208072] binder: 19809:19817 transaction failed 29201/-22, size 24-8 line 3228 15:46:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 487.269188] binder: 19822:19828 ioctl c0306201 0 returned -14 [ 487.278945] binder: undelivered TRANSACTION_ERROR: 29201 [ 487.340089] binder: 19837:19838 ioctl c0306201 0 returned -14 [ 487.347118] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 487.347430] binder: 19837:19838 got transaction with invalid handle, 0 [ 487.347508] binder: 19837:19838 transaction failed 29201/-22, size 24-8 line 3228 [ 487.351989] binder: undelivered TRANSACTION_ERROR: 29201 [ 487.398937] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.418485] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.431948] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.439338] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.506270] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.517535] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.531052] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.544921] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.552613] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.559936] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.567247] hid-generic 0000:0004:FFFFFFFD.002E: unknown main item tag 0x0 [ 487.580981] hid-generic 0000:0004:FFFFFFFD.002E: hidraw3: HID v0.00 Device [syz0] on sy 15:46:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:09 executing program 1: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:09 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c05, 0xffffffffffffffff) 15:46:09 executing program 3: inotify_init1(0x800) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0x7, 0x2, 0xfffffffffffff8b4}) 15:46:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x4, 0x2, 0x1, r2}) [ 489.325852] binder: 19851:19858 ioctl c0306201 0 returned -14 [ 489.346555] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 489.359576] binder: release 19852:19861 transaction 198 out, still active 15:46:09 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 489.370286] binder: 19853:19860 got transaction with invalid handle, 0 [ 489.384823] binder: undelivered TRANSACTION_COMPLETE [ 489.399582] binder: 19853:19860 transaction failed 29201/-22, size 24-8 line 3228 [ 489.408563] binder: undelivered TRANSACTION_ERROR: 29201 15:46:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 489.437156] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 489.464701] binder: release 19868:19872 transaction 201 out, still active [ 489.466826] binder: 19870:19873 ioctl c0306201 0 returned -14 [ 489.516329] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.557367] binder: undelivered TRANSACTION_COMPLETE [ 489.589166] binder: 19878:19882 got transaction with invalid handle, 0 [ 489.593379] binder: release 19880:19884 transaction 205 out, still active [ 489.593384] binder: undelivered TRANSACTION_COMPLETE [ 489.612096] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.650958] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.658324] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.666106] binder: 19878:19882 transaction failed 29201/-22, size 24-8 line 3228 [ 489.677388] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.692765] binder: undelivered TRANSACTION_ERROR: 29201 [ 489.696663] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.696677] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.696690] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.696702] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.696714] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.696726] hid-generic 0000:0004:FFFFFFFD.002F: unknown main item tag 0x0 [ 489.709687] hid-generic 0000:0004:FFFFFFFD.002F: hidraw3: HID v0.00 Device [syz0] on sy 15:46:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@empty, 0x4e22, 0x0, 0x4e20, 0x401, 0x0, 0x80, 0x0, 0x5f, r2, r3}, {0x17, 0x90, 0x6, 0x100, 0x2, 0xffffffff, 0x6, 0x1}, {0x9, 0x0, 0x7, 0x2}, 0x8, 0x6e6bb3, 0x3, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x1, 0xf15b, 0x81, 0xffffffffffff50ae}}, 0xe8) r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 15:46:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400000) 15:46:10 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:10 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:10 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 490.778199] binder: 19896:19903 got transaction with invalid handle, 0 [ 490.787154] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 490.798320] binder: 19896:19903 transaction failed 29201/-22, size 24-8 line 3228 [ 490.799011] binder: undelivered TRANSACTION_ERROR: 29201 [ 490.874393] binder: 19915:19919 got transaction with invalid handle, 0 [ 490.906982] binder: 19915:19919 transaction failed 29201/-22, size 24-8 line 3228 [ 490.947843] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 490.958084] binder: undelivered TRANSACTION_ERROR: 29201 [ 490.990078] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.014313] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.023723] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.031467] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.039009] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.048405] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.056326] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.063877] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.071138] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.079955] hid-generic 0000:0004:FFFFFFFD.0030: unknown main item tag 0x0 [ 491.098253] hid-generic 0000:0004:FFFFFFFD.0030: hidraw3: HID v0.00 Device [syz0] on sy 15:46:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) 15:46:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:11 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003840)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7f, &(0x7f0000003880)=0x4, 0x4) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) r2 = dup2(r1, r1) recvfrom$inet6(r2, &(0x7f0000000000)=""/131, 0x83, 0x102, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 15:46:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x230800, 0x0) [ 492.126395] binder: 19939:19941 got transaction with invalid handle, 0 [ 492.138893] binder: 19939:19941 transaction failed 29201/-22, size 24-8 line 3228 15:46:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 492.166577] binder: 19933:19936 got transaction with invalid handle, 0 [ 492.191440] binder: undelivered TRANSACTION_ERROR: 29201 [ 492.208577] binder: 19933:19936 transaction failed 29201/-22, size 24-8 line 3228 15:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x3) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 492.217332] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 492.248753] binder: undelivered TRANSACTION_ERROR: 29201 [ 492.276544] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 492.291072] binder: 19958:19960 got transaction with invalid handle, 0 [ 492.296094] binder: 19959:19962 got transaction with invalid handle, 0 [ 492.296160] binder: 19959:19962 transaction failed 29201/-22, size 24-8 line 3228 [ 492.313885] binder: undelivered TRANSACTION_ERROR: 29201 [ 492.371836] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.378206] binder: 19958:19960 transaction failed 29201/-22, size 24-8 line 3228 [ 492.380756] binder: undelivered TRANSACTION_ERROR: 29201 [ 492.429152] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.436648] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.436929] binder: 19964:19967 got transaction with invalid offset (0, min 0 max 0) or object. [ 492.436999] binder: 19964:19967 transaction failed 29201/-22, size 0-8 line 3199 [ 492.437209] binder: undelivered TRANSACTION_ERROR: 29201 [ 492.491501] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.499047] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.514046] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.522842] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.535316] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.543278] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.550757] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.558026] hid-generic 0000:0004:FFFFFFFD.0031: unknown main item tag 0x0 [ 492.573816] hid-generic 0000:0004:FFFFFFFD.0031: hidraw3: HID v0.00 Device [syz0] on sy 15:46:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101800, 0x120) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2e7e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x13c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 15:46:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x8) fcntl$getown(r0, 0x9) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x800, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x84) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000080)) 15:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 493.509895] binder: 19975:19981 got transaction with invalid handle, 0 [ 493.518243] binder: 19980:19982 got transaction with invalid offset (0, min 0 max 0) or object. [ 493.529701] binder: 19975:19981 transaction failed 29201/-22, size 24-8 line 3228 [ 493.541170] binder: 19980:19982 transaction failed 29201/-22, size 0-8 line 3199 [ 493.550614] binder: 19977:19979 got transaction with invalid handle, 0 15:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000100)=""/247) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r0) [ 493.551694] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.559333] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.597822] binder: 19977:19979 transaction failed 29201/-22, size 24-8 line 3228 [ 493.625131] binder: 19991:19992 ioctl c0306201 0 returned -14 [ 493.635951] binder: 19991:19992 got transaction with invalid handle, 0 15:46:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 493.637949] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 493.668984] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.690520] binder: 19995:19998 got transaction with invalid offset (0, min 0 max 0) or object. 15:46:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r1 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000100)={@empty, @multicast2, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@empty, r3}, 0x14) 15:46:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 493.717918] binder: 19991:19992 transaction failed 29201/-22, size 24-8 line 3228 [ 493.733057] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.753628] binder: 19995:19998 transaction failed 29201/-22, size 0-8 line 3199 [ 493.790322] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.821620] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 493.870266] binder: 20012:20015 ioctl c0306201 0 returned -14 [ 493.897374] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 493.901945] binder: 20008:20016 got transaction with invalid handle, 0 [ 493.901998] binder: 20008:20016 transaction failed 29201/-22, size 24-8 line 3228 [ 493.902222] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.926243] binder: 20012:20018 got transaction with invalid handle, 0 [ 493.926297] binder: 20012:20018 transaction failed 29201/-22, size 24-8 line 3228 [ 493.955752] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.987134] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.000045] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.010071] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.025576] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.036978] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.045523] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.054259] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.062381] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.069802] hid-generic 0000:0004:FFFFFFFD.0032: unknown main item tag 0x0 [ 494.093331] hid-generic 0000:0004:FFFFFFFD.0032: hidraw3: HID v0.00 Device [syz0] on sy 15:46:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0xf, 0x7, 0xe0000, 0x7b9f9f40}, 0x14) 15:46:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4002, 0x8000) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) fchdir(r0) 15:46:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 495.058241] binder: 20024:20027 ioctl c0306201 0 returned -14 [ 495.065073] binder: 20022:20028 got transaction with invalid handle, 0 [ 495.078332] binder: 20025:20031 got transaction with invalid offset (0, min 0 max 0) or object. [ 495.083863] binder: 20024:20027 got transaction with invalid handle, 0 [ 495.083929] binder: 20024:20027 transaction failed 29201/-22, size 24-8 line 3228 15:46:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:14 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x161802, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0x40, 0x7f}}, 0x30) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x10000, 0x1f, 0x1}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) 15:46:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) fsetxattr(r0, &(0x7f0000000180)=@random={'osx.', '/dev/loop#\x00'}, &(0x7f00000001c0)='/dev/loop#\x00', 0xb, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000140)=0x60) [ 495.088257] binder: 20022:20028 transaction failed 29201/-22, size 24-8 line 3228 [ 495.113944] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.121649] binder: undelivered TRANSACTION_ERROR: 29201 15:46:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 495.192178] binder: 20037:20042 got transaction with invalid handle, 0 [ 495.208967] binder: 20041:20044 unknown command 25349 [ 495.219111] binder: 20037:20042 transaction failed 29201/-22, size 24-8 line 3228 [ 495.229385] binder: 20041:20044 ioctl c0306201 200000c0 returned -22 15:46:15 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x80000) flistxattr(r0, &(0x7f0000000100)=""/4096, 0x1000) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0/file0\x00', 0x4000000000030201, 0x110) r3 = fcntl$dupfd(r0, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x16}, 0x4, 0x0, 0x3, 0xb, 0xffff, 0x3}, 0x20) [ 495.229641] binder: 20025:20031 transaction failed 29201/-22, size 0-8 line 3199 [ 495.232614] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.262241] binder: 20041:20052 got transaction with invalid handle, 0 [ 495.271802] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 495.287570] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.305776] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.321888] binder: 20041:20052 transaction failed 29201/-22, size 24-8 line 3228 [ 495.339249] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.358628] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.376174] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.390113] binder: 20057:20058 got transaction with invalid offset (0, min 0 max 0) or object. [ 495.400161] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.411253] binder: 20057:20058 transaction failed 29201/-22, size 0-8 line 3199 [ 495.423589] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.440175] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.454305] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.484730] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.496581] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.515796] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.524142] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.544928] hid-generic 0000:0004:FFFFFFFD.0033: unknown main item tag 0x0 [ 495.569118] hid-generic 0000:0004:FFFFFFFD.0033: hidraw3: HID v0.00 Device [syz0] on sy 15:46:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="5b65274a079d883f6def8b5c26d4e66ba470fec04c3793a62f151e87b4e7ed3d04cebbb80bb1e4fa9f7959346ddfb7d9fad3ac580c7820e9282fc529c6d68db67dfabc79e6c949da87d4094930052241b5a722beab2f6cebd5d69d4f2e1341b9fef1a31615a7ea9de0049fef62cf46f299351f8e4df0d3f3352a1aa5b67f907818d5c4eca3d744270b63b6e5248e1c8bfcbca6b2e75d3e06", 0x98}, {&(0x7f0000000140)="7377c7905a54e59643b605b3d06da3ba1915fb45132a5665a9aaec47ac0f027c1c466c7b34b8d5a656a2b67bdc565028e3928281862f1d272e76d2ec68660a4f56428f12fa2f0f4595e2e0ecdf181ac1e638319ed6638b58443520ed908363c510e7ebbf7b3ec0a42fd2ee98128afc8e96167ef593872868eebeb326559f025aa0f1e6175df00165c982c75376d33708ac842c88ea713ebcf1f3ce72edfb499047030e10f88d3546ad01ac68dbd66e9faa90acf2fa86e237579b7984233b40e6cdb895bedd33c2f8ed2067353135ce8d189d", 0xd2}, {&(0x7f0000000240)="899c78671dcf8c145c98bab0840587eee15e49c02b5dcbe0f87bfcade88bd68f2125e783697ee9c1ad8057eb0732f34a4dfc92c95f5ebabcc0b2324a61bd10e37749f1b84edf904806a9ce361c52915593a67f6f1ca92f7537272395d352af0b690387618a5e84f6fa5afbc7e0fe4ad5cc101316bbfd1373ebeee20075e1e462be946fc2e4", 0x85}, {&(0x7f0000000300)="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", 0xfe}], 0x4) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x801, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x0, 0x3}) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 496.531231] binder: 20068:20073 unknown command 25349 [ 496.540144] binder: 20074:20077 got transaction with invalid offset (0, min 0 max 0) or object. [ 496.549886] binder: 20068:20073 ioctl c0306201 200000c0 returned -22 [ 496.558171] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 496.560302] binder: 20071:20079 got transaction with invalid handle, 0 15:46:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 496.560368] binder: 20071:20079 transaction failed 29201/-22, size 24-8 line 3228 [ 496.560586] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.594330] binder: 20068:20082 got transaction with invalid handle, 0 [ 496.599631] binder: 20074:20077 transaction failed 29201/-22, size 0-8 line 3199 [ 496.609972] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.614506] binder: 20083:20084 got transaction with invalid handle, 0 15:46:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 496.614556] binder: 20083:20084 transaction failed 29201/-22, size 24-8 line 3228 15:46:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) sync() [ 496.656233] binder: 20068:20082 transaction failed 29201/-22, size 24-8 line 3228 [ 496.677391] binder: 20086:20087 got transaction with invalid offset (0, min 0 max 24) or object. [ 496.694155] binder: undelivered TRANSACTION_ERROR: 29201 15:46:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='z'], 0x1) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000000080)=""/62, 0x3e}}], 0x80000000000032c, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) [ 496.697613] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 496.713987] binder: 20090:20092 got transaction with invalid handle, 0 [ 496.738251] binder: 20086:20087 transaction failed 29201/-22, size 24-8 line 3199 15:46:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 496.753642] binder: 20090:20092 transaction failed 29201/-22, size 24-8 line 3228 [ 496.769572] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.841251] binder: 20100:20101 unknown command 25349 [ 496.848501] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 496.857746] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857891] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857903] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857915] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857927] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857940] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857952] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857965] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857982] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.857995] hid-generic 0000:0004:FFFFFFFD.0034: unknown main item tag 0x0 [ 496.893973] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.895824] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.896037] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.924414] hid-generic 0000:0004:FFFFFFFD.0034: hidraw3: HID v0.00 Device [syz0] on sy [ 496.962891] binder: 20100:20105 got transaction with invalid handle, 0 [ 496.962943] binder: 20100:20105 transaction failed 29201/-22, size 24-8 line 3228 [ 496.995543] binder: 20100:20101 ioctl c0306201 200000c0 returned -22 [ 497.021153] binder: undelivered TRANSACTION_ERROR: 29201 15:46:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000480)) ioctl$FICLONE(r0, 0x40049409, r2) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x12000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 15:46:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') timer_create(0x1, &(0x7f0000000340)={0x0, 0x19, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000380)=0x0) timer_delete(r2) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x15c, r1, 0x600, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x724}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffffffffffd, @rand_addr="16409d0703ca787241a5b2f847defb0f", 0x7ff}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x5}, 0x8000) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c05, 0xffffffffffffffff) [ 498.415603] binder: 20110:20118 got transaction with invalid offset (0, min 0 max 24) or object. [ 498.427870] binder: 20110:20118 transaction failed 29201/-22, size 24-8 line 3199 [ 498.432311] binder: 20111:20121 got transaction with invalid handle, 0 [ 498.432357] binder: 20111:20121 transaction failed 29201/-22, size 24-8 line 3228 [ 498.452887] binder: 20112:20120 unknown command 287493 [ 498.456171] binder: undelivered TRANSACTION_ERROR: 29201 15:46:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 498.478072] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 498.480652] binder: 20112:20125 got transaction with invalid handle, 0 [ 498.480705] binder: 20112:20125 transaction failed 29201/-22, size 24-8 line 3228 [ 498.487658] binder: 20126:20127 got transaction with invalid handle, 0 [ 498.487706] binder: 20126:20127 transaction failed 29201/-22, size 24-8 line 3228 15:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 498.495093] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.533972] binder: 20112:20120 ioctl c0306201 200000c0 returned -22 [ 498.545717] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.592361] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.631332] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 15:46:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='@user\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 498.652884] binder: 20133:20136 got transaction with invalid handle, 0 [ 498.687795] binder: 20140:20142 got transaction with invalid offset (0, min 0 max 24) or object. 