ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7f4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2363.503121] binder: undelivered TRANSACTION_ERROR: 29201 03:40:31 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:31 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000180)={0x6, "0f12ed46f43bd8769fab231b65d1ea91b51f91f0d11ef9fbbf52b7d4646a9ee8", 0x0, 0x4f, 0x8001, 0x10, 0x3}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x880, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r2, 0xf, 0x3}, 0x10) [ 2363.710456] binder: 3503:3512 got transaction to invalid handle [ 2363.733219] binder: 3503:3512 transaction failed 29201/-22, size 0-0 line 2896 [ 2363.752703] binder: undelivered TRANSACTION_ERROR: 29201 03:40:32 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:32 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x256e, 0x10000) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)=@canfd={{0x0, 0x80000, 0x20, 0x9}, 0x23, 0x2, 0x0, 0x0, "19ccdca2f319f2253c4dca416d75ea8502ffdd7cf3c6282d8b60a210773d3d0514edf0748a7c8424290307fdace6404444937ec030647defef19fb3d211d372d"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x4, 0x7fffffff0, 0x1ff, 'queue0\x00', 0x6}) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:32 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 03:40:32 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff1000/0x9000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:32 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) syncfs(r0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xa5, 0x2, 0x1, 0x7, 0x0, 0x0, 0x2, 0x1, 0x4, 0xc2, 0xef91, 0xfe0000, 0x7ff, 0x4, 0x7ff, 0x800, 0x6, 0x80000001, 0x80, 0x7, 0x5, 0xfffffffeffffffff, 0x0, 0x400, 0xffffffff, 0x100000, 0xfffffffffffffffe, 0x80, 0x8001, 0x2, 0x1e62, 0x1, 0x2, 0x7fff, 0x401, 0x8, 0x0, 0x7, 0x5, @perf_config_ext={0xc5, 0xfffffffffffffffb}, 0x8000, 0x9217, 0x200, 0x0, 0x10001, 0xb003, 0x8000}, r1, 0x10, 0xffffffffffffffff, 0x2) 03:40:32 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2364.303791] binder: 3519:3523 got transaction to invalid handle [ 2364.310000] binder: 3519:3523 transaction failed 29201/-22, size 0-0 line 2896 03:40:32 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x4, 0x7, @value=0x1}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:32 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x4000000) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x101a01) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendto$unix(r1, &(0x7f0000000100)="2f80068d25b535748542aef5d22e1ca7edbf1ff3f6b1d0d8", 0x18, 0x5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:32 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) bind(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e23, 0x80000000, @empty, 0x256}}}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) 03:40:32 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) flistxattr(r1, &(0x7f0000000180)=""/187, 0xbb) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2364.431299] binder: undelivered TRANSACTION_ERROR: 29201 [ 2364.471653] net_ratelimit: 16 callbacks suppressed [ 2364.471659] protocol 88fb is buggy, dev hsr_slave_0 [ 2364.481727] protocol 88fb is buggy, dev hsr_slave_1 03:40:32 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "036e3c93d5c10d3526058718ff2a91ba"}, 0x11, 0x1) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000100)={0x4, "803e5de4154cf69b6e05eb7d93894a07f5de9a91969b0e2c4fd8b206c63ad524", 0x3, 0x1}) 03:40:32 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2364.551638] protocol 88fb is buggy, dev hsr_slave_0 [ 2364.551663] protocol 88fb is buggy, dev hsr_slave_0 [ 2364.556689] protocol 88fb is buggy, dev hsr_slave_1 [ 2364.566930] protocol 88fb is buggy, dev hsr_slave_1 [ 2364.572095] protocol 88fb is buggy, dev hsr_slave_0 [ 2364.577211] protocol 88fb is buggy, dev hsr_slave_1 [ 2364.692249] binder: 3556:3564 transaction failed 29201/-22, size 0-0 line 2896 [ 2364.730025] binder: 3556:3564 transaction failed 29201/-22, size 0-0 line 2896 [ 2364.738673] binder: undelivered TRANSACTION_ERROR: 29201 [ 2365.041627] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.046741] protocol 88fb is buggy, dev hsr_slave_1 03:40:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:33 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x20080) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:33 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:33 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200200) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x81, 0x6, 0x7, 0x4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0x1}, &(0x7f0000000300)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x7, 0x6063) 03:40:33 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x400000) pwrite64(r0, &(0x7f0000000180)="5a051e058257cc761b8dcf4071df6b17481bba177e655156cf20f6cf6f8d65e2813a6900a1b298dc6ce44988c280498ff38e99d648c3f50ee99496346e6145ebeb2f7a38f492cadfa8d60d9199d7b65041b2b509580fd43a66506dcf4f57669fe9e7f41399b90640754ae96898a4c97c1e85b1d57f48347fce973aea8d2f6acf93ee0e9b92cc938bbba56dbc890895618d4c1b0ed4b86b5718c81e88ff1ce4202d91518e6be14f956f2fcbb226ee4b489319b8e0e0c9178a60d1a154e1bf3b5f2ab634fd840837c7b6d4d9cef51036f83e1793bfc252", 0xd6, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:33 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x0, 0x1, [0x4200000000000, 0x10000, 0x10000, 0x3ff, 0x8, 0x3, 0x4, 0x1]}) 03:40:33 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xba89, 0x1) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000280)={0x4, 0x1, 0xffff, 0x40, 0x5, 0x3}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r2 = request_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="333e3adb140f62a917ecf8c71962aa4ab7e2e9a4aefec30aa1281bbfc75818474a3cae966694fca8f717c022b20a19a37c7c56f92e66781ecbef9aee2cb0fd", 0x3f, r3) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000003c0)={0xd537, 0x9, 0x0, 0x7fff, 0x7, 0x7fffffff, 0x6, 0x3, 0x3, 0x3ff, 0x7f}, 0xb) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000380)) 03:40:33 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)=0x2, 0x4) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r2, 0x4) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x103, 0x1, {0x9c27, 0x5, 0x3, 0xf87}}) [ 2365.420127] binder: 3574:3581 transaction failed 29201/-22, size 0-0 line 2896 03:40:33 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0x54, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000180)=""/84}, &(0x7f0000000100)=0x78) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x37) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) rt_sigtimedwait(&(0x7f0000000000)={0x9}, &(0x7f00000002c0), &(0x7f0000000080)={0x0, 0x989680}, 0x8) [ 2365.468995] binder: 3574:3581 transaction failed 29201/-22, size 0-0 line 2896 03:40:33 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:33 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x4, [], &(0x7f0000000140)}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 2365.679959] binder_transaction: 4 callbacks suppressed [ 2365.679966] binder: 3606:3609 got transaction to invalid handle [ 2365.714316] binder: 3606:3609 transaction failed 29201/-22, size 0-0 line 2896 [ 2365.766793] binder: 3606:3609 got transaction to invalid handle [ 2365.812520] binder_release_work: 4 callbacks suppressed [ 2365.812526] binder: undelivered TRANSACTION_ERROR: 29201 03:40:34 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:34 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:40:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000002c0)=""/86, &(0x7f0000000080)=0x56) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000003c0)={0x3, 0x0, 0x100000000, [], &(0x7f0000000340)}) 03:40:34 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000280)={0x0, @aes256}) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3ff, 0x10000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3d}, &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0x2000000000000}, 0x1, 0x2, 0xfffffffffffffd81, {0x4, 0x7}, 0x1, 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r2, 0x3ff, 0xbffffffffffffffe}, 0xc) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, r0}) semget$private(0x0, 0x0, 0x88) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r4, 0x80000, r0}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) [ 2366.555361] binder: 3620:3624 got transaction to invalid handle 03:40:34 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x81}}, 0x9, 0x4, 0x7, 0x4, 0x1}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x4}, &(0x7f0000000380)=0x8) r3 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r2}, &(0x7f0000000400)=0x8) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:34 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xa5, 0x10200) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000000)={0x3, 0x4000000001, 0x1000, [], &(0x7f0000000080)=0xfffffffffffffffe}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xb) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x8, 0x80, 0x10001, 0x8, 0x3}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000300)=r2, 0x4) 03:40:34 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2366.628521] binder: 3620:3624 got transaction to invalid handle [ 2366.628667] binder: undelivered TRANSACTION_ERROR: 29201 03:40:34 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x844b, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x8, @sdr={0x4973355b, 0x7}}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000500)={@empty, 0x7d, r2}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xa1280}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x201, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x14, 0xfffffffffffffffe, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000100)) syz_open_pts(r4, 0x0) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x0, 0x35, 0x100000000, 0x7fffffff}, 0x6) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r5, 0x608, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x15c, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4) [ 2366.684807] binder: undelivered TRANSACTION_ERROR: 29201 03:40:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:34 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x3, 0x3, 0x9, [], &(0x7f0000000080)}) [ 2366.822939] QAT: Invalid ioctl [ 2366.842777] QAT: Invalid ioctl [ 2366.868648] binder: 3655:3662 got transaction to invalid handle [ 2366.946837] binder: undelivered TRANSACTION_ERROR: 29201 03:40:35 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:35 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = socket$isdn(0x22, 0x3, 0x35) r2 = semget$private(0x0, 0x3, 0x424) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x2, 0x849, 0x7f, 0x5, 0x2, 0x96]) bind(r1, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000002c0)=""/143, 0x8f}], 0x2) fcntl$setstatus(r1, 0x4, 0x40400) 03:40:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:35 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@remote, @rose, @netrom, @rose, @bcast, @null, @null, @netrom]}, &(0x7f0000000000)=0x48) r2 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x0, 0x2) write$sndseq(r2, &(0x7f00000006c0)=[{0x100, 0x1ff, 0xaf26, 0x6, @tick=0x7, {0x2, 0x10001}, {0x61a1, 0x6}, @note={0x0, 0x1d, 