15:46:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 498.712666] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 498.713003] binder: 20141:20143 unknown command 287493 [ 498.713015] binder: 20141:20143 ioctl c0306201 200000c0 returned -22 [ 498.713685] binder: 20141:20143 got transaction with invalid handle, 0 [ 498.714136] binder: 20141:20143 transaction failed 29201/-22, size 24-8 line 3228 [ 498.714359] binder: undelivered TRANSACTION_ERROR: 29201 15:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 498.717615] binder: 20133:20136 transaction failed 29201/-22, size 24-8 line 3228 [ 498.719543] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.744804] binder: 20140:20142 transaction failed 29201/-22, size 24-8 line 3199 [ 498.747076] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.853957] binder: 20145:20148 unknown command 287493 [ 498.893954] binder: 20149:20151 got transaction with invalid handle, 0 [ 498.901605] binder: 20145:20148 ioctl c0306201 200000c0 returned -22 [ 498.913853] binder: 20145:20153 got transaction with invalid handle, 0 [ 498.916749] binder: 20149:20151 transaction failed 29201/-22, size 24-8 line 3228 [ 498.931906] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.938512] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 498.966768] binder: release 20154:20155 transaction 258 out, still active [ 498.980428] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 498.990076] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 498.991496] binder: undelivered TRANSACTION_COMPLETE [ 498.998332] binder: 20145:20153 transaction failed 29201/-22, size 24-8 line 3228 [ 499.008610] binder: undelivered TRANSACTION_ERROR: 29201 [ 499.027624] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.040580] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.056019] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.065973] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.075178] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.077696] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 499.105666] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.113598] hid-generic 0000:0004:FFFFFFFD.0035: unknown main item tag 0x0 [ 499.131324] hid-generic 0000:0004:FFFFFFFD.0035: hidraw3: HID v0.00 Device [syz0] on sy 15:46:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:46:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000004140)='/dev/loop#\x00', 0xc7d4, 0x3fd) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000005380)='/dev/keychord\x00', 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000005400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000054c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x11080222}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x30, r3, 0x75f4a5b912eef3a4, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000005580)=""/183) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/199, 0xc7}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/87, 0x57}, {&(0x7f00000013c0)=""/108, 0x6c}, {&(0x7f0000001440)=""/166, 0xa6}, {&(0x7f0000001500)=""/99, 0x63}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x8, &(0x7f00000015c0)=""/82, 0x52}, 0x7}, {{&(0x7f0000001640)=@caif=@dgm, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/53, 0x35}], 0x1, &(0x7f0000001740)=""/5, 0x5}, 0x1}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001800)=""/97, 0x61}, {&(0x7f0000001880)=""/179, 0xb3}, {&(0x7f0000001940)=""/221, 0xdd}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/43, 0x2b}, {&(0x7f0000002a80)=""/52, 0x34}, {&(0x7f0000002ac0)=""/198, 0xc6}, {&(0x7f0000002bc0)=""/47, 0x2f}, {&(0x7f0000002c00)=""/43, 0x2b}, {&(0x7f0000002c40)=""/231, 0xe7}], 0xa, &(0x7f0000002dc0)=""/92, 0x5c}, 0x5}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)=""/231, 0xe7}, {&(0x7f0000002f40)=""/11, 0xb}], 0x2, &(0x7f0000002fc0)=""/123, 0x7b}, 0x3f}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003040)=""/235, 0xeb}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)}, {&(0x7f0000004180)=""/247, 0xf7}, {&(0x7f0000004280)=""/95, 0x5f}], 0x5, &(0x7f0000004340)=""/133, 0x85}, 0x9}, {{&(0x7f0000004400)=@nfc_llcp, 0x80, &(0x7f0000004780)=[{&(0x7f0000004480)}, {&(0x7f00000044c0)=""/12, 0xc}, {&(0x7f0000004500)=""/120, 0x78}, {&(0x7f0000004580)=""/151, 0x97}, {&(0x7f0000004640)=""/184, 0xb8}, {&(0x7f0000004700)=""/69, 0x45}], 0x6, &(0x7f00000047c0)=""/103, 0x67}, 0x1}, {{&(0x7f0000004840)=@x25={0x9, @remote}, 0x80, &(0x7f0000004ec0)=[{&(0x7f00000048c0)=""/194, 0xc2}, {&(0x7f00000049c0)=""/147, 0x93}, {&(0x7f0000004a80)=""/92, 0x5c}, {&(0x7f0000004b00)=""/81, 0x51}, {&(0x7f0000004b80)=""/154, 0x9a}, {&(0x7f0000004c40)=""/191, 0xbf}, {&(0x7f0000004d00)=""/175, 0xaf}, {&(0x7f0000004dc0)=""/101, 0x65}, {&(0x7f0000004e40)=""/90, 0x5a}], 0x9, &(0x7f0000004f40)=""/104, 0x68}, 0x7}, {{&(0x7f0000004fc0)=@rc, 0x80, &(0x7f0000005100)=[{&(0x7f0000005040)=""/25, 0x19}, {&(0x7f0000005080)=""/74, 0x4a}], 0x2}, 0x58e80000000000}], 0x8, 0x100, &(0x7f0000005240)) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000005340)) tee(r2, r1, 0x8000, 0x8) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x6) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000005500)={{0xa, 0x4e20, 0x7, @mcast1, 0xfe}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x22}, 0x4}, 0x100000000, [0x4, 0x0, 0x3ff, 0x4b1, 0x3, 0x80000000, 0x401, 0x6]}, 0x5c) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000005280)={'nat\x00'}, &(0x7f0000005300)=0xffffffffffffff14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 15:46:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0x0) 15:46:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 500.166428] binder: 20169:20175 got transaction with invalid handle, 0 [ 500.169015] binder: release 20171:20178 transaction 261 out, still active [ 500.192795] binder: 20169:20175 transaction failed 29201/-22, size 24-8 line 3228 15:46:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 500.243818] binder: undelivered TRANSACTION_COMPLETE 15:46:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000140)=""/225, 0xde9}) sendfile64(r1, r0, &(0x7f0000000040), 0x2) 15:46:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 500.276644] binder: undelivered TRANSACTION_ERROR: 29201 [ 500.344167] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.375172] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.380145] binder: 20200:20202 unknown command 25349 [ 500.380156] binder: 20200:20202 ioctl c0306201 200000c0 returned -22 [ 500.380515] binder: 20200:20202 got transaction with invalid handle, 0 [ 500.380565] binder: 20200:20202 transaction failed 29201/-22, size 24-8 line 3228 [ 500.380903] binder: undelivered TRANSACTION_ERROR: 29201 [ 500.429800] binder: release 20199:20207 transaction 265 out, still active [ 500.433654] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433668] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433680] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433693] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433705] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433725] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433738] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433750] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.433764] hid-generic 0000:0004:FFFFFFFD.0036: unknown main item tag 0x0 [ 500.442075] hid-generic 0000:0004:FFFFFFFD.0036: hidraw3: HID v0.00 Device [syz0] on sy [ 500.519072] binder: undelivered TRANSACTION_COMPLETE [ 500.526808] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:21 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x2b9) getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000caaffb)={0x0}, &(0x7f0000000440)=0xfe8f) waitid(0x1, r1, 0x0, 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x40000000000000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c05, 0xffffffffffffffff) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003dc0)={@multicast1, @dev, 0x0}, &(0x7f0000003e00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003e40)={0x0, @remote, @empty}, &(0x7f0000003e80)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003ec0)={@broadcast, @remote, 0x0}, &(0x7f0000003f00)=0xc) ioctl$TIOCSBRK(r3, 0x5427) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003f80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000004240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000004200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14020000e6a87176ef105322db55274982b298b92d85df9ff83301bf5738c7db", @ANYRES16=r4, @ANYBLOB="00062cbd7000fedbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="400002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="b001020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="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"], 0x214}}, 0x50) 15:46:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:21 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x10) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) [ 501.591684] binder: 20218:20220 unknown command 25349 15:46:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 501.612411] binder: 20218:20220 ioctl c0306201 200000c0 returned -22 [ 501.621356] binder: release 20221:20224 transaction 268 out, still active [ 501.629489] binder: 20216:20219 ioctl c0306201 0 returned -14 [ 501.634743] binder: undelivered TRANSACTION_COMPLETE [ 501.640641] binder: 20218:20227 got transaction with invalid handle, 0 [ 501.640718] binder: 20218:20227 transaction failed 29201/-22, size 24-8 line 3228 [ 501.644974] binder: undelivered TRANSACTION_ERROR: 29201 15:46:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 501.667022] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 501.683805] binder: 20228:20230 unknown command 25349 [ 501.703126] binder: 20228:20230 ioctl c0306201 200000c0 returned -22 [ 501.726232] binder: 20228:20230 got transaction with invalid handle, 0 [ 501.737500] binder: 20228:20230 transaction failed 29201/-22, size 24-8 line 3228 [ 501.748166] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 501.780772] binder: undelivered TRANSACTION_ERROR: 29201 [ 501.783901] binder: 20235:20239 ioctl c0306201 0 returned -14 15:46:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 501.830605] binder: release 20236:20240 transaction 274 out, still active [ 501.893209] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 501.902516] binder: undelivered TRANSACTION_COMPLETE [ 501.921001] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 501.928695] binder: 20251:20255 ioctl c0306201 0 returned -14 [ 501.938211] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 501.943681] binder: release 20249:20250 transaction 276 out, still active [ 501.943686] binder: undelivered TRANSACTION_COMPLETE [ 502.042056] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.049939] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.058576] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.068478] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.086567] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.095131] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.102566] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.111037] hid-generic 0000:0004:FFFFFFFD.0037: unknown main item tag 0x0 [ 502.127170] hid-generic 0000:0004:FFFFFFFD.0037: hidraw3: HID v0.00 Device [syz0] on sy 15:46:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = dup2(r0, r0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x115, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/15) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x58, 0x2e24e206629d1d0c) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000002c0)) [ 503.042300] binder: 20263:20266 unknown command 287493 15:46:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 503.086232] binder: 20261:20269 unknown command 287493 [ 503.086272] binder: 20263:20266 ioctl c0306201 200000c0 returned -22 [ 503.086942] binder: 20263:20266 got transaction with invalid handle, 0 [ 503.087009] binder: 20263:20266 transaction failed 29201/-22, size 24-8 line 3228 [ 503.114498] binder: undelivered TRANSACTION_ERROR: 29201 [ 503.126249] binder: 20261:20269 ioctl c0306201 200000c0 returned -22 15:46:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 503.140835] binder: 20261:20275 got transaction with invalid handle, 0 [ 503.156621] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 503.162882] binder: 20278:20279 unknown command 287493 [ 503.162891] binder: 20278:20279 ioctl c0306201 200000c0 returned -22 [ 503.163309] binder: 20278:20279 got transaction with invalid handle, 0 15:46:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 503.163376] binder: 20278:20279 transaction failed 29201/-22, size 24-8 line 3228 [ 503.169937] binder: undelivered TRANSACTION_ERROR: 29201 [ 503.217083] binder: 20261:20275 transaction failed 29201/-22, size 24-8 line 3228 [ 503.267513] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 503.278602] binder: undelivered TRANSACTION_ERROR: 29201 [ 503.364176] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.407975] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.417343] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.441736] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.450375] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.459415] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.466564] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.492318] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.507216] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.526509] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.533707] hid-generic 0000:0004:FFFFFFFD.0038: unknown main item tag 0x0 [ 503.549974] hid-generic 0000:0004:FFFFFFFD.0038: hidraw3: HID v0.00 Device [syz0] on sy 15:46:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) 15:46:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:24 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r1) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, 0x7, 0x51e, 0x1}, 0xa) pipe(&(0x7f00000010c0)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000001100)) syslog(0x3, &(0x7f00000000c0)=""/4096, 0x1000) 15:46:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 504.451949] binder: 20304:20311 got transaction with invalid offset (0, min 0 max 0) or object. [ 504.482859] binder: 20304:20311 transaction failed 29201/-22, size 0-8 line 3199 15:46:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 504.498205] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 504.518949] binder: 20320:20322 ioctl c0306201 0 returned -14 [ 504.532534] binder: undelivered TRANSACTION_ERROR: 29201 15:46:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setregid(r1, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) [ 504.586808] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 504.614372] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.635552] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.670979] binder: 20330:20333 ioctl c0306201 0 returned -14 [ 504.700378] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.718338] binder: 20334:20336 got transaction with invalid offset (0, min 0 max 0) or object. [ 504.744810] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.759945] binder: 20334:20336 transaction failed 29201/-22, size 0-8 line 3199 [ 504.771492] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.788265] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.795514] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.803116] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.804104] binder: undelivered TRANSACTION_ERROR: 29201 [ 504.830346] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.853540] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.865053] hid-generic 0000:0004:FFFFFFFD.0039: unknown main item tag 0x0 [ 504.898553] hid-generic 0000:0004:FFFFFFFD.0039: hidraw3: HID v0.00 Device [syz0] on sy 15:46:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:25 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x54000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff490001000000c60000000180000000000000400000000000000009000000000000000100000000000000000000000000000000000000000000000000000000000000fbffffff040000004804000000000000060000000000000000000100000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000569100"/706]) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 15:46:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:25 executing program 4: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) writev(r0, &(0x7f0000001140)=[{&(0x7f0000001100)="eb9304ac71", 0x5}], 0x1) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x40}, 0xb) ioctl$VT_WAITACTIVE(r2, 0x5607) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) read(r1, &(0x7f0000000100)=""/4096, 0x1000) 15:46:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 505.821466] binder: 20350:20351 ioctl c0306201 0 returned -14 [ 505.840310] binder: 20349:20355 got transaction with invalid offset (0, min 0 max 0) or object. [ 505.852160] binder: 20349:20355 transaction failed 29201/-22, size 0-8 line 3199 15:46:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x29) syz_open_pts(r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x3}, 0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 505.866889] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 505.887048] binder: 20357:20359 got transaction with invalid offset (0, min 0 max 0) or object. [ 505.898047] binder: undelivered TRANSACTION_ERROR: 29201 [ 505.908437] binder: 20357:20359 transaction failed 29201/-22, size 0-8 line 3199 15:46:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 505.977048] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 505.983415] binder: undelivered TRANSACTION_ERROR: 29201 [ 506.022194] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.029962] binder: 20370:20376 got transaction with invalid offset (0, min 0 max 0) or object. [ 506.099282] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.137381] binder: 20370:20376 transaction failed 29201/-22, size 0-8 line 3199 [ 506.169202] binder: 20384:20385 got transaction with invalid offset (0, min 0 max 0) or object. [ 506.177284] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177298] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177310] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177323] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177335] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177348] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177360] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177372] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.177384] hid-generic 0000:0004:FFFFFFFD.003A: unknown main item tag 0x0 [ 506.188562] hid-generic 0000:0004:FFFFFFFD.003A: hidraw3: HID v0.00 Device [syz0] on sy [ 506.250198] binder: undelivered TRANSACTION_ERROR: 29201 [ 506.259605] binder: 20384:20385 transaction failed 29201/-22, size 0-8 line 3199 [ 506.285473] binder: undelivered TRANSACTION_ERROR: 29201 15:46:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:27 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) fcntl$getown(r0, 0x9) 15:46:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:27 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 507.603772] binder: 20398:20403 got transaction with invalid offset (0, min 0 max 0) or object. [ 507.617250] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:27 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 507.648772] binder: 20398:20403 transaction failed 29201/-22, size 0-8 line 3199 [ 507.665509] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.677335] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 507.790571] binder: 20421:20426 got transaction with invalid offset (0, min 0 max 0) or object. [ 507.812532] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.845418] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.862291] binder: 20421:20426 transaction failed 29201/-22, size 0-8 line 3199 [ 507.874835] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.883639] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.897619] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.902580] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.902594] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.902607] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.902619] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.902632] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.902644] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.902656] hid-generic 0000:0004:FFFFFFFD.003B: unknown main item tag 0x0 [ 507.926921] hid-generic 0000:0004:FFFFFFFD.003B: hidraw3: HID v0.00 Device [syz0] on sy 15:46:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:28 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xf1) fcntl$notify(r0, 0x402, 0x8) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 15:46:28 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:46:28 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40000) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:46:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 508.960960] binder: 20438:20445 got transaction with invalid offset (0, min 0 max 0) or object. [ 508.966632] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="40a71ac77060ae8b63dbcb48221dbbbbb1c523bac9aa048df5983d7ddedccbd85a2968d89d4c6c39abdbe9268f33da273063d035cedaf09ca683b8d7f05bc710203c55a46f2f878dcc7f834e98d7e7258a1548a31348135bb58c214ac46a0a2ea3d37621e8e021266caae018a589415a51169c07a0684ade540ebee9f4e7c05c43c125ee5491616cf37ae33a68fbc67af4b4eedf787c11d3a70db3ff699a9f7a644decf01e64c95f416b1beeac796d8749fb54e0ac80945ec278c7d867887120e2dc5b60bab55150ad91cafe", 0xcc, 0xfffffffffffffff9) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x100000000000001c, &(0x7f0000000040)="7ab43ad0202e24fe67bf01000000010000004f73", 0x3f6) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x1000000003c) fcntl$setstatus(r1, 0x4, 0x42803) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000540)=[0xee01, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) getgroups(0x5, &(0x7f00000006c0)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00]) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) r11 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000a40)=0xe8) getgroups(0x1, &(0x7f0000000a80)=[0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="48030000daffffff0500000000000000060000000000000003000000000000004fa10000000000000001a40000000000fbffffff0400000001000000000000004102000000000000600327190000000000000000050000000000000002000000ffff0000ff070000d20b00009bf6ffff290eb4ac40aae06f9e31706082c85b7e737b05323c4ab85f703625a7fab5d1109c00"/157, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="030000000500000000000000010000000000000004000000000000000f000000ff01000074086e750000000000000000008c0000040000000000000002000000000000000500000000000000020000000000000000000000b507000000000000000000000100000000000000ff0000000000000000000100000000000300000000000000090000000000000040000000b300000000000080fffffeff81000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="4000000008000000000000000300000000000000010000000000000005000000010100007573657200000000060000000000000003000000000000009a040000000000000200000000000000bd0000001408000002000000000000000000000000000000020000000000000005000000000000000900000000000000090000000000000003000000000100000000ffff0900000000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="010000000400000000000000040000000000000090b60000000000000f0000000004000074086e750000000000000000008c000001000000000000000100000000000000040000000000000000000000000000fefaffffffbdc9ffff01000000000000002000000000000000090000000000000004000000000000000000000000000000020000000000000003000000030000000004000002000000fc0a0000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="9ed30000000000000000000000000000000000009e040000000000000b000000070000002f6465762f6c6f6f7023000000000000010000000000000001000000000000000100000000000000000000000000000009000000020000000100000000000000030000000000000019030000000000000300000000000000ff070000000000000800000000000000050000000f000000ffff00000000000009000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="ff030000010001000000000004000000000000000700000000000000030000000300000073797a0000000000"], 0x348) setsockopt$inet_int(r1, 0x0, 0x37, &(0x7f0000000080)=0x1, 0x4) r14 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) rt_tgsigqueueinfo(r3, r2, 0x41, &(0x7f00000002c0)={0x26, 0x5, 0x2}) prctl$PR_SET_FP_MODE(0x2d, 0x1) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000180)=""/93, &(0x7f0000000200)=0x5d) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r14, 0x4c06, r14) 15:46:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 509.024374] binder: 20438:20445 transaction failed 29201/-22, size 0-8 line 3199 [ 509.035125] binder: undelivered TRANSACTION_ERROR: 29201 15:46:28 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 509.107064] binder: 20454:20456 got transaction with invalid offset (0, min 0 max 0) or object. [ 509.126202] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.153961] binder: 20454:20456 transaction failed 29201/-22, size 0-8 line 3199 [ 509.172604] binder: 20462:20465 got transaction with invalid offset (0, min 0 max 0) or object. [ 509.181229] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181243] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181256] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181269] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181283] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181295] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181307] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181320] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181332] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.181344] hid-generic 0000:0004:FFFFFFFD.003C: unknown main item tag 0x0 [ 509.220062] hid-generic 0000:0004:FFFFFFFD.003C: hidraw3: HID v0.00 Device [syz0] on sy [ 509.261876] binder: 20462:20465 transaction failed 29201/-22, size 0-8 line 3199 [ 509.264101] binder: undelivered TRANSACTION_ERROR: 29201 [ 509.285855] binder: undelivered TRANSACTION_ERROR: 29201 15:46:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x21) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xfffffffffffffffd, 0x42) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x4, 0x9, 0x7, 0xfffffffffffffff8}, 0xc, [0x6, 0x5, 0x2, 0x0, 0x9, 0x1ff, 0x0, 0x95b7, 0x400, 0xb8, 0x7, 0x80000001, 0x401, 0x8, 0x0, 0x80, 0x7fff, 0xbfc0, 0x1fffffffe00, 0xff, 0x8, 0x0, 0x24c4, 0x8, 0xfffffffffffffffe, 0x3ff, 0x81, 0x3f, 0x81, 0x3ff, 0xff, 0x1b1b, 0xaa4f, 0x6000000000000, 0x7, 0x4a7, 0xc2f, 0x4, 0x4, 0x7, 0x8, 0x1f, 0x0, 0x2, 0xe8b4, 0x0, 0xb6e7, 0x1, 0x7, 0x2, 0x40, 0x5, 0x40, 0x0, 0x5, 0x4ab, 0x7, 0xd604, 0xfffffffffffffff9, 0x5, 0x7f, 0xef65, 0x800, 0x1c], [0xfffffffffffffff9, 0x40000000000, 0xfffffffffffffad6, 0x3e, 0x10000, 0xc96e, 0x8, 0x8, 0x800, 0x3bf, 0x58410f25, 0x4, 0x101, 0x3, 0x1, 0xa4, 0x8, 0x9, 0x2, 0x7fff, 0x2, 0x4, 0x0, 0x97, 0x0, 0x3f, 0x4, 0x81, 0x100, 0x9, 0xfffffffffffffff9, 0x8000, 0x7fffffff, 0x8a38, 0xff, 0x1ff, 0x6, 0x101, 0x2, 0x2, 0x1, 0x6, 0x63f, 0x7ff, 0x401, 0xffffffff, 0x2, 0x9, 0x3, 0x8, 0x2, 0x1, 0x2, 0xbcf3, 0xfff, 0x20, 0xfff, 0xffffffffffff8b10, 0x2b1, 0x1ff, 0x10001, 0x7ff, 0x7, 0x47], [0x6, 0x4, 0x10000, 0x101, 0x3, 0x8, 0xffffffff, 0x100, 0x7, 0x81, 0x5, 0x57, 0x800, 0xf5, 0x6, 0x7, 0x7fff, 0x2, 0xffffffff, 0x3, 0x4, 0x10000, 0x1, 0xfffffffffffffc01, 0x1, 0x0, 0x8000, 0x392, 0x3, 0x1, 0x8, 0x9, 0xff, 0xffffffff, 0x0, 0x1, 0x4, 0xfff, 0x2, 0x6, 0x401, 0x3f, 0x1, 0x3, 0x10001, 0x1576200000000000, 0xfffffffffffffff7, 0x2, 0x1, 0xffffffff80000001, 0x3ae1, 0x8001, 0x10000, 0x5, 0x0, 0x350, 0x7, 0x8, 0x9, 0x1, 0x10000, 0x80000001, 0x2, 0x1], [0x1, 0x7fffffff, 0x3, 0xa585, 0x6, 0x7, 0xfffffffffffffe00, 0x5, 0x81, 0x7, 0x9, 0x5, 0x9, 0xaca, 0xfffffffffffff000, 0x1, 0x7, 0x1, 0x361, 0x9, 0xfffffffffffffffa, 0x1, 0x8, 0x9, 0x2, 0x0, 0x400, 0x3c, 0xffff, 0x200, 0x8001, 0x8000, 0x80000000, 0x40, 0x100, 0x200, 0x9, 0x180000000000, 0x401, 0x4, 0x6, 0x7, 0xe717411, 0x20, 0x7fffffff, 0x2892, 0x9, 0x4, 0x0, 0x401, 0xee, 0xfffffffffffffffe, 0x5, 0x8, 0x0, 0x6, 0xa2b, 0x9849, 0xfffffffffffffffc, 0x3, 0x6, 0x7ff, 0x50000000, 0xd48]}, 0x45c) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x6, 0x1, 0x5, 0xfffffffffffffffe, 0xfffffffffffffff8}) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0x7ff) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x1}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000180)={0x3, 0x4, 0x5}) 15:46:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)=0x6) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x3068, 0x2, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffffa}, {r0, 0x0, 0x8001}]}) [ 510.528162] binder: 20484:20492 got transaction with invalid offset (0, min 0 max 0) or object. [ 510.543552] binder: 20486:20491 got transaction with invalid offset (0, min 0 max 24) or object. [ 510.562927] binder: 20486:20491 transaction failed 29201/-22, size 24-8 line 3199 15:46:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) 15:46:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 510.581653] binder: 20484:20492 transaction failed 29201/-22, size 0-8 line 3199 [ 510.593640] binder: undelivered TRANSACTION_ERROR: 29201 [ 510.606092] binder: undelivered TRANSACTION_ERROR: 29201 [ 510.663573] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.680150] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.696772] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.713998] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.739873] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.748427] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.756964] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.764672] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.771976] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.781193] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.788494] hid-generic 0000:0004:FFFFFFFD.003D: unknown main item tag 0x0 [ 510.802929] hid-generic 0000:0004:FFFFFFFD.003D: hidraw3: HID v0.00 Device [syz0] on sy 15:46:31 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x4) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) pipe(&(0x7f0000000080)) 15:46:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1000, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 512.104382] binder: 20516:20519 got transaction with invalid offset (0, min 0 max 0) or object. [ 512.117113] binder: 20518:20522 ioctl c0306201 0 returned -14 [ 512.134341] binder: 20516:20519 transaction failed 29201/-22, size 0-8 line 3199 15:46:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000040)=""/73, &(0x7f00000000c0)=0x49) [ 512.148401] binder: 20515:20524 got transaction with invalid offset (0, min 0 max 24) or object. [ 512.157611] binder: undelivered TRANSACTION_ERROR: 29201 15:46:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 512.195068] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.227912] binder: 20515:20524 transaction failed 29201/-22, size 24-8 line 3199 15:46:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 512.246646] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.253564] binder: 20532:20536 got transaction with invalid offset (0, min 0 max 0) or object. [ 512.253614] binder: 20532:20536 transaction failed 29201/-22, size 0-8 line 3199 [ 512.253809] binder: undelivered TRANSACTION_ERROR: 29201 [ 512.266897] binder: undelivered TRANSACTION_ERROR: 29201 15:46:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x40) r1 = dup3(r0, r0, 0x80000) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000140)='net/snmp\x00') ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/97) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x210000) ioctl$RTC_PLL_SET(r3, 0x401c7012, &(0x7f0000000080)={0x1, 0x9, 0x8, 0xcb, 0x81, 0xff, 0x8}) 15:46:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x3, 0x200003) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 512.302286] binder: 20534:20540 ioctl c0306201 0 returned -14 [ 512.375475] binder: 20541:20544 got transaction with invalid offset (0, min 0 max 24) or object. [ 512.388473] binder: 20546:20548 got transaction with invalid offset (0, min 0 max 0) or object. 15:46:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/148, 0x94}], 0x8, &(0x7f0000000080)=""/31, 0x1f}, 0xd4}, {{&(0x7f0000000780)=@ax25={{0x3, @rose}, [@rose, @bcast, @rose, @default, @default, @default, @netrom, @default]}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000800)=""/24, 0x18}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000940)=""/123, 0x7b}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)}, {&(0x7f0000002a00)=""/17, 0x11}, {&(0x7f0000002a40)=""/215, 0xd7}], 0x8, &(0x7f0000002b80)=""/118, 0x76}}, {{&(0x7f0000002c00)=@ipx, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000002d40)=""/43, 0x2b}, {&(0x7f0000002d80)=""/106, 0x6a}], 0x3, &(0x7f0000002e40)=""/238, 0xee}, 0x80}, {{&(0x7f0000002f40)=@nfc_llcp, 0x80, &(0x7f0000004180)=[{&(0x7f0000002fc0)=""/96, 0x60}, {&(0x7f0000003040)=""/45, 0x2d}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/209, 0xd1}], 0x4, &(0x7f00000041c0)=""/205, 0xcd}, 0x4}], 0x4, 0x40, &(0x7f0000004340)={0x0, 0x1c9c380}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000029c0)=[0x455, 0x1]) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000043c0)={0x0, &(0x7f0000004380)}, 0x8) r2 = open(&(0x7f0000004380)='./file0\x00', 0x0, 0x20) io_setup(0x9, &(0x7f0000004400)=0x0) io_cancel(r3, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000004440)="471b6be462c23204ad313687b5c5d0f841858e0aa6170e407a7f157246", 0x1d, 0x7, 0x0, 0x2, r0}, &(0x7f00000044c0)) 15:46:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000006740)=[{{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/145, 0x91}], 0x5, &(0x7f00000005c0)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/214, 0xd6}, {&(0x7f00000026c0)=""/44, 0x2c}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/236, 0xec}], 0x5}, 0x101}, {{&(0x7f0000002880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/9, 0x9}, {&(0x7f0000002940)=""/18, 0x12}, {&(0x7f0000002980)=""/158, 0x9e}, {&(0x7f0000002a40)=""/2, 0x2}], 0x4, &(0x7f0000002ac0)=""/174, 0xae}, 0x1}, {{&(0x7f0000002b80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000002c00)=""/167, 0xa7}, {&(0x7f0000002cc0)=""/8, 0x8}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/112, 0x70}, {&(0x7f0000004d80)=""/216, 0xd8}, {&(0x7f0000004e80)=""/199, 0xc7}], 0x7, &(0x7f0000004fc0)=""/164, 0xa4}, 0x100000001}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/159, 0x9f}, {&(0x7f0000006140)=""/32, 0x20}], 0x3, &(0x7f00000061c0)=""/88, 0x58}, 0xfffffffffffffffe}, {{&(0x7f0000006240)=@xdp, 0x80, &(0x7f0000006380)=[{&(0x7f00000062c0)=""/35, 0x23}, {&(0x7f0000006300)=""/75, 0x4b}], 0x2, &(0x7f00000063c0)=""/233, 0xe9}, 0x10001}, {{&(0x7f00000064c0)=@tipc=@id, 0x80, &(0x7f0000006680)=[{&(0x7f0000006540)=""/25, 0x19}, {&(0x7f0000006580)=""/239, 0xef}], 0x2, &(0x7f00000066c0)=""/84, 0x54}, 0x1}], 0x7, 0x12020, &(0x7f0000006840)) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000006880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pipe2(&(0x7f00000068c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000006900)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000006a00)='/dev/keychord\x00', 0x3003e, 0x0) clock_gettime(0x0, &(0x7f000000d2c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000d1c0)=[{{&(0x7f0000006a40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/121, 0x79}, {&(0x7f0000007b40)=""/202, 0xca}, {&(0x7f0000007c40)=""/231, 0xe7}, {&(0x7f0000007d40)=""/71, 0x47}, {&(0x7f0000007dc0)=""/162, 0xa2}], 0x6, &(0x7f0000007ec0)=""/128, 0x80}, 0xfffffffffffffff8}, {{&(0x7f0000007f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000009440)=[{&(0x7f0000007fc0)=""/57, 0x39}, {&(0x7f0000008000)=""/129, 0x81}, {&(0x7f00000080c0)=""/203, 0xcb}, {&(0x7f00000081c0)=""/253, 0xfd}, {&(0x7f00000082c0)=""/72, 0x48}, {&(0x7f0000008340)=""/197, 0xc5}, {&(0x7f0000008440)=""/4096, 0x1000}], 0x7, &(0x7f0000009480)=""/4096, 0x1000}, 0x3}, {{&(0x7f000000a480)=@isdn, 0x80, &(0x7f000000a540)=[{&(0x7f000000a500)=""/41, 0x29}], 0x1, &(0x7f000000a580)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f000000b5c0)=[{&(0x7f000000b580)=""/47, 0x2f}], 0x1, &(0x7f000000b600)=""/145, 0x91}, 0x6}, {{&(0x7f000000b6c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f000000b8c0)=[{&(0x7f000000b740)=""/99, 0x63}, {&(0x7f000000b7c0)=""/115, 0x73}, {&(0x7f000000b840)}, {&(0x7f000000b880)=""/7, 0x7}], 0x4, &(0x7f000000b900)=""/4096, 0x1000}, 0x7}, {{&(0x7f000000c900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f000000ce40)=[{&(0x7f000000c980)=""/186, 0xba}, {&(0x7f000000ca40)=""/149, 0x95}, {&(0x7f000000cb00)=""/207, 0xcf}, {&(0x7f000000cc00)=""/201, 0xc9}, {&(0x7f000000cd00)=""/15, 0xf}, {&(0x7f000000cd40)=""/47, 0x2f}, {&(0x7f000000cd80)=""/14, 0xe}, {&(0x7f000000cdc0)=""/123, 0x7b}], 0x8, &(0x7f000000ce80)=""/188, 0xbc}, 0x2}, {{&(0x7f000000cf40)=@nfc, 0x80, &(0x7f000000d140)=[{&(0x7f000000cfc0)=""/184, 0xb8}, {&(0x7f000000d080)=""/151, 0x97}], 0x2, &(0x7f000000d180)=""/36, 0x24}, 0x80}], 0x7, 0x10100, &(0x7f000000d300)={r9, r10+10000000}) r12 = dup3(r0, r0, 0x0) r13 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000d340)='/selinux/policy\x00', 0x0, 0x0) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000d380)='/selinux/policy\x00', 0x0, 0x0) r15 = dup2(r0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f000000d500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8010480}, 0xc, &(0x7f000000d4c0)={&(0x7f000000d3c0)={0xcc, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 512.425428] binder: 20553:20555 ioctl c0306201 0 returned -14 [ 512.432316] binder: 20541:20544 transaction failed 29201/-22, size 24-8 line 3199 [ 512.464140] binder: 20546:20548 transaction failed 29201/-22, size 0-8 line 3199 15:46:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 512.478187] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.497197] binder: undelivered TRANSACTION_ERROR: 29201 [ 512.513085] binder: undelivered TRANSACTION_ERROR: 29201 [ 512.553909] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.574905] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.595563] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.603102] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.643202] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.661742] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.681795] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.689451] hid-generic 0000:0004:FFFFFFFD.003E: unknown main item tag 0x0 [ 512.715568] hid-generic 