0x3f, 0x100000001}}, {0x9e28, 0xae, 0x0, 0x9, @time={0x0, 0x989680}, {0xfffffffffffffff7, 0xad30}, {0x77ec, 0x8}, @raw32={[0x8, 0x2]}}, {0x7, 0x1000, 0xfffffffffffeffff, 0x5, @tick=0x7, {0x1, 0xfffffffffffffc01}, {0x1, 0x7}, @time=@time={0x77359400}}, {0x52, 0x7fffffff, 0x28f0, 0x20, @tick=0x7, {0x3, 0x3}, {0x78f, 0x5}, @ext={0xed, &(0x7f00000004c0)="3e329ad8bd97a3aa03e4a290e32e09af23dd48e51087f4dc5ac00c1d18a0e13250e8b03e32ce86dca01bee99e421560fec5d0972ead948fd59a32b6a3259147aa2510ddb7d7f2ed361b8c2237239b0ed702fa16173e5b8bebe880f8224a559f045738aeafb3e80fa6ac294a4624793f2e09e06aeef7cfbdf8ab863fdc849699b85ed27bc1358b17afd02c330ab2eb42ca562d566a165cba1f534a41571ad179c3908518c1216e13c12e052c4f2d1df943c40efdd3dde144b2222a88c54b8690e5f935a0e613a477348bdd0e8854660c11450b3340c0c7108ea720d10a657e2339491ec91108f762a2e54fbfd15"}}, {0x6, 0x200, 0x7ff, 0x43, @tick=0x40, {0x81, 0x100}, {0x1f, 0x4}, @note={0x7fff, 0x400, 0x5, 0x5, 0x3092}}, {0xffffffffffffffff, 0x3, 0x0, 0x1, @time, {0x1ee, 0x2}, {0x7, 0x9}, @ext={0xc2, &(0x7f00000005c0)="8ab19ddb01e778bbf45e3b248451592182cceb0e79c696904654abf3ab22edbabe41f31c6213942907b21acd2e8b8d264b9e0366aac41cc63e5ac95b2aa7f99626710f8be0e0cd7856ef60eb3aa07f2230eb234f61f40e1700e4773bffaa2fbe49344789a424890dddcd6221737ce6c69cd14db813eebe71822b7dbc46bff32986f8212db246bb7de8dc9540f2b6e80221198057775b0ddc27a3da49114680de4b1b0e350a5cb9fc31a3db845c2abed8095975e2905596b6ea217772b4124834d26e"}}, {0x8, 0x3, 0x9, 0x5, @tick, {0x0, 0x4}, {0x4, 0x118d}, @addr={0xfffffffffffffeff, 0x3}}, {0xffffffffffffb6fd, 0x1ff, 0x9, 0x2, @time={0x77359400}, {0x100000001, 0x1ff}, {0x3, 0x9}, @addr={0x1f, 0x91a}}], 0x180) r3 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='\x00', 0x0) r4 = request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='/dev/video#\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x4) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:35 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:35 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x3, 0xffffffff00000001, 0x2, [], &(0x7f0000000140)}) fcntl$setstatus(r0, 0x4, 0x46000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0xffffffffffffb6e1, 0x7fff}}) 03:40:35 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000002c0)=""/4096) 03:40:35 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x2, 0x2, [], &(0x7f0000000140)=0x29}) 03:40:35 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x111440) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xa5, 0x4, 0x7ff, 0x100000001, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7ff, 0x7, 0x3}, &(0x7f00000001c0)=0x10) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x5, 0x0, [], &(0x7f0000000140)}) [ 2367.633146] binder: 3682:3691 got transaction to invalid handle [ 2367.641782] binder: undelivered TRANSACTION_ERROR: 29201 03:40:35 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000300)=""/127, &(0x7f0000000380)=0x7f) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @initdev, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r2) 03:40:35 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:35 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x0, 0x0) fdatasync(r0) [ 2367.861422] binder: 3711:3715 got transaction to invalid handle [ 2367.904470] binder_transaction: 5 callbacks suppressed [ 2367.904484] binder: 3711:3715 transaction failed 29201/-22, size 0-0 line 2896 [ 2367.951753] binder: undelivered TRANSACTION_ERROR: 29201 03:40:36 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080)=0x7, 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x4003, &(0x7f0000000040)=0x9, 0x7, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:40:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000080)=0x68) 03:40:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x338d, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000040), 0x0, 0x2}, 0x20) 03:40:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:36 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2368.719466] binder: 3730:3734 got transaction to invalid handle [ 2368.751340] binder: 3730:3734 transaction failed 29201/-22, size 0-0 line 2896 03:40:36 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) mkdir(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0) 03:40:36 executing program 0: io_setup(0x3f, &(0x7f0000000000)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000d83f60)=[{}], 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(r0) 03:40:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r2, 0xa91e}}, 0x18) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000380)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000680)={0x5, 0x9, 0x1000, 0x6, 0x5, 0x86f5, 0x6, 0x2, 0x2, 0x1f, 0x0, 0x8001}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0x9d8, "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", 0x8000003a, 0x4000051f8, 0x9, 0xfffffffffffffffb, 0x1000000000003, 0x200, 0x6, 0x1}, r4}}, 0x128) fsetxattr$security_selinux(r3, &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:ipmi_device_t:s0\x00', 0x23, 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:36 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000008447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000200)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000240)=r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xbb0000, 0x9, 0x5, [], &(0x7f0000000080)={0x990a72, 0x81, [], @p_u32=&(0x7f0000000280)=0xf5aa}}) prctl$PR_SET_TIMERSLACK(0x1d, 0x9a0e) [ 2368.786129] binder: undelivered TRANSACTION_ERROR: 29201 03:40:36 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x1a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:36 