0000:0004:FFFFFFFD.003E: hidraw3: HID v0.00 Device [syz0] on sy 15:46:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:46:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) pipe(&(0x7f0000000080)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x7, 0x7f, 0x6}, 0xa) 15:46:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x8, 0x40) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = getpid() sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420408}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x150, 0x4, 0xb, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x5}, [@generic, @typed={0x8, 0x2b, @u32=0x5}, @generic="a0474a52070e3b97c6e5bc0ad31bb3e478803ebd15035775bcf7f0c63bbf680b923b2303c03af681b8e976abe638d5446e321e90ecd85add87f07b2121a47ed086fc066177378b04a7ecffde05e20b2dec4eaa5b3c5d9b0a40548219c1aaefbeedaec6c558146270687e61192b8e87b3ffa4934772c586a84ecc343186d42bcf9d2e65156c29c25a200302955cdb58d03df3a82a5e68b2518cc6e6fbe6256ace0d136e3ef1d3d06b7d18d11046d8e1673f0b3147d827e76bcfefe5464af25f2c02d7b42d54e86c8fba0aad", @typed={0x4, 0x87}, @nested={0xc, 0xb, [@typed={0x8, 0x21, @pid=r2}]}, @generic="9c907bb57471e12ea6ecb9cbe1f15a0f9f8cc62eeb04d9d2f2f26c31235fdc0eb94e6ba4b4245d2a4da79c489a6db1b256036f7fc303fbfb8a3fc774d06c251922d1a91ac3a485b77cf69a144a51e7e2fde8df3ab71b"]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_pts(r4, 0x4000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 15:46:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:46:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0x28, "b4433fe932e3961b362d699ab33b4e44253d14015ce142ddb0d32dc675ae27fb2202e657098979d4"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) [ 513.426376] binder: release 20579:20581 transaction 335 out, still active [ 513.440702] binder: undelivered TRANSACTION_COMPLETE [ 513.478839] binder: 20580:20591 got transaction with invalid offset (0, min 0 max 0) or object. [ 513.496884] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 513.526787] binder: 20580:20591 transaction failed 29201/-22, size 0-8 line 3199 15:46:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 513.571914] binder: release 20593:20603 transaction 339 out, still active [ 513.588849] binder: undelivered TRANSACTION_COMPLETE [ 513.656032] binder: undelivered TRANSACTION_ERROR: 29201 [ 513.672401] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.692088] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.705238] binder: release 20609:20611 transaction 341 out, still active [ 513.715079] binder: undelivered TRANSACTION_COMPLETE [ 513.744317] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.767872] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.774996] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.782765] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.790371] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.797505] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.804655] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.811779] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.819003] hid-generic 0000:0004:FFFFFFFD.003F: unknown main item tag 0x0 [ 513.838670] hid-generic 0000:0004:FFFFFFFD.003F: hidraw3: HID v0.00 Device [syz0] on sy 15:46:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x10000) flock(r0, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:34 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0xfffffffffffffffb}, 0x2, 0x5}) inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/461]) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)="8b32c5cb0f97f7f939c1d05fa91affd5efa8f48d530efcdd8a04e63b457b508e03f61c038e1a44bfdc185ebbd4c95bc6c13b1ccd832e60a41903328176b2430b4c6a7bdf3a31ab2a5b626f4aa2195ab2fc09e78ac8fd615a3514d48b400dac0f2da30db5ac52d99e3be76df1c111adfeb4c1e568f300c3b930c23664ca104e52cf05ad828e8a90eff2de12fae40991b1a5ea831ad96abba0c5290b2056a4ffe6d46c94efa89147b2dda85266a16d02c638f1b79c164e6d4d4dde68851f728d12b0c62840daa8128916aaaea0c6b651d51463a0c23d8b866939c57fb7", 0xdc) 15:46:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 514.885100] binder: 20616:20625 got transaction with invalid offset (0, min 0 max 24) or object. [ 514.901153] binder: 20616:20625 transaction failed 29201/-22, size 24-8 line 3199 [ 514.907744] binder: release 20621:20623 transaction 345 out, still active [ 514.907748] binder: undelivered TRANSACTION_COMPLETE [ 514.921509] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="83190a34b6f3e5f2c72a744fd737dd40", 0x10) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 514.924920] binder: undelivered TRANSACTION_ERROR: 29201 [ 515.015272] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.035058] binder: release 20633:20635 transaction 347 out, still active [ 515.046802] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 515.056076] binder: undelivered TRANSACTION_COMPLETE 15:46:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 515.061265] binder: 20634:20639 got transaction with invalid offset (0, min 0 max 24) or object. [ 515.061332] binder: 20634:20639 transaction failed 29201/-22, size 24-8 line 3199 [ 515.061626] binder: undelivered TRANSACTION_ERROR: 29201 [ 515.107103] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.138469] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.148714] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.158878] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.166845] binder: 20647:20648 got transaction with invalid offset (0, min 0 max 24) or object. [ 515.196089] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.216863] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.223729] binder: 20647:20648 transaction failed 29201/-22, size 24-8 line 3199 [ 515.224405] binder: undelivered TRANSACTION_ERROR: 29201 [ 515.258120] binder: release 20649:20652 transaction 353 out, still active [ 515.263307] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.263321] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.263334] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.263346] hid-generic 0000:0004:FFFFFFFD.0040: unknown main item tag 0x0 [ 515.271507] hid-generic 0000:0004:FFFFFFFD.0040: hidraw3: HID v0.00 Device [syz0] on sy [ 515.327468] binder: undelivered TRANSACTION_COMPLETE 15:46:36 executing program 4: epoll_create(0xd144) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4, 0x80000) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x10001) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:46:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x40001, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]}, 0x50) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x14000000, @mcast1, 0x200}, {0xa, 0x4e24, 0x400, @mcast1, 0xee30}, 0xff, [0x8, 0x5, 0x3661, 0x2, 0x300000000, 0x20, 0x8000, 0x1]}, 0x5c) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:46:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 516.269175] binder: release 20655:20657 transaction 355 out, still active [ 516.285109] binder: undelivered TRANSACTION_COMPLETE 15:46:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 516.325869] binder: release 20662:20665 transaction 358 out, still active [ 516.336964] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 516.350953] binder: undelivered TRANSACTION_COMPLETE [ 516.360557] binder: release 20664:20668 transaction 360 out, still active [ 516.370072] binder: undelivered TRANSACTION_COMPLETE 15:46:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:46:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) write(r0, &(0x7f0000000100)="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", 0x1000) fcntl$notify(r0, 0x402, 0x80000010) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xffffffffffffffe0, 0x5, 0x2000}, 0x4) 15:46:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 516.376156] binder: release 20659:20661 transaction 357 out, still active [ 516.392515] binder: undelivered TRANSACTION_COMPLETE [ 516.427722] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 516.433748] binder: release 20677:20678 transaction 364 out, still active [ 516.433752] binder: undelivered TRANSACTION_COMPLETE [ 516.433816] binder: release 20669:20674 transaction 362 out, still active [ 516.433819] binder: undelivered TRANSACTION_COMPLETE [ 516.445227] binder: release 20681:20682 transaction 366 out, still active [ 516.445231] binder: undelivered TRANSACTION_COMPLETE 15:46:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 516.467184] binder: release 20680:20684 transaction 367 out, still active [ 516.467189] binder: undelivered TRANSACTION_COMPLETE [ 516.474356] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474371] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474383] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474395] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474408] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 15:46:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000000)) [ 516.474420] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474441] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474454] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474466] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474480] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.474492] hid-generic 0000:0004:FFFFFFFD.0041: unknown main item tag 0x0 [ 516.489444] hid-generic 0000:0004:FFFFFFFD.0041: hidraw3: HID v0.00 Device [syz0] on sy [ 516.655658] binder: release 20687:20688 transaction 368 out, still active [ 516.673637] binder: undelivered TRANSACTION_COMPLETE [ 516.724985] binder: release 20690:20698 transaction 369 out, still active [ 516.743629] binder: undelivered TRANSACTION_COMPLETE 15:46:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x9c9, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x6}, 0x10) 15:46:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)='/dev/loop#\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r1, &(0x7f0000000180)=@encrypted_new={'new ', 'default', 0x20, 'user:', '/dev/loop#\x00', 0x20, 0x100000000}, 0x32, r2) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x100) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) arch_prctl$ARCH_GET_CPUID(0x1011) 15:46:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 517.749158] binder: release 20702:20709 transaction 370 out, still active [ 517.761700] binder: undelivered TRANSACTION_COMPLETE [ 517.771577] binder: release 20704:20711 transaction 373 out, still active [ 517.780004] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:37 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xffffffffffffffcb, 0x30805) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) [ 517.816265] binder: undelivered TRANSACTION_COMPLETE [ 517.830479] binder: release 20705:20708 transaction 372 out, still active 15:46:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:37 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 517.857385] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 517.870534] binder: undelivered TRANSACTION_COMPLETE [ 517.870786] binder: release 20718:20719 transaction 376 out, still active [ 517.870790] binder: undelivered TRANSACTION_COMPLETE [ 517.870842] binder: release 20717:20720 transaction 375 out, still active [ 517.870845] binder: undelivered TRANSACTION_COMPLETE [ 517.879121] binder: release 20721:20723 transaction 377 out, still active [ 517.879126] binder: undelivered TRANSACTION_COMPLETE [ 517.916860] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 517.925022] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 517.990202] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.004785] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.015932] binder: release 20732:20733 transaction 378 out, still active [ 518.025478] binder: undelivered TRANSACTION_COMPLETE [ 518.032413] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.039685] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.047241] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.055174] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.062544] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.077629] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.084926] hid-generic 0000:0004:FFFFFFFD.0042: unknown main item tag 0x0 [ 518.103128] hid-generic 0000:0004:FFFFFFFD.0042: hidraw3: HID v0.00 Device [syz0] on sy 15:46:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:38 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40, 0x51) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xfffffffffffffffe, 0x20000) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 15:46:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) poll(&(0x7f0000000180)=[{r0, 0x400}, {r0, 0x8}, {r0, 0x8}, {r1, 0x1000}, {r1, 0x104}, {r0, 0x8}], 0x6, 0xfffffffffffffffc) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x50) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:38 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x29) syz_open_pts(r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x3}, 0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:38 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 519.090504] binder: release 20743:20744 transaction 380 out, still active [ 519.100575] binder: undelivered TRANSACTION_COMPLETE 15:46:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x4880) r2 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r2, 0x7, 0x6}, 0x0, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/180) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:39 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 519.150129] binder: release 20740:20749 transaction 382 out, still active [ 519.175256] binder: undelivered TRANSACTION_COMPLETE 15:46:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 519.271245] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.289762] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.297632] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.305508] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.316568] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 519.344256] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.357916] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.365586] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.387461] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.432028] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.448513] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.456095] hid-generic 0000:0004:FFFFFFFD.0043: unknown main item tag 0x0 [ 519.477156] hid-generic 0000:0004:FFFFFFFD.0043: hidraw3: HID v0.00 Device [syz0] on sy INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 15:46:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:40 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000040)=""/86, 0x56) r1 = memfd_create(&(0x7f0000000100)='{#\x00', 0xfffffffffffffffe) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x2, {0xc2, 0x2}}, 0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x29) syz_open_pts(r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x3}, 0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:40 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:40 executing program 4: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) read(r0, &(0x7f0000000140)=""/133, 0xfffffffffffffec0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) signalfd(r1, &(0x7f0000000100)={0x81c}, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x9, 0x3f}) 15:46:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) write$cgroup_int(r1, &(0x7f0000000080)=0x4f, 0x12) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)={0x0, @aes128, 0x0, "3b8ae049173c134e"}) fdatasync(r2) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x3, 0x2, 0x1ff, 0x0, 0x959}) fstatfs(r0, &(0x7f0000000300)=""/63) 15:46:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x21, @broadcast, 0x4e22, 0x4, 'lblc\x00', 0x8, 0xffffffffffffff81, 0x7a}, {@multicast2, 0x4e20, 0x10003, 0xe3, 0x10001, 0x3}}, 0x44) r2 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="895463ad0e6fbde023621470038c6d5f6bbe4a5a873a1c8a4b0548acb0e41f378e1d47344509c3b28b1800a118d762c55be746fd0ce343", 0x37, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r2, &(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) [ 520.955589] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 520.963484] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963498] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963510] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963523] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963535] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963547] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963560] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963573] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963585] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963597] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.963609] hid-generic 0000:0004:FFFFFFFD.0044: unknown main item tag 0x0 [ 520.992994] hid-generic 0000:0004:FFFFFFFD.0044: hidraw3: HID v0.00 Device [syz0] on sy [ 521.010619] binder: release 20814:20815 transaction 387 out, still active [ 521.010624] binder: undelivered TRANSACTION_COMPLETE 15:46:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(0xffffffffffffffff, &(0x7f0000001b00)=""/250, 0x50c7e716) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(0xffffffffffffffff, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:42 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:42 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x220040, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 15:46:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) sync_file_range(r0, 0x2, 0x3, 0x0) 15:46:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x29) syz_open_pts(r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x3}, 0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:42 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 522.406568] binder: release 20828:20833 transaction 388 out, still active [ 522.415826] binder: undelivered TRANSACTION_COMPLETE [ 522.421608] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 522.441496] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 15:46:42 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x80) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x5, 0x4aa500000000000, 0x4}}, 0x28) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x10081) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 15:46:42 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xceec}, 0xb) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 522.503866] binder: release 20849:20852 transaction 389 out, still active [ 522.523627] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.540124] binder: undelivered TRANSACTION_COMPLETE [ 522.592162] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.623459] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.626941] binder: 20857:20859 ioctl c0306201 0 returned -14 [ 522.627635] binder: release 20857:20859 transaction 390 out, still active [ 522.627640] binder: undelivered TRANSACTION_COMPLETE [ 522.706654] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 522.721744] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.735445] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.762859] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.798636] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.825242] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.832906] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.842573] hid-generic 0000:0004:FFFFFFFD.0045: unknown main item tag 0x0 [ 522.880164] hid-generic 0000:0004:FFFFFFFD.0045: hidraw3: HID v0.00 Device [syz0] on sy 15:46:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(0xffffffffffffffff, &(0x7f0000001b00)=""/250, 0x50c7e716) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(0xffffffffffffffff, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:43 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 15:46:43 executing program 3: r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') write$FUSE_POLL(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x3, {0x100000000}}, 0x18) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x5, [@empty, @local, @random="db514c82216a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="b470d611bc97"]}) ioctl$UI_SET_PHYS(r1, 