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0xffffffffffffff80, 0x2, [], &(0x7f0000000140)}) 03:40:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000140)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x0, 0x0) [ 2369.003007] binder: 3764:3772 got transaction to invalid handle 03:40:36 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:36 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x88080, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000100)={@remote, @remote}, 0x8) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1a, 0x4, 0x0, "a3ef69b25ec053a2f06c2284088b28e85f6c4309d1bbebfb8943c876755f897c118d1b11d71a198f4074a66a95c0661343c67a1f86bde8207acffa3880fcfb38", "39b71f85000e48dd69cb463fbde1849ab5765688430a04e127fc86d323c78485cf58a2a996c511a8a91d93c41eb0dceb7fd391ec0d1f8fb1d9a3f78f21db43b7", "afd55ca17456954e1cb0683e9fdf47a16453ea10a7e362f60669465f7bf7ce3f", [0x3, 0x40]}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2369.071895] binder: 3764:3772 transaction failed 29201/-22, size 0-0 line 2896 [ 2369.166122] binder: undelivered TRANSACTION_ERROR: 29201 [ 2369.831641] net_ratelimit: 24 callbacks suppressed [ 2369.831649] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.841789] protocol 88fb is buggy, dev hsr_slave_1 03:40:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:37 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x3) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0xfef, [], &(0x7f0000000080)}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x200000) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:40:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2402400, 0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:37 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:37 executing program 4: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) [ 2370.089912] binder: 3803:3806 got transaction to invalid handle [ 2370.115819] binder: 3803:3806 transaction failed 29201/-22, size 0-0 line 2896 [ 2370.129819] binder: undelivered TRANSACTION_ERROR: 29201 03:40:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x542dd926, 0x5, 0x7, 0x6}, {0x32, 0x6, 0x80, 0x8}, {0x3, 0xfff, 0x3, 0x401}, {0x4, 0x100000000, 0xf6}, {0x55c8bc5b, 0x200, 0xffffffff7fffffff, 0x557f}, {0x2, 0x470, 0x10001, 0x7f}, {0x401, 0x5, 0xfb}, {0x3, 0x164, 0x5, 0x6}]}) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:38 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:38 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x11, 0x1000, &(0x7f0000000180)="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"}) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) [ 2370.401500] binder: 3826:3832 transaction failed 29201/-22, size 0-0 line 2896 [ 2370.425154] binder: undelivered TRANSACTION_ERROR: 29201 03:40:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x2}, 0x28, 0x0) [ 2370.711648] protocol 88fb is buggy, dev hsr_slave_0 [ 2370.716780] protocol 88fb is buggy, dev hsr_slave_1 [ 2370.791629] protocol 88fb is buggy, dev hsr_slave_0 [ 2370.791652] protocol 88fb is buggy, dev hsr_slave_0 [ 2370.796683] protocol 88fb is buggy, dev hsr_slave_1 [ 2370.806955] protocol 88fb is buggy, dev hsr_slave_1 [ 2370.812117] protocol 88fb is buggy, dev hsr_slave_0 [ 2370.817179] protocol 88fb is buggy, dev hsr_slave_1 03:40:38 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) fallocate(r0, 0x10, 0x1000, 0x4) 03:40:38 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = getpgid(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xffffffffffffff5f) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x1000, 0x480100) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x402180) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) 03:40:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100008447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x2, [], &(0x7f0000000100)=0x101}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x9, 0xf, 0x4, 0x0, {0x0, 0x2710}, {0x7, 0x1, 0x7fffffff, 0xb6, 0x2, 0x7, "29ab5659"}, 0x8, 0x3, @userptr=0x100000000, 0x4}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) fcntl$setpipe(r0, 0x407, 0x4) 03:40:39 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) 03:40:39 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b805000000b90e8000000f01c1f080a4b000600c00000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r5 = accept(r3, &(0x7f00000001c0)=@xdp, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0008200006001f00"], &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000002c0)={r6, 0x0, 0xffffffffffffffff}, 0x8) 03:40:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x82, 0x0) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3f, 0xfffffffffffffff9, 0x5}, 0x6) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) mkdirat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x1ff) fstatfs(r0, &(0x7f0000000300)=""/226) [ 2371.238880] binder_transaction: 1 callbacks suppressed [ 2371.238888] binder: 3855:3866 got transaction to invalid handle [ 2371.265812] binder: 3855:3866 transaction failed 29201/-22, size 0-0 line 2896 [ 2371.303726] binder: undelivered TRANSACTION_ERROR: 29201 03:40:39 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0xfffffffffffffdae}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000002c0)={0x0, 0x0, [0xfffffffffffffed6, 0x9, 0xfffffffffffffffe, 0x3]}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)={r2}) 03:40:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:39 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x20, 0xf16, [], &(0x7f0000000140)}) 03:40:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0xa00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f, r0}, 0x68) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) ioctl$TIOCCBRK(r2, 0x5428) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400202, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x5, 0x6, 0x4, 0x31, 0x6, 0x80000000, 0x7a6, 0x7, 0x597a, 0x1f}) [ 2371.660147] binder: 3891:3896 got transaction to invalid handle [ 2371.702584] binder: 3891:3896 transaction failed 29201/-22, size 0-0 line 2896 03:40:39 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = creat(&(0x7f0000000000)='.\x00', 0x2) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b", 0xd3) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) [ 2371.758288] binder: undelivered TRANSACTION_ERROR: 29201 03:40:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:40 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000080)={{0x7, @addr=0x5}, 0x8, 0x22, 0x59367fb8}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x8001000, 0x6, 0x1}) 03:40:40 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:40 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x7) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r3 = add_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9e06343d88ab65e4", 0x8, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:40 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3, 0x9, 0x5, {0xf, @pix_mp={0x4, 0x9, 0x3234564e, 0x7, 0x5, [{0x3, 0x2}, {0x6, 0xfffffffffffffff7}, {0xd24}, {0x400, 0x100000000}, {0x3, 0xffffffff}, {0xa476, 0x1f}, {0xc2cd, 0x4}, {0x7, 0x9bd}], 0x3ff, 0x5, 0x1, 0x3, 0x6}}}) 03:40:40 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000080)=0x7) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:40 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8443, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2372.393222] binder: 3919:3929 got transaction to invalid handle [ 2372.431947] binder: 3919:3929 transaction failed 29201/-22, size 0-0 line 2896 03:40:40 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a", 0xa3) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:40 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2372.475535] binder: undelivered TRANSACTION_ERROR: 29201 03:40:40 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f00000002c0)={{}, [@remote, @default, @remote, @netrom, @null, @default, @default, @netrom]}, &(0x7f0000000000)=0x48) bind(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x3, 0x2, 0x1, 0x3}}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:40 executing program 4: io_setup(0xac, &(0x7f0000000080)=0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x200600) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000480)={0x0, @speck128}) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xd3e, r1, &(0x7f0000000140)="19db9b046f4cd672084c6ae2e48115fc1e039b9b17083159a7becd22ef2aa9842026123978e645e812914b1c66c14a98efda5db3dda275f0d786fab81df4adbb7d44cf7628fd12a7c7f592d81b327fbc5541b9583fbb4c50b4e074700c160584d1b30c83edefd76a279ac906239203398e5d6cd3825c16080968677c3234a74b362b47f0f2eec275e8a7e13d5f3a9f50", 0x90, 0x10001, 0x0, 0x1, r2}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f00000004c0)="1b2825567464687558084b35160978f22ac0e754a07fc2cd42b198d98318203c8aa38a29a13b6a6fd73d59390fc950d48ab95d18687a0efd2f3f9553bab053dae2a367f41048a0363827c3003a9d9db1a25006eda4f01476d9596074a090fd76a6f6692a9151f143", 0x68, r1}, 0x68) r3 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000340)) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x800000002, [], &(0x7f0000000000)=0xb07a}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000005c0)) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) [ 2372.645764] binder: 3945:3950 got transaction to invalid handle [ 2372.718135] binder: 3945:3950 transaction failed 29201/-22, size 0-0 line 2896 [ 2372.783759] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) munlockall() 03:40:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:41 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:41 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x9, 0x5, [], &(0x7f0000000140)}) 03:40:41 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) pwritev(r0, &(0x7f0000002940)=[{&(0x7f0000000400)="ee0039a170c2d437c4e0579e6aef64dbfdb22dc36ff7987864e9dce4eb9ff07657fa0a62031ed4acbda3c5b4fee556d679ea6ec6e1ca3abbfc75829b21f0f1a547d5cf491f75a7322fc03f212690d8d187616b1f2db30ece52f8144a1f57143c07571c6f09f2234dd2c949a60b494a6e2a05fbb2ed631de400bb8d6b762bfaaaecaa9bef31e324b0c9789e75915c8a1421e897f530b298bda7030d06522452969ee5b3b4e0bafa3d", 0xa8}, {&(0x7f00000004c0)="6bb7b09e50496e8405f96dcd927c7670a65dbbf8557b6c1923e30151d1c5bd76de5a1c6ff284fd44ffc7cc714aae73bcb5b67d356d2d81a0022fae0fd299dd2afd1aa29da404af431bb3434552cdf05e7e1c2182fcff610ad0df0ecac84e7a042de9450da9b98fab4e86138450eecba02f0d8f6305df76e91f5db0c4c1e3d49feb56f194a792a83ee4fffd33f259a1295733ba0f03a33e9bf1b74c19e6d7730986dd932d37b01e7e28977b388a55eb82bd80b22c640bf8ba5ad33b22e4b7c7617fbb0d3f265964e9554f0a006f21d7b7b1eb58e22a83dd704144e55a3647d8829eacc7dc31a704739baa97ce888eaed9df1e59e15fedaf", 0xf7}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="146a259d3030bb47c44f3eaeaded0c7f3cf5640e5b830d8888b648ad290dc49a455f6e32a35486542b48ade07eedbc8767cbb4276ea7ab216c4f9b0a76664a9de9f011e12c5fbd51cc27fab8178ce131b2e39271a5b51f022525757037fb83f3d5e2b4f575e8dbf46881d44854860e545518b3ea2548a5947efe3a8d4a687be39d4c519646d6c20ca89cb7e46253e36f2d73b2407a345f33bc63d98c9a8b999de192813d7e7a053fb98c4407115e7d87e0019acd60fe5b714b933a32e8ebd456626d712d66c5ffdeb18c0535728d6c7f6984e8d882748435431a5733fb8c5b1423aa5f2fd4f16b801634256ea45dcc5589fd1d", 