0x4004556c, &(0x7f00000000c0)='syz1\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:46:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x197, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000100)) 15:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x600000, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x20, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x7f}}) ioctl$TCGETX(r1, 0x5432, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) socket(0xa, 0xb, 0x0) [ 523.972842] binder: 20876:20880 ioctl c0306201 0 returned -14 [ 523.983323] binder: release 20876:20880 transaction 391 out, still active [ 523.996520] binder: undelivered TRANSACTION_COMPLETE 15:46:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x49c, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, r2, {0xffeb, 0xf}, {0xfff0, 0x6}, {0xfff3, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x468, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0x1}}, @TCA_U32_INDEV={0x14, 0x8, 'bpq0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x10}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x32}, @TCA_U32_POLICE={0x408, 0x6, @TCA_POLICE_RATE={0x404, 0x2, [0x7e2, 0x6000000000000000, 0x2, 0x72f, 0x7, 0xfff, 0x6, 0x0, 0x0, 0x3, 0x1, 0x1, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x8, 0x4, 0x1, 0xe27e, 0x6, 0x8001, 0xffffffff00000000, 0x100000001, 0x4, 0xfffffffffffffff9, 0x3, 0x3f, 0x0, 0x5, 0x66ad, 0x6590, 0x965, 0x100, 0x1c, 0x9, 0x5, 0x2c1b077e, 0x1, 0x1000, 0x6936, 0x1, 0x8, 0x2, 0x6, 0x8ec, 0x20, 0x50, 0x5, 0x100000001, 0x2, 0x0, 0x7c, 0xfffffffffffffff7, 0x3ff, 0x1, 0x7, 0x1, 0xff, 0x8, 0x5, 0x9, 0x7, 0x5, 0xffff, 0x7, 0x7fffffff, 0x7fffffff, 0x1f, 0x8001, 0x40, 0x3f, 0xffffffff, 0x40, 0x6, 0x7ff, 0x1, 0x8000, 0x81, 0x1, 0x8, 0x5, 0x81, 0x9, 0x1, 0x7, 0x2, 0xffffffff, 0x66, 0x7fff, 0xed, 0x3, 0x0, 0xe3, 0x4101, 0x5, 0x7ff, 0x8001, 0x5, 0x9, 0x101, 0x9, 0xfffffffffffffbff, 0x3, 0x200, 0x0, 0x81, 0x3, 0x0, 0x8001, 0x7, 0xfff, 0x7, 0xf378, 0xb2, 0xc0, 0x5, 0x81, 0xfffffffffffffff9, 0x10000, 0x7f, 0xffffffff, 0x3e, 0x2, 0x400, 0x0, 0x1000, 0x200, 0x3, 0x5, 0x9, 0x7, 0x2, 0x76f7, 0xa6, 0x3ff, 0x830, 0x2, 0x100000000, 0x1f, 0x6bd2, 0x9, 0x80000001, 0xffffffff, 0x10000000000000, 0x4, 0x7ff, 0x9, 0x2, 0x8, 0x2, 0x2, 0xfff, 0x3, 0x4, 0x80000001, 0x9, 0x7, 0x1, 0x81, 0x7, 0xfffffffffffffffd, 0x8001, 0x9, 0x5, 0x10001, 0x8, 0x1000, 0x0, 0xc7f1, 0x8, 0x8, 0x8000, 0x200, 0x7, 0x0, 0xff, 0x8000, 0x7f, 0x22, 0x10000, 0x4a, 0x5, 0x7, 0xfffffffffffffffb, 0x7, 0x7fff, 0x10000, 0xc0ca, 0x7fffffff, 0x2, 0x1, 0x3, 0x9, 0x1, 0xff, 0x2, 0x7f, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x81, 0x0, 0x1, 0x3ff, 0x8, 0xad5a, 0x3, 0x0, 0x1, 0xffffffff, 0xfffe00000000000, 0x1, 0xfffffffffffffff7, 0x8001, 0x6, 0xfffffffffffffffe, 0x1, 0x6, 0x400, 0x401, 0x10100000000, 0x4, 0x1b53d324, 0x2, 0xffffffffffffffff, 0x3, 0xbf04, 0x100000001, 0x2, 0x81, 0xfff, 0x8433, 0x3, 0x80, 0x6, 0xfffffffffffffffe, 0xe6, 0x5, 0x8001, 0x7fffffff, 0x5472, 0x6, 0x9, 0x800, 0x3, 0x7ff, 0x88, 0x1, 0x100000001, 0xff, 0x7fffffff, 0xc2bf]}}, @TCA_U32_POLICE={0xc, 0x6, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdeb}}, @TCA_U32_INDEV={0x14, 0x8, 'bcsh0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x84}]}}]}, 0x49c}}, 0x4080) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) [ 524.037540] binder: 20877:20885 ioctl c0306201 200001c0 returned -14 [ 524.078740] binder: 20877:20885 got transaction with invalid handle, 0 [ 524.090833] binder: 20877:20885 transaction failed 29201/-22, size 24-8 line 3228 15:46:44 executing program 4: lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00') r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x204500) r1 = inotify_init() ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c05, 0xffffffffffffffff) 15:46:44 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 524.242195] binder: 20877:20885 ioctl c0306201 200001c0 returned -14 [ 524.254556] binder: 20877:20893 got transaction with invalid handle, 0 [ 524.261952] binder: undelivered TRANSACTION_ERROR: 29201 15:46:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = memfd_create(&(0x7f0000000140)='/d-\x1b\xb3\x82\xf9/J\xb0p*\xd8\x00\xea\x03\x83\xd8\x16\x88Qt\xceh\xeb\xb2\xc4\xfbf\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT\x8a\xec\a\xc9-;\xf55n\xd1~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{\xa9\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\x02\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9e\xe8Q\xd3\xe9S0\xb9\xb0\'\xf5\x05\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xad\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa331\x19\x8a\xc8:\xa1\xe6\xc2)', 0x0) pipe(&(0x7f0000000100)) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0xa3}, 0x2e8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 524.285448] binder: 20877:20893 transaction failed 29201/-22, size 24-8 line 3228 [ 524.305535] binder: undelivered TRANSACTION_ERROR: 29201 [ 524.367775] binder: 20898:20899 Acquire 1 refcount change on invalid ref 0 ret -22 [ 524.379363] binder: 20895:20905 ioctl c0306201 0 returned -14 [ 524.389009] binder: 20898:20899 ioctl c0306201 200003c0 returned -14 [ 524.397132] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 524.433617] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.451944] binder: release 20895:20908 transaction 394 out, still active [ 524.459191] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459205] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459218] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459230] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459243] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459255] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459267] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459279] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459292] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.459304] hid-generic 0000:0004:FFFFFFFD.0046: unknown main item tag 0x0 [ 524.509871] hid-generic 0000:0004:FFFFFFFD.0046: hidraw3: HID v0.00 Device [syz0] on sy [ 524.596888] binder: undelivered TRANSACTION_COMPLETE 15:46:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(0xffffffffffffffff, &(0x7f0000001b00)=""/250, 0x50c7e716) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(0xffffffffffffffff, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:45 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:45 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200000, 0x100) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000300)="65f9b45061f5e6541c41dc911cee8d75ad47dda4391c239769189ef3d14686b384887cdf87f066648fea38fe46034d44aa91ccc8090a85d3ea1ada403828bdce0aa5250bc307f87cae54b357c44ac90af09829a3699090685868a190a4367e198008553e498d140372a29162538003b2f23feccec03aac070238f3ab8f8355446ff337d8ad") fcntl$addseals(r0, 0x409, 0xa) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05639a9d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a687700000000e4dd70577e0195860a86dc5d20e7e146e1519a4170ecdaf32150df582362cae6522249201aac10357fe4c627faea4fa7fbe32b4d", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socket$inet(0x2, 0x0, 0x7) r2 = dup(r0) lseek(r1, 0x4, 0x3) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x44101000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) dup2(r1, r2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, {0xa, 0x4e24, 0x9, @mcast2, 0x5}, 0x7, [0x101, 0xfffffffffffffffb, 0x6, 0x7f, 0xa3, 0x4, 0x6, 0x7fffffff]}, 0x5c) 15:46:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x6) 15:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x81}, {r1, 0x4002}], 0x2, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f0000000140)={0x5}, 0x8) 15:46:45 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 525.588777] binder: 20921:20923 unknown command -1650826491 [ 525.609860] binder: release 20920:20928 transaction 395 out, still active [ 525.618469] binder: 20921:20923 ioctl c0306201 200000c0 returned -22 [ 525.622374] binder: undelivered TRANSACTION_COMPLETE [ 525.636523] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 525.638547] binder: 20921:20930 got transaction with invalid handle, 1467014628 [ 525.638615] binder: 20921:20930 transaction failed 29201/-22, size 24-8 line 3228 [ 525.660797] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660812] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660824] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660837] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660849] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660863] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660876] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660889] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660901] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.660913] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 15:46:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) [ 525.660925] hid-generic 0000:0004:FFFFFFFD.0047: unknown main item tag 0x0 [ 525.672917] hid-generic 0000:0004:FFFFFFFD.0047: hidraw3: HID v0.00 Device [syz0] on sy [ 525.757401] binder: undelivered TRANSACTION_ERROR: 29201 [ 525.778070] binder: 20921:20923 got transaction with invalid handle, 1467014628 15:46:45 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 525.785794] binder: 20921:20923 transaction failed 29201/-22, size 24-8 line 3228 15:46:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00113a6639d5aa1735969c1246a55a30712c140db0b6e7efaf2169f878452224bb947cbefa3a8e1f2b254bc4a1684952b38b365bdebf8db60f", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf250300000010000600040002000800010009000000240007000c000400010000000000000008000200000200000c0003008100000000000000540007000c00040009000000000000000c00030008000000000000000c00030002000000000000000c000300000000000000000008000200ff0100000c00040001000000000000000c00030001000000000000005c00040044000700080004000000000008000200ffffff7f08000400494d0000080003000300000008000400020000000800040006000000080002000500000008000200050000001400010062726f6164636173742d6c696e6b0000"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 15:46:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 525.837905] binder: undelivered TRANSACTION_ERROR: 29201 [ 525.858770] binder: release 20947:20949 transaction 398 out, still active [ 525.882733] binder: undelivered TRANSACTION_COMPLETE [ 525.947184] binder: release 20952:20955 transaction 402 out, still active [ 525.954168] binder: undelivered TRANSACTION_COMPLETE [ 525.979542] binder: release 20952:20953 transaction 400 out, still active [ 525.986647] binder: undelivered TRANSACTION_COMPLETE 15:46:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:46:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x29, 0x0, &(0x7f0000000280), 0x72, 0x0, 0x0}) 15:46:46 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)='/dev/loop#\x00', 0xb, 0x1) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00{\x81\xb1', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socket(0x2, 0x4, 0x40) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="0d27385b8e01b2c95c6283578a5f61575054d6bb8f31aaaca5e98c1de7392ea3317387ab45ae3615f5b38f614d3b1852a1352818823c440a3ab9e032433aa319c81b41c3ed255931f3bd712ab2560ba446d5acc13f0c29507bebfe9ea4ff21e1fb514350d1be1d105367e45e64c85169e0fd9c4c93ff0174ea30cef83d9a10dd2e20a2e336e43c59256fd2c0770de29f30c9c8207ab8451a5a42497e1b2709e985c88327a9041b006c9752191bc9f0e28c61d9c22d569a603d60a1436be741721d0dbac248bffcddcf3f4da573a9c5958b669bc7b82fcb5b71eb77ea079847e274d63d7eeb2177eb6f52a6a7485c3e7bacd0cfebd4e000ac7803136c0044fa1e") 15:46:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 526.928373] binder: 20964:20967 unknown command 0 [ 526.934332] binder: 20964:20967 ioctl c0306201 20000100 returned -22 [ 526.944634] binder: 20964:20972 unknown command 0 [ 526.950310] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r0, r1, &(0x7f0000000040), 0xc7a0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000000, 0xfffffffffffffffd) [ 526.975087] binder: release 20963:20973 transaction 405 out, still active [ 526.982529] binder: 20964:20972 ioctl c0306201 20000100 returned -22 [ 526.986975] binder: undelivered TRANSACTION_COMPLETE 15:46:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r2, 0x600, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) 15:46:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x406, r0) openat$cgroup_ro(r1, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) 15:46:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 527.063535] binder: release 20983:20985 transaction 406 out, still active [ 527.091316] binder: undelivered TRANSACTION_COMPLETE [ 527.121006] binder: release 20995:20997 transaction 408 out, still active [ 527.132370] binder: 20982:20988 ioctl c0306201 0 returned -14 [ 527.150637] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.188349] binder: undelivered TRANSACTION_COMPLETE [ 527.219214] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.226904] binder: release 20998:21001 transaction 409 out, still active [ 527.255936] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.264410] binder: undelivered TRANSACTION_COMPLETE [ 527.304763] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.325219] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.339678] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.355438] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.362592] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.370022] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.377872] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.384928] hid-generic 0000:0004:FFFFFFFD.0048: unknown main item tag 0x0 [ 527.401530] hid-generic 0000:0004:FFFFFFFD.0048: hidraw3: HID v0.00 Device [syz0] on sy 15:46:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:48 executing program 4: mlockall(0x4) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r4 = geteuid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000380)=0xc) r7 = geteuid() r8 = geteuid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=0x0) r14 = getegid() getresgid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) r16 = getegid() stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x1}, [{0x2, 0x1, r1}, {0x2, 0x0, r2}, {0x2, 0x5, r3}, {0x2, 0x0, r4}, {0x2, 0x6, r5}, {0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0x2, r8}], {}, [{0x8, 0x5, r9}, {0x8, 0x7, r10}, {0x8, 0x4, r11}, {0x8, 0x2, r12}, {0x8, 0x2, r13}, {0x8, 0x6, r14}, {0x8, 0x7, r15}, {0x8, 0x1, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r18}], {0x10, 0x2}, {0x20, 0x3}}, 0xb4, 0x2) 15:46:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f0000000040)='attr/prev\x00') r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 15:46:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000240)={0xff, @local, 0x4e24, 0x1, 'sh\x00', 0x0, 0x8, 0x4d}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0xa400, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={r3}) [ 528.376281] binder: release 21015:21016 transaction 412 out, still active [ 528.385019] binder: 21011:21018 ioctl c0306201 0 returned -14 [ 528.393900] binder: undelivered TRANSACTION_COMPLETE [ 528.399773] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x20401, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40040, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x6, {0x101}}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) [ 528.435109] binder: release 21015:21020 transaction 415 out, still active 15:46:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 528.486593] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 528.488996] binder: undelivered TRANSACTION_COMPLETE [ 528.489184] binder: release 21014:21021 transaction 414 out, still active [ 528.489188] binder: undelivered TRANSACTION_COMPLETE [ 528.503096] binder: 21033:21034 ioctl c0306201 0 returned -14 15:46:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 528.531183] binder: release 21030:21032 transaction 416 out, still active [ 528.540159] binder: undelivered TRANSACTION_COMPLETE [ 528.548570] binder: 21031:21035 Acquire 1 refcount change on invalid ref 0 ret -22 [ 528.555875] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555889] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555902] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555914] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555928] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555941] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555953] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555965] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555978] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.555991] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.556003] hid-generic 0000:0004:FFFFFFFD.0049: unknown main item tag 0x0 [ 528.579212] hid-generic 0000:0004:FFFFFFFD.0049: hidraw3: HID v0.00 Device [syz0] on sy [ 528.615723] binder: 21031:21039 transaction failed 29189/-22, size 24-8 line 3014 [ 528.671601] binder: undelivered TRANSACTION_ERROR: 29189 [ 528.680315] binder: 21031:21035 Acquire 1 refcount change on invalid ref 0 ret -22 [ 528.711608] binder: 21031:21039 transaction failed 29189/-22, size 24-8 line 3014 [ 528.726221] binder: undelivered TRANSACTION_ERROR: 29189 [ 528.772915] binder: release 21045:21048 transaction 419 out, still active [ 528.797317] binder: undelivered TRANSACTION_COMPLETE 15:46:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82003) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1102800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x401, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000005) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe96, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"', @ANYRESDEC=r0], 0xfffffffffffffccd, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:46:49 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x2, 0x40004) ioctl$LOOP_CHANGE_FD(r2, 0x4c05, 0xffffffffffffffff) 15:46:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x9) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:46:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x1}}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 529.834351] binder: 21057:21059 ioctl c0306201 20000140 returned -14 [ 529.842144] binder: release 21058:21061 transaction 420 out, still active [ 529.853219] binder: undelivered TRANSACTION_COMPLETE [ 529.864898] binder: 21057:21059 got transaction with invalid handle, 0 15:46:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 529.900792] binder: 21057:21059 transaction failed 29201/-22, size 24-8 line 3228 [ 529.935248] binder: undelivered TRANSACTION_ERROR: 29201 [ 529.943220] binder: 21057:21059 ioctl c0306201 20000140 returned -14 15:46:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) 15:46:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x21, 0x4, 0x4}, 0xbc}}, 0x18) [ 529.948968] binder: 21057:21076 got transaction with invalid handle, 0 [ 529.949506] binder: 21057:21076 transaction failed 29201/-22, size 24-8 line 3228 [ 529.958174] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 529.981146] binder: release 21072:21075 transaction 423 out, still active [ 530.001970] binder: undelivered TRANSACTION_COMPLETE [ 530.017145] binder: undelivered TRANSACTION_ERROR: 29201 [ 530.114033] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.133498] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.168312] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.201789] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.214571] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.222690] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.230131] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.238308] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.245417] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.252864] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.260320] hid-generic 0000:0004:FFFFFFFD.004A: unknown main item tag 0x0 [ 530.274827] hid-generic 0000:0004:FFFFFFFD.004A: hidraw3: HID v0.00 Device [syz0] on sy 15:46:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xffffffff, 0x7f}]}, 0x8) ioctl(r0, 0x8, &(0x7f0000000180)="904214b650554b9079c70b4529a07046303c679dba5c9902d0fa0d79f4cb2f881dfa970af7c8fcdd5d68dd") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="852a687700000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00'], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x5, 