0xf3}, {&(0x7f00000016c0)="2f93e5c750bbf7cc81a9dfcfbd0434e76116ca997f5e7a0564fef02302aa9c015e1cdc2c85822bd01ebe99505cbb4734bcfe728a6351f9ecc240d4a1f7179b072d1105bc5a541306d039214e8141dafeb347d6e24386fbe3d30bb48c9e05fdd153519f5fd730f2450d6efc37e5fc6acbc4d7bb78d2716651f9cb73cf5f7b2d3bbdf350c43a6fc6570f690d30e5db2b1145aa605ed3b5413095dbc09143ee841b5c7e19122043193c347f5d62de6b2a209e306bca6ed08402d9696d550c71ef44818eaf885cf1f1d4b473dc7218f4", 0xce}, {&(0x7f00000017c0)="7c054de7e306608bae30e2c38d5b606490ee701691a766a4e69c835e68e62923f80a54a4cb70884829f4c88ce911f3be6a2ee1456a75724051bd92f6e2a19dbe724b0e521ac6dfe8e0e1ed51a67dd6ad67f8a9f3d6c1f4a24928a4eb45c15581f0046dcf533f891b41bdd83198352b3d93352452d3faaa9ce9c53be491eb6449ec136425181c57df3e7b8a0303a5f56685b5bca99fd7d9d7e876da29cf35b91817a0dd0e841efec54a636146417f78534c8e0325fb7f2aec3e2ae10202d0b490e83cfda5b95d82df7635c2585383d733b1f9fc68491b8ccd7fccd273704e426c28a613cb38cffa6ee662f0d484204a23c455e03aa5cc07f5ae4b224b8259cb39e91083d1b178ff28098b8f5c3d3d42c9357b40db314b814329fa827809631d6c0c2da65478e58ad5d25a4fc3d89d455de05ce4e03e56092529bc75050b63163378f772e956c8f2f92052576057e1fd0f090686403a059b364b4e521ab86c7cb45ef3fddf66632e740cce117d6dba458ac50a5ca0cbe09a9e3eec1c07058aa1ac53c75b92f731c60025e7e2f0e35f1af72fb463201de49e01be0e388f37eb070c311e341b24a53cd7c70b7984c6d094d5f444255f39553dbc5e9abf1d8e753b76c6d6f2551fe7416bc1df21f89d0afdc595a49751b9bf2ebc00c5b6043252371e09933c82642def98820c6ad77041a1930c887d44be7edd686b1d48ec3f4fe521de3c2851a1f7c5d3697eab9d79bd16be8aad4af397088769363a716b884f82ed2a934ef51d62e15c04ba3e71fd24bf9c861f4eea6eb5190a333438baeef93b76c9aacab465403072937fc9e6f550e4a4e2015364da2a7d66d6936b4cfc8c977a1457ee69469b9149662e11e07518d10da3ce098e86cc0714108f2c7a6397de3e951aaf28105329c49207790518f8480cda350dc5086a7118bdb8dec592801d8d433d067ee6fccd7fe3ab5fdf0c0d986f04da110adc184785006bf6bf461b5284da6213799fc3707e7a36cb5853b9b3ceacea29c550c9842b30fdc4b2e40154ead8facaaf6e109e6d378bc8baaa28b9bcd3c63ddc5a3e04d70f5d363a0d295ab933e9960262bc4327cbcd64896bb7a232afe16223d0cbe404fd4a80ae6e2d4dfefb875304511ae8fe9ef892c5ef608233e726fb9811a9306028d72daebf3f91e84299ea86ba6924ff6d2309bddb381cffcba9e570806d36debeb6ca4b3fc089cdb466d204ddda5386f165f0a8893f56ccf5553220b4c8dfba44e8a71a449385dd3a4a23827311a2d96e60530517a9f5be9a79fbed7f1a795280080d85682e2cc0034d1e638efa63916a151835a6908f2793c97d4183823219cd36c6174c89c2f76202ba786e0b8c535312e864798ba6178f3703de5a3a61af6b973ed1e2f4650696077c21f716caa91313eda712fff9839e3c1be7940d125d7b701bffa6b135eada08e162819716cce388e2fc0ba1ff4ffd5949cf589f79a2c18beaf2ffa72d6909a137810b1237a5e41f431db86bf2e3a392d90cc47fd6e9c355fdc517267e8cc724a960c50142b36d93af9ef061d29d70c0dda80497d1901cb510480cc159fb3cf3fb866746409f5c6a544308567f137bff59690d65438ac163d179f70c2c8060444a4f829625e4758259a43e04300bfc893492378c1bd60ea71b41fe531fbe68642e602daf8d0dd24aee02d54dd30ec156b2f88e0b603925d56214c23e0aa47e8133c4dd14cb9948de163c301d9665c66c914044751f9de3808c4cfc57ca3b313e5f133283fef3b6e59d56ca2b01403ca3cd858b682e8761f1d88028308d3cc0a5ba01e3628cf509db50270d3e2139c5ec13bd7ac81d1638da4728185d26dab111d3e893c91ef4d98de33eabb275da533267874b8f3e67a2a8d2281f0d55cadd6d41481d63ed0e748c10a7edd1e252520500049ecad85110a3cebcc84b1a068607c33f6548bf9d5d813e7cffaff309dd9f17cc524c4a3deadd18c27056557a9bcf03aa84f563e2825328c0d97a4013a75bdc5cf9b3f74ebba33119e4d0ed72a5e610eefb5b8b88fa1764f67a1b53eb684ed4afce648d4bc39d952ec35e1b8774945b90d2e292529f157eec54180b00f9b0a1e78dbccf1082eff95bd0b6fad1afe9ee0552e74f8efd3785a4f6f21564b52d2cde2eacd67ffbc46a0685f6ec048d5a065b80effa999d79277f10b85820063ee73d84167b5a2ccff39cb0cf36833b7f6481c9071c7129203fc1b4be75b612b4f02d22f478898c175ec63211b90be2d0545e9e1539517b904fe4271890f406f854d5552fc0687e8f8cb65923bcbd5a3367819cb496bcdaf3a0d95ec89b1860d0d71bdfdfea812948733e232d18fcab142023df89f12f5d2efbd12e6339f80c75dbc72a5adf2738801840e75706073751bca15d3c6764e16a42227ab76d5e33838f1586cceba83e0a5f71b7d3168fdf64d43cf50e04eab617e19e8543729687cefd69f5166c53b6718e76f880986b444400247eb2a04593dc94385f00c2f75ae47b26916dbd5d35197983f715b07ec8e38d5a8dbbb9a8c9eac73f535904ae5b40539566e0281f6fff8eeabd1b5cd6a23903c4524fafc339420c24ba4735fcf0cdc0a9f6e8a5fff2b56d3b197ef9a7f571c823b021e82f6f296e28f13351f5aeaf55dfc7cd9d9b4353107815b5555199c0fa3837e225ca44cfb799f57a5c81a96df1e24abacbce96221bb83785a34c2a33b86ae4fdd3c30e0c861ef099076c2e129c6cb21ef194d72f561ade832e17654ebef92a176953b348270611c9a9580c37565a6c368e7808b0260a6d94bef465f6c3f55d456a492a7c865f21aaddf32ef7302688404ceec8ced952f4dabd0e658b79825f59f9efa6de3267f0389440c720a1f9d875005ce8c4f579084c7267de6ad276821df6b7759a0ff39f4a0118cc9d925cbe1b077c455f198a9e6ee17942b7d02578f833c835eeebe302c81b568743219080226032b3329ddcdab518e5e6dfd212904577a3367759632d2fe2aed42150f7cf87a1e4f3da2ff31edd38df4fb50ad5cec1673a156bd320306dd55b9081fe7e4eb33c5199386b68692bfe98010eeebaea662cf4efd5e4cf77ac3bb5011a61db5f5d875fdb6cd2b830a9a5e93c83713a81ec706c2427137e336f783410ba231328eb80e7e33ffe8029cd87048c74b9f30f02f2686ba88a85d308ad1ec43c11a2d448c693919dbaa98c39a688084f1a10b07a70a91cc3a007b52ed2ca834153a3dd3e80316fbf1f19bff740cc9183c2fe363fd9e2c62ae66f3075aaa5eb6d8058436ec634c2d40cc7c6b5dae07ca1da886ac206bd9326fd9ecd110568484020c53ce44be939c464e4649b33609b88689f432167f30e486afddc9cac72c9620564804da3adbcaffb5179deadab92627cdeb3882f6acfbb19834d238b931fa24b70b6f7e1d63aa455903c8d437795944551cefe777594a65c26af9e28ee65c2b7e5a38f651eaa5c11fd4d70533126ca3e12fd478cf6894995c4ec819e5499916238081f87b4c0359f283388c112f50bf25bf64eb5c5b79bd9f3fb864f30727d5603addad1898b8661c10a7655d7527da6f69fa80cd4a017bcab4394a5d59aa4bbcd2ea10e47d872dd7f8be3453818413a7ebb4692337997c530e3694f4d04e7de2e35c4b7e192ed355404ef6a109caf62dd9daeb7f0b148342d72a3a909d8adc762c9b7b1ce