0x4, 0x40, 0x7, 0x5, 0xff}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaed}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb00}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) 15:46:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 15:46:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) 15:46:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:46:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) 15:46:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x929ab2777ec77eeb, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 531.238362] binder: 21098:21105 unknown command 25349 [ 531.245704] binder: 21098:21105 ioctl c0306201 200000c0 returned -22 [ 531.255064] binder: release 21098:21105 transaction 424 out, still active [ 531.265156] binder: undelivered TRANSACTION_COMPLETE [ 531.274538] binder: 21099:21108 ioctl 8 20000180 returned -22 15:46:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 15:46:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 531.298713] binder: release 21099:21108 transaction 426 out, still active [ 531.305946] binder: 21099:21114 ioctl 8 20000180 returned -22 [ 531.316672] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 531.331056] binder: undelivered TRANSACTION_COMPLETE [ 531.338159] binder: release 21099:21108 transaction 428 out, still active 15:46:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 531.348737] binder: undelivered TRANSACTION_COMPLETE [ 531.431337] binder: 21122:21126 unknown command 25349 [ 531.441228] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.457922] binder: 21125:21130 got transaction with invalid handle, 0 [ 531.479633] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.487343] binder: 21122:21126 ioctl c0306201 200000c0 returned -22 [ 531.499582] binder: 21125:21130 transaction failed 29201/-22, size 24-8 line 3228 [ 531.549304] binder: release 21122:21136 transaction 430 out, still active [ 531.549703] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549724] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549737] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549749] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549761] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549774] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549786] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549799] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.549811] hid-generic 0000:0004:FFFFFFFD.004B: unknown main item tag 0x0 [ 531.576025] hid-generic 0000:0004:FFFFFFFD.004B: hidraw3: HID v0.00 Device [syz0] on sy [ 531.674755] binder: undelivered TRANSACTION_COMPLETE [ 531.680890] binder: undelivered TRANSACTION_ERROR: 29201 15:46:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = getpgid(0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={[], 0x2ed, 0x7, 0x9, 0xd7, 0xfffffffffffffffb, r1}) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 15:46:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 15:46:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0xffff, 0xb) 15:46:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 532.670504] binder: 21145:21148 unknown command 287493 [ 532.677511] binder: 21145:21148 ioctl c0306201 200000c0 returned -22 [ 532.685787] binder: release 21145:21148 transaction 431 out, still active [ 532.695588] binder: undelivered TRANSACTION_COMPLETE [ 532.703966] binder: 21142:21150 Acquire 1 refcount change on invalid ref 0 ret -22 15:46:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) 15:46:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 532.712137] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 532.728782] binder: 21142:21150 transaction failed 29189/-22, size 24-8 line 3014 15:46:52 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x428080) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x3ff) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "f5271e8beb59aa56", "79f63e49062c94ba1e4d5b5db0741c5f", "3d877575", "8b7ce673db392dc4"}, 0x28) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 532.764786] binder: 21154:21157 unknown command 25349 [ 532.781317] binder: 21154:21157 ioctl c0306201 200000c0 returned -22 [ 532.794862] binder: undelivered TRANSACTION_ERROR: 29189 [ 532.803010] binder: 21142:21150 Acquire 1 refcount change on invalid ref 0 ret -22 15:46:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x10000000) r1 = dup(r0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) write$binfmt_aout(r0, &(0x7f0000000180)={{0x1cc, 0x6, 0x4, 0x3ae, 0x33, 0x4, 0x1fe, 0x2fce}, "f323cc6be1178b418de7f1aea09e31e1148a2da5463066fe200eb2bfecc3783870f6c94e58c7290ec39f01277dd1ffd89ba4b7f90cbf7764c56d72a4c832928699eb5f0845a4b944b200c9e81d48404b34684b43405d62f0283935ecba368370b729226f6b91c35c884d71671cebaa3e53e0c63a854d1f91c4ed237de37df239fff73653d0ce897ba827633d89011684e4a549fbd76ecdbf907f27a59c94fad456a68181871319dc11b51993eb433c087b92ae315f7fedb7ce8001df80a92ac5f45e70a2ea7d362d1c13f6a3", [[], []]}, 0x2ec) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') [ 532.817927] binder: 21142:21162 transaction failed 29189/-22, size 24-8 line 3014 [ 532.825162] binder: 21160:21164 unknown command 25349 [ 532.825172] binder: 21160:21164 ioctl c0306201 200000c0 returned -22 [ 532.825538] binder: release 21160:21164 transaction 434 out, still active [ 532.825543] binder: undelivered TRANSACTION_COMPLETE [ 532.922939] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.935896] binder: 21170:21173 unknown command 5 [ 532.941562] binder: 21170:21173 ioctl c0306201 200000c0 returned -22 [ 532.950918] binder: release 21170:21173 transaction 435 out, still active [ 532.956926] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 532.973970] binder: undelivered TRANSACTION_COMPLETE [ 532.993552] binder: undelivered TRANSACTION_ERROR: 29189 [ 532.995796] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995810] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995823] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995835] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995848] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995860] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995967] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995979] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.995992] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 532.996004] hid-generic 0000:0004:FFFFFFFD.004C: unknown main item tag 0x0 [ 533.003917] hid-generic 0000:0004:FFFFFFFD.004C: hidraw3: HID v0.00 Device [syz0] on sy [ 533.016197] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x180) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) 15:46:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) fcntl$setsig(r0, 0xa, 0x1b) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:46:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0xfffffffffffffffe) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/222, 0xde}], 0x7, &(0x7f0000000700)=""/161, 0xa1}, 0x4e8c2f0b6a833d06) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0x8000, 0x6, 0x8001, 0x8, 0x5}) 15:46:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:46:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="852a687700000000", @ANYRES64=0x0, @ANYBLOB="00d30000000000008b8957c6bea198ca7cd094b0fafbd08f79ee969666bc147b0afe3490c200d7db02ffcfdff67dd1a442"], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x20000004}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000240)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) chown(&(0x7f0000000000)='./file0\x00', r3, r4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000500)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x30000) 15:46:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x400000, 0x9, 0x6, 0x1}, 0x14) 15:46:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) [ 534.178149] binder: release 21184:21192 transaction 436 out, still active [ 534.191206] binder: undelivered TRANSACTION_COMPLETE [ 534.197524] binder: 21185:21190 unknown command 25349 [ 534.203039] binder: 21185:21190 ioctl c0306201 200000c0 returned -22 15:46:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) [ 534.243515] binder: 21198:21199 unknown command 25349 [ 534.249107] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 534.263943] binder: 21198:21199 ioctl c0306201 200000c0 returned -22 15:46:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000440)={'teql0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000480)={'yam0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000680)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000007c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000800)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000840)={0x3a0, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x108, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xf8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x174, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 534.321661] binder: 21201:21206 Acquire 1 refcount change on invalid ref 0 ret -22 [ 534.362823] binder: 21201:21206 transaction failed 29189/-22, size 24-8 line 3014 [ 534.403729] binder: 21209:21214 unknown command 287493 [ 534.423692] binder: 21209:21214 ioctl c0306201 200000c0 returned -22 [ 534.435616] binder: undelivered TRANSACTION_ERROR: 29189 [ 534.436718] binder: 21201:21217 transaction failed 29189/-22, size 24-8 line 3014 [ 534.437191] binder: 21201:21206 Acquire 1 refcount change on invalid ref 0 ret -22 [ 534.466081] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.495005] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.505810] binder: undelivered TRANSACTION_ERROR: 29189 [ 534.535957] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.556293] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.563732] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.571873] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.576683] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 534.606222] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.613401] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.620510] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.627787] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.634996] hid-generic 0000:0004:FFFFFFFD.004D: unknown main item tag 0x0 [ 534.656575] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 534.660268] hid-generic 0000:0004:FFFFFFFD.004D: hidraw3: HID v0.00 Device [syz0] on sy 15:46:55 executing program 0: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r0, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r0, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 15:46:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x200, 0x5, 0x2, 0x800, 0x1, [{0xefde, 0x4, 0x7}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x1010, 0xffffffffffffff9c, 0x3f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, r2, 0x1}], 0x63, 0x0, &(0x7f0000000140)="f34ff9fb87a324a54ea3f4c5446dfce0cca04fcc10ff9b9c7f569b4f6e8e63363910830bcb56f4c728571e47c51e2c8e24390361e863905ee2a85111b6bbb06ea9e760f81a8697297f1604cd6703cb466bd523ac20241aba065c0d207f469989744aa6"}) 15:46:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) 15:46:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = getpgrp(0x0) sched_getparam(r3, &(0x7f0000000180)) ioctl$RTC_EPOCH_READ(r2, 0x8004700d, &(0x7f00000001c0)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f0000000140)={0x9, &(0x7f0000000040)=[{0x1, 0x1, 0x7, 0x2}, {0x6af, 0x5, 0x8, 0x1}, {0x7, 0x401, 0xffff, 0x3}, {0x50, 0x4, 0x0, 0x9}, {0x8, 0x3ff, 0x10000, 0x9}, {0x0, 0x1, 0x585, 0x9}, {0x10000, 0xe456, 0x5, 0x434}, {0x7ff, 0xf1e9, 0x1000, 0x4ed9}, {0x0, 0x8001, 0x8001, 0x5}]}) 15:46:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:46:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) syz_execute_func(&(0x7f0000000100)="c4e2093d376467360f6512c4c17d28786bc4e1d5ed38f3abc4c1b1dbc6730a0f9e8a135e0000050d000000c4c1ed6a2493") 15:46:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) [ 535.596916] binder: 21232:21235 unknown command 287493 [ 535.619347] binder: 21232:21235 ioctl c0306201 200000c0 returned -22 15:46:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) [ 535.645810] binder: 21243:21244 unknown command 287493 [ 535.651297] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 535.651363] binder: 21243:21244 ioctl c0306201 200000c0 returned -22 15:46:55 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4004556c, &(0x7f0000000040)='syz1\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) 15:46:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 535.700629] binder: release 21248:21249 transaction 440 out, still active [ 535.724893] binder: undelivered TRANSACTION_COMPLETE [ 535.754009] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.779315] binder: release 21253:21256 transaction 442 out, still active [ 535.787977] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.807804] binder: undelivered TRANSACTION_COMPLETE [ 535.823489] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.835317] binder: release 21257:21259 transaction 446 out, still active [ 535.843330] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.861546] binder: undelivered TRANSACTION_COMPLETE [ 535.874660] binder: release 21253:21260 transaction 444 out, still active [ 535.885037] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.899525] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.910197] binder: undelivered TRANSACTION_COMPLETE [ 535.925655] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.933221] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.962586] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.974274] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 535.982841] hid-generic 0000:0004:FFFFFFFD.004E: unknown main item tag 0x0 [ 536.007927] hid-generic 0000:0004:FFFFFFFD.004E: hidraw3: HID v0.00 Device [syz0] on sy 15:46:56 executing program 0: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r0, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r0, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:56 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 15:46:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="5400cc00"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0xfffffffffffffee0, 0x0, 0x0}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="fb8915041727a6a54d069290190208cf3aa947c1fa2336aa568fb2d0c8495a12", 0x20}, {&(0x7f0000000140)="ca8c2793394b1734e216a46160ef05a55d4c83f51b8903878967e787bf70f1f0f91be499f17df4a3cfa29d0a0f46e16eeebd3d77323dd8a39a5a89bb6a6c1e1f06d5ff451e3a7ed2efd4bfb281303db68889021ec25ee85b6698a612395dfdcdee42ea5237d66aeac3f49027bd748ad0fa7a4e9c36d82dea16bdd34743399d3ad522ee37104a92d0b2b2564a150a178b440be7efd79ebc8e828111f848f91a7fc6fa19aff14170307a0a1e7d70584722fe7842d6575492ba6dbadc4562af6bae4ae10d6428820a8d1b28bff8b0875939ce864ab62af93a8155ed3b066c03eeec8812", 0xe2}, {&(0x7f0000000240)="e21dac4c8a548c5c5fcec36601068f380b18a927f7", 0x15}], 0x3) 15:46:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x2, 0x0, "0a2c819bc4487dc9f9b53ddd96962b8183ebe4a1109bbbca9b88e1c84481f1ae1d4fd2eab3b1f83e69f53642309cee21051cf04146e1121c9d939ee5a44a53586c171bec32fc4086c47d386dae701de0"}, 0xd8) restart_syscall() prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5f4a70a285f0092e67767ab3ac13e86015f04087cb6cd99f8720a05e321527bb1aa54b17ac0a172d2c2413a7954d4d087caf6abd5c72c8e4df7c5e72376573e949a0794600000000000000"], 0x0, 0x0, 0x0}) 15:46:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[]}}, 0x80) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:46:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:46:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) listen(r0, 0x6) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001280)=0x0) fstat(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sendmsg$unix(r2, &(0x7f00000014c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000140)="5a149e69c477a81ebfc066a9f4bd2035e38e404050853bc327de02c4831b72521705aa260461fc127300d2a222c6119d671516119c3c8d5bf14af0915024b82ab7939db6d8c34fba9ceda69ef45c91a9004a3b930cc3b85252a246dabcdb3fbcc81c034e259f88260fd483fe94093f95299a3000953506851ac40bf14d5337cd6c4b9d175ac79664236197f8e1c02d170923163b2126829ad39bf3f3553142b1cdb1096ef99b2746d2a7a2bbdde816dbfd5cfb1bac06ca96299b811d0784d6ce917e1c2199398f3bbda65aed7bcf3f5c8209ffdaa20f836b9bac114a7c7b5a48", 0xe0}, {&(0x7f0000000080)="fc5308bf209a52653c0761b201fb4bf65452ea3496a1f88f942a4cfadcbad4b241c28b850d11daa1f5d2ab29d7cc", 0x2e}, {&(0x7f0000000240)="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", 0x1000}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="300000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="140000005317f6495cfb5e0100000001006abd7f814000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="200000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0xbc, 0x20000000}, 0x20000000) memfd_create(&(0x7f0000001500)='\x00', 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) [ 537.029591] binder: 21274:21276 ioctl c0306201 0 returned -14 [ 537.043925] binder: 21273:21277 unknown command -1569699233 [ 537.053532] binder: 21272:21281 unknown command 13369428 [ 537.086143] binder: 21273:21277 ioctl c0306201 20000040 returned -22 [ 537.098561] binder: 21272:21281 ioctl c0306201 200000c0 returned -22 [ 537.110592] binder: 21272:21285 got transaction with invalid handle, 0 15:46:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) time(&(0x7f0000000080)) 15:46:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) r1 = syz_open_pts(0xffffffffffffff9c, 0x6) tee(r0, r1, 0x6c34, 0x1) ioctl$VT_WAITACTIVE(r1, 0x5607) 15:46:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 537.143037] binder: 21272:21285 transaction failed 29201/-22, size 24-8 line 3228 [ 537.161241] binder: 21288:21294 ioctl c0306201 0 returned -14 [ 537.176179] binder: 21272:21285 ioctl c0306201 200003c0 returned -14 15:46:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket(0x11, 0xa, 0xffffffffffff6a34) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480040}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) socket(0x1, 0x2, 0x400) [ 537.211389] binder: undelivered TRANSACTION_ERROR: 29201 [ 537.211840] binder: 21272:21281 unknown command 13369428 [ 537.211849] binder: 21272:21281 ioctl c0306201 200000c0 returned -22 [ 537.244348] binder: 21272:21285 got transaction with invalid handle, 0 [ 537.257920] binder: 21302:21306 ioctl c0306201 0 returned -14 [ 537.269678] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.306283] binder: 21272:21285 transaction failed 29201/-22, size 24-8 line 3228 [ 537.308809] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308824] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308836] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308848] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308860] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308873] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308885] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308898] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308910] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.308922] hid-generic 0000:0004:FFFFFFFD.004F: unknown main item tag 0x0 [ 537.349225] hid-generic 0000:0004:FFFFFFFD.004F: hidraw3: HID v0.00 Device [syz0] on sy [ 537.397811] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 537.423575] binder: 21272:21285 ioctl c0306201 200003c0 returned -14 [ 537.435354] binder: undelivered TRANSACTION_ERROR: 29201 [ 537.506763] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:46:58 executing program 0: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r0, &(0x7f0000001b00)=""/250, 0x50c7e716) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r0, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x440000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)={0x29, 0x4, 0x0, {0x5, 0x1f, 0x1, 0x0, [0x0]}}, 0x29) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x0, 0x1}, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x28, 0x10, &(0x7f0000000080)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x4}], &(0x7f0000000100)=[0x20, 0x20]}}], 0x67, 0x0, &(0x7f00000001c0)="c6c86132538430e815b0bc0e85d1a57c2360dd85ddae81997da5358bd32fd3dcbb229fdd2f9b4cd935b8ea053317ab11aedbb829392872554c330bd6681bb9037341a2d97462cc150288e05fb33a9c468e550def69a4bcb252bf4f1dc056d54faac2bfa85e7253"}) 15:46:58 