8c6d78f2788b1f6af3c1c2801f35d4f1c86b2b551df8dbfb803c824014437d50b703c172494f048add9bd8878276051847cca29a9c7af67a4824be3af9ba0475c9e945b8f22e9dce4aefc8c369eac017c42687575957e4cbbbb625c6732e302aa8328236dbc7840ecd38d4472b1a339c9503c03f2c301f285377c10d999e2c80d0b93db4a22560ee0aa36731fa6f5a9c1f9355d09508e45193f48a410e32a04ffd2203421ff91f503e6038406adacfc05f6f56d86e452b57f2b35805532708e84173d0ec54e87ee1590cdf3db99f0d326eecf110ee031855f23c5563693c2e75737818effe6a6ddcc2bddaed31282c238a1c72085cb10d2e4cad5137266441488e6cf2c066192cb259f2be77dc3961ce912d752e204b55a3ac46659fbe9f6643b1e785eb4c5dc46d7e433bb87fee25447a9e73f2e8f4f5eff85df41cf648abc7ed54946950775b731b23ad29fd0078989cc78713caf796e50e6bb504a8b4d4f9db290aebf38db87f53235568e7db213e72122f5ed2873a4d70d29c5595cfc7ef4c9155391edadbb18acf557495c909fb3cea3c8ad72eb8809055141d29dc4594407423925dd98079e6d845583f85a835f55948b3e147e78512f646dbd0cff8791d716da449c277522130c5564de01d9131d737bd6df33c1773bc45e75c4053cd670e152499b0160d61e5974bb21f01e5104c6c13754e9bdf5918c188c802b1b8a9ecde7d7eb18960abf3a3f1df3338e2604a1735550cefc75614bfed19eb8139416fac011165836ee5e6c420e550d3e0db761868549cabc9555c72707c37cfb832b0f277e15204919e5b3b91cbad395c0f2181060dfa803321e38577e0afcf050615b9009fe9628aa6d0ebd53a7ca69c65067e27e4cf8838bbd6636aac652bd942348579add61218e8495a1ecc9ae70fbcee2bf1b4155524d6490a4f2f9a3ed3e482a32eb875fc036f59197d07e9f30abac8cc7de941a53b2f0b9eb98770b05068788f247b6555b5bde73d71f5036c8e7dddb099d469eacac9e33e5ff47a61ee4a6e8bd9e2cee146bbdaed3f56b7dd7261bddeab2d7e02a902eb26a67e526ffe08148f8b0c959fd94092592b6297c3112800c44cc3aa087b1304f9f718e71b7a5530366c1dd4ee48d33652788c261eef2632809b0529bb76aa3b492e5d13c64758f36517d2c2786d86304aa399a95a5ad5a5b84e29ef81513ef09262f60df6c8c902e2e82039acd925df5b62b0417d61327b43d94cf58d0ed10b6faa74a1c05784eaf2cb85a83c067cf78ee358d1a9a677b5266e6ea2c60a76dd6650677761d56350587c680f8871478472074fa833da9a6c956d254f5a0a6e255ec232dbe2ce34c5b3c00aa1c1f95e85738695a9af236397d662abb6b2c688593dd340bcf3b81fd216cf74b01b75991f58d328fd759dd887f963089b4e729bcff7161b9c4b1ee7854f3c85adf7e8824844662c2788645851c770d2f41ab2d0876d29fb5a10e08295a40e0e3afd2aacd95a47d736784d518ceda45f5aec6104181dafb9dff485fd3b561a4b1b371c5c4287fb4d5ef9d793c506db656da2d28648b812a64a610446b3223700b24f2c45e2e271962eef5612e03837f40f0002eee5cc744d317bbfd0df7c543ed06373f4952c55fa48829bce9d53466731729263ee670a1b288adb576a2d07c173346566b26f31fea0d471f6e4576576e943aa54cdfb53b71fad39ef536d355788da01da5afa983ed87848d5b2ec978f92da7ccfc2ef20ebc083f257e9118439bdce9b0fe277096d28ccafa74ac4cae4c9d5f1bea36e886e66d05a1f7bb5b2d8049ebecbb54dff000fa706e6b302397d2ae827f32101cbd7dc77f0dde77542d628a9d89a0df8632d67e98ebe332f7977f904c60dea384ec13924c3bcdd66cf7241a0a73cf258746697525543dbe684984ec43a0783e9064ebc5d01eb225013710547e364df731ba9695c89040b00e5e1092d63303ed9fb59b2a94486494c560be258d439415d599b6b21a2f1517a817efa470eae3ec48a69c18fdb8e34b42509e09ef8c2ad9100b375825f800fb956f642c57256f815653ef4689d74d8cc779f22c369", 0x1000}, {&(0x7f0000000000)="ac953580e0b4332dba2ae496ab0d4a046f3aff30fc33c77e7240cc9957745da548f29567faa77d578027ffc845787533", 0x30}, {&(0x7f00000027c0)="fd2f0000c72dda6c3a1d7631abbe30a1416bc7b5e8db02320f0de42a777fdae3dddbcb9a730cdb3f2447ac67a796758700db88b34a20f988ef3131d7e0392021200860d502a42a926e9ee566be604c37d6fd4ab5406e6ac1b43c7734097410b2b539da93176c318f3647824cea152dd621b552b39323078bb7176ad2096f76ba4ade1fa91a0f1fde33d93c8b85b132d2fffbd174eeacb0f8445dec56f117398ff11fdd486bc69cb616a351363911e8629823a095101a93abb325417bbf374b157ac913a346b908456e0a55386aab93", 0xcf}, {&(0x7f00000028c0)="7eac10c087a025b24e56257dde11f451bf31886c8a8e578b4139a0ffb8bc9afe99860ee5a3b25efd45db68c0707c70be65d48518f35b642ef7e7a6327f5541f41357653d171e168feb718563dddedb31bf35ea3f64dc33ea67dfc2b658532bb28db831029fb6bcf4099c889357f87957c49a3883dec724fe14a9e0", 0x7b}], 0x9, 0x56) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x2000000000000, 0x2, [], &(0x7f0000000140)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0)="65eb64dee56040a9c785d5d98ecc6ee6d69a27f81e65e6e5c8eaeee12280d023ffc27deb5c9e92ecc5c469f3ae8517594cb271d2594df041fcba79cbd3d48be7587ea0855261be2a92719aa037751192e2f274b8f4c2a0723305658dc4a51c68cab997da471d88fecb19c32f350b43b0f1fc031aa19f7bf726822781c2c4583453bc8149f84a7191a4e5333c61c19734c2020ed80aa3dd978e1ec7ca55ffbfffc868a9b4f33ff8a632d54f53e4dddde477b065c453ae0bd07f04", 0xba, r0}, 0x68) 03:40:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3], &(0x7f0000000140)}) 03:40:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2373.553922] binder: 3971:3975 got transaction to invalid handle [ 2373.578662] binder: 3971:3975 transaction failed 29201/-22, size 0-0 line 2896 03:40:41 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0x2800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x1006}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0xc9f, "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", 0x20, 0x100, 0x6af, 0x1, 0x4, 0x6, 0x4}, r1}}, 0x128) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d8, r3, 0x502, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47f655fd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff69e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2832}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x25, @dev={0xfe, 0x80, [], 0x1b}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x804) [ 2373.638761] binder: 3971:3975 got transaction to invalid handle [ 2373.645388] binder: undelivered TRANSACTION_ERROR: 29201 [ 2373.657060] binder: 3971:3975 transaction failed 29201/-22, size 0-0 line 2896 03:40:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:41 