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x203) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:46:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xe8, r2, 0xa00, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7afb0e8a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x65c1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f12f1da5059b51"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="006340400000000000000000007df1b8ff68bbb50000000000000000000000000000000000e90400000000180000000000000008000000000000001e038b15b66f2dfcf08fc38cc725767bf278a5b9f34af5d5608a7df979962860a9fc7dc3dbda0b0d4e7138e820d98defced56682fe1c896a7b54e1d178b209424021a56f8d4b72dfc8e94de157d0225f83be74b43d2598828caf7e7cef580f51b03bfed2615629c063a78b2d9d2fecddc8fb838d8a4796f5be6ab95e21c9c0694c2eaf1890507ced6fb5e548433d157b1ef2ad", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="722a7cf800000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0x1, 0x2, 0x80000000000000, 0x1, 0x497}}) ioctl$RTC_WIE_ON(r1, 0x700f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) signalfd4(r1, &(0x7f0000000300)={0xd38}, 0x8, 0x0) 15:46:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) recvfrom(r2, &(0x7f0000000140)=""/133, 0x85, 0x0, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x80) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000200)={0xfffffffffffffffd, 0x7}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3941) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 15:46:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x200000000000000, 0x4202) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) ioperm(0x5, 0x5, 0x8001) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5a0f3bf1, 0x400000) 15:46:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 538.488133] binder: 21319:21327 got reply transaction with no transaction stack [ 538.513967] binder: 21319:21327 transaction failed 29201/-71, size 40-16 line 2922 [ 538.516151] binder: 21321:21329 unknown command -1524813839 [ 538.516160] binder: 21321:21329 ioctl c0306201 200000c0 returned -22 [ 538.517153] binder_alloc: 8629: binder_alloc_buf size 2305843009214015744 failed, no address space [ 538.517160] binder_alloc: allocated: 3208 (num: 119 largest: 32), free: 9080 (num: 2 largest: 9072) [ 538.517206] binder: 21321:21329 transaction failed 29201/-28, size 1729382256910592256-576460752303423488 line 3137 [ 538.517268] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 538.529333] binder: undelivered TRANSACTION_ERROR: 29201 15:46:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200100, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, 0x7, 0x1, 0x80000004, 0x3fe, "66f334e0a086c261a35735eea8c68efb8443192bec745e42c33e629ccaa0d9e8e562f903bb65ee0a720060f1b2c5a1a082150000000000000000"}, 0x46) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 538.540071] binder: 21321:21335 unknown command -1524813839 [ 538.540082] binder: 21321:21335 ioctl c0306201 200000c0 returned -22 [ 538.540382] binder_alloc: 8629: binder_alloc_buf size 2305843009214015744 failed, no address space [ 538.540391] binder_alloc: allocated: 3208 (num: 119 largest: 32), free: 9080 (num: 2 largest: 9072) [ 538.540439] binder: 21321:21329 transaction failed 29201/-28, size 1729382256910592256-576460752303423488 line 3137 [ 538.551241] binder: undelivered TRANSACTION_ERROR: 29201 15:46:58 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x101800, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB="852a687700000000", @ANYRES64=0x0, @ANYBLOB="00000000000000002b2f2dbc79cc404d83dd95bc868f99f2aef76589a2a6bd0961958cc9a175e4056fba148fd060d6c4f7cfc666d74a1e4b6fed73b0c1f433ad3f75b095e1491435f58ae90b8a7680d08cfd8d75e754073fc33c538fd1fdbde7976f81e90afbe0229e9b89d82cdef40a55325879ddb0cb68f0ed2fb0eb11711bb79aed08c177e6b1f8b02e2277c23c32815c4a7fe47d7a8f5679cdab8892708b79481ef436fac2cf7aab5f3b2aba6faf4f6861168d26e142eb7219341e6f7399c96755b5d5926cc4b7"], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) dup(r1) [ 538.637008] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 538.661705] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.671879] binder: 21319:21327 got reply transaction with no transaction stack [ 538.709495] binder: 21319:21327 transaction failed 29201/-71, size 40-16 line 2922 [ 538.713385] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713399] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713411] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713424] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713436] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 15:46:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) dup2(r1, r1) [ 538.713448] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713461] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713473] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713485] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 [ 538.713498] hid-generic 0000:0004:FFFFFFFD.0050: unknown main item tag 0x0 15:46:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x0) [ 538.813878] binder: release 21346:21347 transaction 458 out, still active [ 538.832472] hid-generic 0000:0004:FFFFFFFD.0050: hidraw3: HID v0.00 Device [syz0] on sy [ 538.846800] binder: undelivered TRANSACTION_COMPLETE [ 538.852163] binder: release 21346:21347 transaction 460 out, still active [ 538.868800] binder: undelivered TRANSACTION_COMPLETE 15:46:59 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:46:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='net/ip_vs\x00') ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x1f, 0xb68b, 0x9, 0x7, 0x0, 0x7}) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) write$P9_RFLUSH(r2, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 15:46:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) 15:46:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x9c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000140)=[0x38, 0x78]}, 0x20000000000}}, @decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x1, 0x0, 0x17}], &(0x7f0000000200)=[0x78, 0x48, 0x48]}}], 0xbd, 0x0, &(0x7f0000000440)="b22d0fbbb05e583ffd54bfc8c5f51310a2307a9ea77cf9c7f6918751121145b5852662cc681a0a3f5b75bc63f70253bcba34d750d78075fe7aff27967a1a52429ee96a6d845b5366db123ed37347b352c3af56743a4cf443dd052bb61b726935036caa27ad169e8aeb06265ab3f944d50c8c3a3db808c91d34eccb0e5fa72e24772110b240a0cc932ecd0e89c0f6c800b09a9bcc44d404c3a3b84790f01582115a712ea6b5aeeed0e5b21da461cf90a70aad9343f207cb1598c4b06b47"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) sync_file_range(r0, 0x7, 0x7, 0x7) 15:46:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:46:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) write(r0, &(0x7f0000000000)="07a87bab13dbee21bac7b8b78532bf17ff67d7d66da271e9d0d9fde4b978201b85bf61dde3148c27e536361385f48a4e715f64ec144ddda8973ed9995721dcd3d897123709f4ca5c205c518d13625c439ad1392d8712ed42538f7e34241b02d8967a441baa3aa4835812bfdf39f25d81757ae534d0e74f4d28fc74337006c4738efb750c990d789f5a9fc4e72be07a3fccec17b7", 0x94) 15:46:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:46:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x0) syz_open_dev$loop(&(0x7f0000001440)='/dev/loop#\x00', 0x1ff, 0x400040) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) pipe(&(0x7f0000001480)={0xffffffffffffffff}) recvfrom$inet6(r1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000040)="c5df84b2e1d3850a48b94ac096c79717062e779f702129468f4638e3b2d9239dac44ad13b61087a4d9b604bdfd9bd518ebdc3eb10c034a70092cbb2c469165508b9dd34c3e523e02b42973428f540893d8d5bf0ac9a03e8cf8836bb2e83093c65194b77f65196c951d7b4356c31559c6010c2da3208016141b1d95b204143c59e544c8b5641b63e9b1eceb2d6fc5e954739c1ee2878f5eeda2575dd2cb93b1a6", 0xa0}, {&(0x7f0000000100)="b031dd8bba98238d6a49e020a4233427c039f6f34b537b926520543276e42887d328f3de12fd2b49fd22803bc622e215a897c055684cdcef0dc3c046e139c0d4e156dc93052a2123fd5422eab1517be75924ea8673f93fffea7322bc6dd178d832cb99976e80a111cc0a3b658f1efd6cd9189877cec98928d091b632f0c51f7649193b33390eeba9fd83f6f128f2deb26b7125176082c2070c7225f7c4f2026cc4eef86e239948ec82417115754adb22d1865843ef9f4aed51e998d5f067ec99650f194cd78ccbb560e16cd24a02726f080db8b52434eb2ec7480c0604fe6926e1933378e3ddeefbe50efd", 0xeb}, {&(0x7f0000000200)="f6251afe33263f064d57095fe55970642a55ce12db5aa086bd4dabca5f9a592148aec69f529752724fa8c02960df887cf9a2c93222c7cd4937340a853cdaf1d7c10b9c6050d8144910b13d8770f19a2a0ef762853f579441e63311e99799def371cac8acb2fdef57b834865a98bdbceb7f02f947673d16f22d641bed4bb937b1ec2213d74ff1a92d60da042a8bb1e07452cd532965c07443fcf92e9404452e65d2b883c1b895d3fdf6168a77c3c2de40aab2d17612c40bcee662682c51ef053179ff", 0xc2}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="33b0131fe842edbfa88540c6a302b94c9e902e45e3422e97bc89d8aac9a66b2ed35215996a57b3ae4ff527a84cd883dd7ecb57bfc34f023491a9dfa84cf025f7b2b2ebbe779a6d9fdf2bff51f6f1e56bb5fced380bd298dd7dd5285ac60830f2d01d620cf7e6ad38be704cd767ea465a842da68fec37dd080e8458e8ee368313ee6a0b63336e0344b6c5da0448334ce5eb547167c13c5a0e5777e2c242c0da68f684a027b967428ea5d79ef58a6527bcca70c9a192e67ee06457602af510f32e6fa45ab17a5b10352725c1c1f37a35efc6e4840cd1bdd558d8e0295e11e54cb60c30efffe34b94d00fffae9f2b", 0xed}], 0x5, 0x1) 15:46:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) signalfd4(r0, &(0x7f0000000040)={0x6}, 0x8, 0x80000) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) r3 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x800000000) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) socketpair(0xe, 0x6, 0x200000000000000, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000280)) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000081) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) [ 539.982397] binder: 21367:21378 Acquire 1 refcount change on invalid ref -1199303685 ret -22 [ 539.991234] binder: 21368:21379 got reply transaction with no transaction stack 15:46:59 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02100000d75e351ea26ea210b75e4b8215cf58fdb8882cd398b889141a58f8333d"], 0x0, 0x0, 0x0}) [ 540.037076] binder: 21368:21379 transaction failed 29201/-71, size 0-16 line 2922 [ 540.065038] binder: release 21368:21382 transaction 465 out, still active [ 540.073597] binder: 21368:21382 got reply transaction with no transaction stack 15:46:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 540.097432] binder: 21368:21382 transaction failed 29201/-71, size 0-16 line 2922 [ 540.110354] binder: undelivered TRANSACTION_COMPLETE 15:46:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) [ 540.151654] binder: release 21368:21379 transaction 468 out, still active [ 540.171289] binder: 21392:21397 unknown command 4098 [ 540.177157] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.195065] binder: undelivered TRANSACTION_COMPLETE [ 540.222597] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.225715] binder: 21392:21397 ioctl c0306201 200000c0 returned -22 [ 540.265569] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.273053] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.281552] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 540.307145] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.318169] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.336046] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.344365] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.360969] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.368921] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.379805] hid-generic 0000:0004:FFFFFFFD.0051: unknown main item tag 0x0 [ 540.434969] hid-generic 0000:0004:FFFFFFFD.0051: hidraw3: HID v0.00 Device [syz0] on sy [ 540.456661] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:47:01 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:47:01 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06a65202bc26bc4791a8a536ec336b062f43d5ba8cb23996f07da5812da9c2bd9cb3040000002d7fa730209d602f7c2b21c22f53fe3ea58c56076a3e0400faa37e0b000063da1eaa54c7a550c2d3b5bd5be8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) r0 = inotify_init() dup(r0) 15:47:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:47:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 15:47:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x2}, 0x100, r2, r3, 0x2, 0x5681, 0x9, 0x7, 0x833c, 0x8, 0x7fffffff, 0xffffffff, 0x5, 0x8, 0x4, 0x8, 0x7ff, 0x80000001, 0x5}}, 0xa0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:47:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x210100, 0x10) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000040)=0xfffffffffffffff7) 15:47:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x44040, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000180)={0x400, 0x9}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0)) 15:47:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400000, 0x1) write$P9_RSETATTR(r1, &(0x7f0000000180)={0x7, 0x1b, 0x1}, 0x7) 15:47:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:47:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0) [ 541.456839] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 541.462137] binder: 21432:21433 unknown command 2130706432 [ 541.462147] binder: 21432:21433 ioctl c0306201 200000c0 returned -22 [ 541.463357] binder: 21432:21433 unknown command 2130706432 [ 541.463365] binder: 21432:21433 ioctl c0306201 200000c0 returned -22 [ 541.486079] binder: 21435:21436 Acquire 1 refcount change on invalid ref -730563190 ret -22 15:47:01 executing program 1: socket$netlink(0x10, 0x3, 0x1f) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) [ 541.488515] binder: 21435:21436 Acquire 1 refcount change on invalid ref -730563190 ret -22 15:47:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000340)={0x8, {{0xa, 0x4e22, 0x6, @ipv4={[], [], @loopback}, 0x300000}}}, 0x84) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, [], [{0xe35d, 0x7fff, 0x200, 0x3, 0x8, 0x7}, {0x0, 0x800, 0x5, 0x7fffffff, 0xfffffffffffffff9}], [[], [], [], [], [], []]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$binfmt_aout(r0, &(0x7f0000000440)={{0x10f, 0x8001, 0x7, 0x349, 0x22e, 0x7, 0xde, 0x1}, "", [[], [], [], [], [], [], [], [], [], []]}, 0xa20) [ 541.570642] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.616376] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.657616] binder: 21447:21449 ioctl c0c0583b 20000100 returned -22 [ 541.668202] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.698410] binder: 21447:21454 ioctl c0c0583b 20000100 returned -22 [ 541.707585] binder: 21450:21456 got transaction with invalid handle, 0 [ 541.712641] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712655] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712667] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712680] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712692] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712705] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712717] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.712730] hid-generic 0000:0004:FFFFFFFD.0052: unknown main item tag 0x0 [ 541.761303] hid-generic 0000:0004:FFFFFFFD.0052: hidraw3: HID v0.00 Device [syz0] on sy [ 541.780652] binder: 21450:21456 transaction failed 29201/-22, size 24-8 line 3228 [ 541.780878] binder: release 21451:21457 transaction 475 out, still active [ 541.780882] binder: undelivered TRANSACTION_COMPLETE [ 541.804717] binder: undelivered TRANSACTION_ERROR: 29201 15:47:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x9, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='/dev/loop#\x00', 0xb, 0x1) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/uts\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:47:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x401, 0x0) write$selinux_create(r1, &(0x7f0000000100)=@objname={'system_u:object_r:semanage_store_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3e7, 0x20, './file0\x00'}, 0x61) r2 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 15:47:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304400eb6f9f2eeec94482edf"], 0x0, 0x0, 0x0}) 15:47:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:47:02 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:47:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x28}, r1}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:47:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 542.791412] binder: release 21468:21471 transaction 476 out, still active [ 542.801443] binder: undelivered TRANSACTION_COMPLETE [ 542.816929] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 542.831318] binder: 21465:21475 Acquire 1 refcount change on invalid ref -218515954 ret -22 15:47:02 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x80400, 0x80) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28030000", @ANYRES16=r2, @ANYBLOB="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"/791], 0x328}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) keyctl$invalidate(0x15, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 15:47:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$apparmor_exec(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="65786563206370757365742ed8ca30215b656d302d00"], 0x16) [ 542.831341] binder: release 21467:21474 transaction 478 out, still active [ 542.831365] binder: undelivered TRANSACTION_COMPLETE 15:47:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05636e14d7a407423efe1e0440"], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x3fffe, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) fcntl$setown(r1, 0x8, r2) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0xfffffffffffffffd, 0xa, 0x800, 0x70bd25, 0x25dfdbfe, {0xf, 0x0, 0xa}, [@generic="74374dcf3df7a478096fbc4cbebe143976ea521c641987c8c8cefe19c1bce5237b56dbd58d41c8b177e5a2ce153944dc81c6de7f63117316d5", @typed={0x4, 0x78}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:47:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000003) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:47:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:47:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 542.917729] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 542.938422] binder: release 21482:21489 transaction 482 out, still active [ 542.960150] binder: undelivered TRANSACTION_COMPLETE 15:47:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x181804, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11f, 0x6e, &(0x7f0000000100)="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"}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000280)={0xe, 0xa, 0x5, 0x7, 0x40, "3e52267ef5c85965e4499dd54e2bb45ceac6edee5c48882355a482c81e7c3974ac930dba4aaf67d1ff42f713e4e665bb41a8a6b27f597380f70a41b6243ee8c7"}, 0x4c) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) r2 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x1, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000240)={'team_slave_0\x00', {0x2, 0x4e24, @rand_addr=0x2}}) [ 543.011455] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 15:47:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) setpgid(r1, r2) 15:47:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getgroups(0x0, 0x0) [ 543.052632] binder: 21497:21501 unknown command 342778629 [ 543.065890] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.071037] binder: release 21498:21502 transaction 484 out, still active [ 543.071042] binder: undelivered TRANSACTION_COMPLETE [ 543.106893] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 543.120517] binder: 21497:21501 ioctl c0306201 200000c0 returned -22 [ 543.128634] binder: 21497:21509 got transaction with invalid handle, 0 [ 543.163443] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.184596] binder: 21497:21509 transaction failed 29201/-22, size 24-8 line 3228 [ 543.212746] binder: undelivered TRANSACTION_ERROR: 29201 [ 543.218146] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.218166] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.219039] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.219052] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.219065] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.219077] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.219089] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.219103] hid-generic 0000:0004:FFFFFFFD.0053: unknown main item tag 0x0 [ 543.263229] hid-generic 0000:0004:FFFFFFFD.0053: hidraw3: HID v0.00 Device [syz0] on sy [ 543.290832] binder: 21497:21501 unknown command 342778629 [ 543.297729] binder: 21497:21520 got transaction with invalid handle, 0 [ 543.318200] binder: 21497:21501 ioctl c0306201 200000c0 returned -22 [ 543.330157] binder: 21497:21520 transaction failed 29201/-22, size 24-8 line 3228 [ 543.379816] binder: undelivered TRANSACTION_ERROR: 29201 15:47:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:47:04 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:47:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xec) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0xfffffffffffffffa, 0x3, 0x101, 0x8, 0xffffffffffff8001, 0x1910}) 15:47:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xffffffffffffffff, 0xfffffffffffffff9) pipe(&(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 15:47:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff07994bc1b54dd3bd20dd7125723121591959b1be0af5584f4920060000006f5326298eba5975122946a173"], 0x2fd, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000306a8d369e64d632ff318aadb386508fae2bd840b994245aadabb0bddf65f5bbc8f58e046aebe9afa6a9802ac4447c4ca4decf9daff7466d4f2cc2847981d66ee0a2e1c0f117ee770ad744df67c384b2e67cdf938d9e3898294a87ca8a5e2e7c7b5f16764e2b3c66ab415f17fed5bc3000", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="852a687700000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 15:47:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_execute_func(&(0x7f0000000280)="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") ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) eventfd(0x7ff) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe) [ 544.292358] binder: 21532:21535 unknown command 1268320255 [ 544.298607] binder: 21532:21535 ioctl c0306201 200000c0 returned -22 [ 544.306340] binder: 21532:21535 transaction failed 29189/-22, size 24-8 line 3014 [ 544.316197] binder: undelivered TRANSACTION_ERROR: 29189 [ 544.322141] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:47:04 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xffefffffffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x11) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) 15:47:04 executing program 4: r0 = timerfd_create(0x5, 0x800) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @multicast1, r2}, 0xc) prctl$PR_SET_TSC(0x1a, 0x3) finit_module(r0, &(0x7f0000000180)='\x00', 0x1) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = dup2(r3, r0) accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) ioctl$LOOP_CHANGE_FD(r3, 0x4c05, 0xffffffffffffffff) munlockall() [ 544.337897] binder: 21532:21535 unknown command 1268320255 [ 544.344153] binder: 21532:21539 transaction failed 29189/-22, size 24-8 line 3014 [ 544.355244] binder: 21532:21535 ioctl c0306201 200000c0 returned -22 15:47:04 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x8, 0x8, 0x1}) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:47:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:47:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x8003) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) socket$inet(0x2, 0x80000, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) sendfile(r0, r1, &(0x7f0000000080), 0x2bc4) [ 544.411564] binder: undelivered TRANSACTION_ERROR: 29189 15:47:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xfffffee2, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) [ 544.507914] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.541217] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.566717] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 544.572811] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572825] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572837] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572857] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572869] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572882] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572899] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572911] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.572924] hid-generic 0000:0004:FFFFFFFD.0054: unknown main item tag 0x0 [ 544.591583] binder: 21566:21567 unknown command 0 [ 544.591593] binder: 21566:21567 ioctl c0306201 200000c0 returned -22 [ 544.659538] hid-generic 0000:0004:FFFFFFFD.0054: hidraw3: HID v0.00 Device [syz0] on sy [ 544.670644] binder: release 21563:21565 transaction 494 out, still active [ 544.683739] binder: undelivered TRANSACTION_COMPLETE [ 544.710864] binder: release 21563:21573 transaction 496 out, still active [ 544.740916] binder: undelivered TRANSACTION_COMPLETE 15:47:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:47:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffefffbfff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 15:47:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x200, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0x2, 0x4d, 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 15:47:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f700000087ecf7c04d0d00826881ea89bdd8b88e62203500b2dfa6a6de8df17ac3ec37f79423cafb84c56c19723bbb4d1e057761ce676bd1c8020dbad06ddf09601f7d77dd76a50046f87852ce00164639a2e66545c32567634c0eb3b5545e6b31a712808a0143e65aa63d733b96047c0279605b881dc3bded8636211ac63cebc102b4231385a4ed7a4fd9c35c5a6e2d9384b88fb543b478c71497733d0e53a4cb55f3f085f819154464447288b02f6f76943899f985497b4494757f6744e169b3b123f038b2e1ef5ff63b8e236371b860db790a27bfb3bb9349fd5bbe62d059680a9ef6abacd4e4ca170bfe082233176d05e1fd31afa77811639a"], 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca4055e0bcfe47bf070") vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)="09ca369554f65e3b966a603c0103c377e0", 0x11}], 0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') syz_execute_func(&(0x7f0000000880)="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") 15:47:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x40) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:47:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") r1 = dup2(r0, r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x10) syz_execute_func(&(0x7f00000003c0)="f2af91930f0124eda133fa20430fbafce842f66188d0c4e18014d1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac462b99cbc0ce8000000c482310d46f449f216c863fa438036a966410f6c244dd68dbaa9f340ae955b955fc4c191fd19c401405c6bfdd70fc7f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa5b3609c0f01c4288ba6452e00005480") 15:47:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) prctl$PR_CAPBSET_DROP(0x18, 0x23) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x400, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x800, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000140)) ioctl$KDMKTONE(r2, 0x4b30, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x8, 0xfffffe7e) [ 545.932297] binder: release 21582:21584 transaction 498 out, still active [ 545.940043] binder: undelivered TRANSACTION_COMPLETE [ 545.968384] binder: release 21582:21588 transaction 500 out, still active 15:47:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca4055e0bcfe47bf070") vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)="09ca369554f65e3b966a603c0103c3", 0xf}], 0x1, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') syz_execute_func(&(0x7f0000000880)="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") 15:47:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='eth0}\x85\x00', 0x7, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 545.991563] binder: undelivered TRANSACTION_COMPLETE 15:47:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') write$P9_RLOPEN(r0, 0x0, 0x0) [ 546.051665] binder: 21601:21602 unknown command 0 [ 546.056554] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) 15:47:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'ip6gretap0\x00', 0x1}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) [ 546.102616] binder: 21601:21610 got transaction with invalid handle, 0 [ 546.113925] binder: 21601:21602 ioctl c0306201 200000c0 returned -22 15:47:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x210100, 0x10) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000040)=0xfffffffffffffff7) [ 546.143904] binder: 21605:21611 Acquire 1 refcount change on invalid ref 0 ret -22 [ 546.163612] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.192260] binder: 21601:21610 transaction failed 29201/-22, size 24-8 line 3228 [ 546.208865] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.231810] binder: 21605:21621 Acquire 1 refcount change on invalid ref 0 ret -22 [ 546.243178] binder: undelivered TRANSACTION_ERROR: 29201 [ 546.243479] binder: 21601:21602 unknown command 0 [ 546.243488] binder: 21601:21602 ioctl c0306201 200000c0 returned -22 [ 546.243662] binder: 21601:21610 got transaction with invalid handle, 0 [ 546.243727] binder: 21601:21610 transaction failed 29201/-22, size 24-8 line 3228 [ 546.245334] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245348] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245360] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245372] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245385] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245397] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245410] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245422] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.245434] hid-generic 0000:0004:FFFFFFFD.0055: unknown main item tag 0x0 [ 546.302821] hid-generic 0000:0004:FFFFFFFD.0055: hidraw3: HID v0.00 Device [syz0] on sy [ 546.366809] loop_reread_partitions: partition scan of loop0 ([ QVToC&]!?=bMwUQvjiD5<) failed (rc=-13) [ 546.376677] binder: undelivered TRANSACTION_ERROR: 29201 15:47:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x180) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000440)=0x19e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r1, &(0x7f0000001b00)=""/250, 0x50c7e716) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000480)=0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000200)=0x3c2) creat(&(0x7f0000000240)='./file0/file0\x00', 0x11) fcntl$getown(r0, 0x9) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000193) readv(r1, &(0x7f0000000580), 0x20d) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='ipddp0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) open(&(0x7f0000000040)='./file0\x00', 0x2014103f, 0x1) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:47:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xe8, r2, 0xa00, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7afb0e8a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x65c1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f12f1da5059b51"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="006340400000000000000000007df1b8ff68bbb50000000000000000000000000000000000e90400000000180000000000000008000000000000001e038b15b66f2dfcf08fc38cc725767bf278a5b9f34af5d5608a7df979962860a9fc7dc3dbda0b0d4e7138e820d98defced56682fe1c896a7b54e1d178b209424021a56f8d4b72dfc8e94de157d0225f83be74b43d2598828caf7e7cef580f51b03bfed2615629c063a78b2d9d2fecddc8fb838d8a4796f5be6ab95e21c9c0694c2eaf1890507ced6fb5e548433d157b1ef2ad", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="722a7cf800000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0x1, 0x2, 0x80000000000000, 0x1, 0x497}}) ioctl$RTC_WIE_ON(r1, 0x700f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) signalfd4(r1, &(0x7f0000000300)={0xd38}, 0x8, 0x0) 15:47:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="852a687700000100", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 15:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05620440"], 0x0, 0x0, 0x0}) 15:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) [ 547.506894] binder: 21633:21635 unknown command 1074029061 [ 547.512814] binder: 21633:21635 ioctl c0306201 200000c0 returned -22 [ 547.520242] binder: 21632:21634 unknown command -1524813839 [ 547.526285] binder: 21632:21634 ioctl c0306201 200000c0 returned -22 [ 547.547007] binder_alloc: 8629: binder_alloc_buf size 2305843009214015744 failed, no address space 15:47:07 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 547.557720] binder_alloc: allocated: 3528 (num: 132 largest: 32), free: 8760 (num: 1 largest: 8760) [ 547.568574] binder: 21632:21634 transaction failed 29201/-28, size 1729382256910592256-576460752303423488 line 3137 [ 547.597409] binder: 21640:21642 unknown command 0 15:47:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) 15:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xe9d8f8464352a46c, 0x0, 0x0}) 15:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'eql\x00', 0x200}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) 15:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 547.602529] binder: 21640:21642 ioctl c0306201 200000c0 returned -22 [ 547.615125] binder: undelivered TRANSACTION_ERROR: 29201 [ 547.632023] binder: 21644:21645 ioctl c0306201 20000040 returned -14 [ 701.656631] INFO: task syz-executor.5:2127 blocked for more than 140 seconds. [ 701.664236] Not tainted 4.4.174+ #17 [ 701.668641] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.676850] syz-executor.5 D ffff8801c1887aa8 24816 2127 1 0x20020004 [ 701.684318] ffff8801c1887aa8 ffff8800b79e97c0 3c10832b30544815 ffff8800b79e97c0 [ 701.692672] 0000000000000002 ffff8800b79ea000 ffff8801db71f180 ffff8801db71f1a8 [ 701.700755] ffff8801db71e898 ffff8800b7bcc740 ffff8800b79e97c0 ffffed0038310001 [ 701.708881] Call Trace: [ 701.711475] [] schedule+0x99/0x1d0 [ 701.716739] [] schedule_preempt_disabled+0x13/0x20 [ 701.723464] [] mutex_lock_nested+0x3c2/0xb80 [ 701.729617] [] ? lo_release+0x84/0x1b0 [ 701.735210] [] ? mutex_lock_nested+0x645/0xb80 [ 701.742080] [] ? __blkdev_put+0xbb/0x840 [ 701.747956] [] ? mutex_trylock+0x500/0x500 [ 701.753872] [] ? __blkdev_put+0x219/0x840 [ 701.760019] [] ? __blkdev_put+0x3c2/0x840 [ 701.766844] [] ? lo_compat_ioctl+0x140/0x140 [ 701.772936] [] lo_release+0x84/0x1b0 [ 701.778380] [] ? lo_compat_ioctl+0x140/0x140 [ 701.784461] [] __blkdev_put+0x461/0x840 [ 701.790262] [] ? __mutex_unlock_slowpath+0x25d/0x530 [ 701.797262] [] ? bd_unlink_disk_holder+0x450/0x450 [ 701.804320] [] blkdev_put+0x88/0x560 [ 701.809861] [] ? blkdev_put+0x560/0x560 [ 701.815532] [] blkdev_close+0x8b/0xb0 [ 701.821128] [] __fput+0x246/0x710 [ 701.826936] [] ____fput+0x16/0x20 [ 701.832467] [] task_work_run+0x202/0x2b0 [ 701.838279] [] exit_to_usermode_loop+0x14a/0x170 [ 701.844900] [] do_fast_syscall_32+0x7a9/0xa90 [ 701.851160] [] sysenter_flags_fixed+0xd/0x1a [ 701.857266] 3 locks held by syz-executor.5/2127: [ 701.862058] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 [ 701.871577] #1: (loop_index_mutex){+.+.+.}, at: [] lo_release+0x1e/0x1b0 [ 701.881010] #2: (loop_ctl_mutex#2){+.+.+.}, at: [] lo_release+0x84/0x1b0 [ 701.890786] Sending NMI to all CPUs: [ 701.894830] NMI backtrace for cpu 0 [ 701.898562] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.174+ #17 [ 701.905028] task: ffffffff82e151c0 task.stack: ffffffff82e00000 [ 701.911171] RIP: 0010:[] [] native_safe_halt+0x2/0x10 [ 701.919635] RSP: 0018:ffffffff82e07db0 EFLAGS: 00000246 [ 701.925193] RAX: 0000000000000007 RBX: ffffffff8319bf68 RCX: 0000000000000000 [ 701.932678] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff82e15a84 [ 701.940008] RBP: ffffffff82e07de0 R08: 0000000000000000 R09: 0000000000000000 [ 701.947591] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 701.955152] R13: ffffffff82e08000 R14: dffffc0000000000 R15: ffffffff82e00000 [ 701.963420] FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 701.971728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.977696] CR2: 0000000000c40000 CR3: 00000000b9779000 CR4: 00000000001606b0 [ 701.985099] Stack: [ 701.987597] ffffffff81020b16 ffffffff82e00000 0000000000000000 ffffffff82e08000 [ 701.995363] dffffc0000000000 ffffffff82e00000 ffffffff82e07df0 ffffffff81022d50 [ 702.003081] ffffffff82e07e08 ffffffff811eb4c8 0000000000000000 ffffffff82e07ed0 [ 702.011128] Call Trace: [ 702.013717] [] ? default_idle+0x56/0x3d0 [ 702.019560] [] arch_cpu_idle+0x10/0x20 [ 702.025410] [] default_idle_call+0x48/0x70 [ 702.031566] [] cpu_startup_entry+0x6d1/0x810 [ 702.037931] [] ? complete+0x18/0x70 [ 702.043309] [] ? call_cpuidle+0xe0/0xe0 [ 702.049026] [] ? schedule+0xab/0x1d0 [ 702.054479] [] rest_init+0x190/0x199 [ 702.059953] [] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 702.068580] [] start_kernel+0x64a/0x67e [ 702.074303] [] ? thread_stack_cache_init+0xb/0xb [ 702.080897] [] ? early_idt_handler_array+0x120/0x120 [ 702.087714] [] ? early_idt_handler_array+0x120/0x120 [ 702.095508] [] x86_64_start_reservations+0x29/0x2b [ 702.102358] [] x86_64_start_kernel+0x137/0x15a [ 702.109095] Code: 2e 0f 1f 84 00 00 00 00 00 fa c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 0f 1f 40 00 66 [ 702.128732] NMI backtrace for cpu 1 [ 702.132672] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17 [ 702.140027] task: ffff8801da6c4740 task.stack: ffff8801d9ef0000 [ 702.146521] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 702.155560] RSP: 0018:ffff8801d9ef7c88 EFLAGS: 00000046 [ 702.161151] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 702.169545] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 702.177432] RBP: ffff8801d9ef7cb8 R08: 0000000000000018 R09: 0000000000000000 [ 702.184826] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 702.192469] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 702.199840] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 702.208265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.214650] CR2: 0000000001f82d00 CR3: 00000000b9779000 CR4: 00000000001606b0 [ 702.223036] Stack: [ 702.225190] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 702.232940] 000000000001b6c0 0000000000000008 ffff8801d9ef7cd8 ffffffff81092bee [ 702.240660] 0000000000000008 ffffffff82924260 ffff8801d9ef7d30 ffffffff81ab8252 [ 702.249166] Call Trace: [ 702.252040] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 702.258598] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 702.266487] [] ? print_lock+0xa8/0xab [ 702.272093] [] ? irq_force_complete_move+0x330/0x330 [ 702.279034] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 702.286320] [] watchdog.cold+0xd3/0xee [ 702.291944] [] ? watchdog+0xac/0xa00 [ 702.297352] [] ? reset_hung_task_detector+0x20/0x20 [ 702.304264] [] kthread+0x273/0x310 [ 702.309679] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 702.316532] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 702.323070] [] ? finish_task_switch+0x1e1/0x660 [ 702.329658] [] ? finish_task_switch+0x1b3/0x660 [ 702.335994] [] ? __schedule+0x7af/0x1ee0 [ 702.342391] [] ? __schedule+0x7a3/0x1ee0 [ 702.348234] [] ? __schedule+0x7af/0x1ee0 [ 702.353966] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 702.361190] [] ret_from_fork+0x55/0x80 [ 702.366869] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 702.373610] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 702.392815] Kernel panic - not syncing: hung_task: blocked tasks [ 702.399045] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17 [ 702.405527] 0000000000000000 73386f8ed0197a05 ffff8801d9ef7c60 ffffffff81aad1a1 [ 702.413709] ffff8800b79e97c0 ffffffff82872120 dffffc0000000000 0000000000000003 [ 702.421768] 00000000003fffa2 ffff8801d9ef7d40 ffffffff813a48c2 0000000041b58ab3 [ 702.429971] Call Trace: [ 702.432668] [] dump_stack+0xc1/0x120 [ 702.438066] [] panic+0x1b9/0x37b [ 702.443080] [] ? add_taint.cold+0x16/0x16 [ 702.449114] [] ? find_next_bit+0x44/0x50 [ 702.455000] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 702.462641] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 702.470363] [] watchdog.cold+0xe4/0xee [ 702.475901] [] ? watchdog+0xac/0xa00 [ 702.481289] [] ? reset_hung_task_detector+0x20/0x20 [ 702.488218] [] kthread+0x273/0x310 [ 702.493556] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 702.500452] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 702.506775] [] ? finish_task_switch+0x1e1/0x660 [ 702.513390] [] ? finish_task_switch+0x1b3/0x660 [ 702.519716] [] ? __schedule+0x7af/0x1ee0 [ 702.525429] [] ? __schedule+0x7a3/0x1ee0 [ 702.531142] [] ? __schedule+0x7af/0x1ee0 [ 702.536943] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 702.544126] [] ret_from_fork+0x55/0x80 [ 702.549826] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 702.556944] Kernel Offset: disabled [ 702.560977] Rebooting in 86400 seconds..