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) personality(0x840008) uname(&(0x7f0000000440)=""/176) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2373.691724] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:41 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x20000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000002c0)={0x0, 0x6, 0x4, [], &(0x7f0000000100)=0x4}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x6, 0x6, 0x9, 0x3}, 0x6) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000340)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x4}) [ 2373.871764] binder: 3998:4004 got transaction to invalid handle [ 2373.892512] binder: 3998:4004 transaction failed 29201/-22, size 0-0 line 2896 [ 2373.925404] binder: undelivered TRANSACTION_ERROR: 29201 03:40:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001300)={0x2, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=[{0x200, 0x21, 0x3, &(0x7f0000000080)=""/33}, {0x7f, 0x21, 0x0, &(0x7f0000000100)=""/33}]}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:42 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:42 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x145500, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xc0, 0x5}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @local}, &(0x7f0000000180)=0xc) 03:40:42 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:42 executing program 0: ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2374.673268] binder: 4024:4025 got transaction to invalid handle [ 2374.709101] binder: 4024:4025 transaction failed 29201/-22, size 0-0 line 2896 03:40:42 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2374.736085] binder: undelivered TRANSACTION_ERROR: 29201 [ 2374.871637] net_ratelimit: 16 callbacks suppressed [ 2374.871644] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.881719] protocol 88fb is buggy, dev hsr_slave_1 [ 2374.951622] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.951675] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.956704] protocol 88fb is buggy, dev hsr_slave_1 [ 2374.966848] protocol 88fb is buggy, dev hsr_slave_1 [ 2374.972095] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.977342] protocol 88fb is buggy, dev hsr_slave_1 03:40:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x14) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r1, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x4, 0x2, {0xa, 0x4e24, 0xc0b, @mcast1, 0xf586}}}, 0xb543958f2791441a) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000001c0)={0x5, 0x401, 0x54, 0x100000001, 0x5, 0x7}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @dev}, &(0x7f0000000600)=0xc) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000002c0)={0xd2f, "d415d2adff9aa5a29038e056302b948b120b8a292339360890cb1fe55f5b47d6", 0x1, 0x758, 0xe6a0, 0x40000, 0x2}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:42 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:42 executing program 0: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:42 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@ng={0x4, 0xd, "32c3cdb1b3b82bd393eccfd6c20ac05e790ee481"}, 0x16, 0x1) r2 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x2, 0x101000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x2b, "0ef315174dec0e5b79d6654977f3037e7d4905b19d9f2493385cf8a085f7ace4b73e6a806bbf07c08cdb4b"}, &(0x7f0000000100)=0x33) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r3, 0xd998, 0xec, "ad6338f08e5904ee04cfe531aaea8ea19bf998676d8eab35938d1c60fe7b7fb8092b6fcef978be42d6bdbeb5ec186c003a6012daf4af058fc35f573cc9c50e687085d5926f38e098d24b40ebd1f52f6e3055ee924f187efc73e5d100e758a9c3cf44fff6e0a19ca67b7ca24f5d662fb548859833c519f9b585a33b7664e94ec9dcf6b480f1369ef6bbfeabb9e7dfefdc16846ef6b4f39ae4b0d4d7668859ce3c9aae5357f139ad3091cceebcd93d19b100d6bf8d0ceb40ead99c63b30ae429480e08d85ffb76923b1dec50bbc689e95bfd8807ac224fa14423ae072299813f8e5971783f76f7bcb30bc4cbe3"}, 0xf4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000300)={0x3, 0x0, 0x2, [], &(0x7f0000000140)=0x10000}) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f00000003c0)={0x100000001, "008ad2db8f0653f478d90a12ea07fef9b536e41bc23c848a0d89b9ff1e802173", 0x1}) 03:40:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) [ 2375.088084] binder: 4051:4054 got transaction to invalid handle [ 2375.126738] binder: 4051:4054 transaction failed 29201/-22, size 0-0 line 2896 03:40:42 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:43 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x3, 0x2800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000180)=']selinux\x00', 0x0}, 0x30) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x4400ff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000440)={'NETMAP\x00'}, &(0x7f0000000480)=0x1e) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x1, 0x3, 0x1, 0x7fffffff, 'syz0\x00', 0x1f}, 0x1, 0x20000000, 0x8, r2, 0x3, 0x9, 'syz1\x00', &(0x7f00000003c0)=['\x00', 'vboxnet1proc,{\'em1selinux\x00', 'vmnet1%\x00\x8e(\x86?\xdaP\xca\xa6c\xbc\xfb*\xb7V\x02p\x17\x06\n\x99\xc1\xee\x8f\xa1\xc0\xc0\xb1=Rt\x8c\xa4\xea\xc9r7\":\x00\t\xc5\x93\xe5o\xedz\x9a1\xac\xf5\xd8g\x9a\x04\x1fH\xeaj\xe4\xc4\xf7\xea\'\x8a\xd7\x1b\xcau\'\xcb\x9e\xf8k\xc35\xe2\xfd\x9b\x98\xe4\xb5\b\xb3\x1a{\x99\x8d\xae\\'], 0x7c, [], [0x7f, 0x9, 0x7, 0x1]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r2, r3, 0x0, 0x9, &(0x7f0000000000)=']selinux\x00', r4}, 0x30) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000380)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x44082, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000080)=0x4, 0x4) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000004c0)=0x9b) 03:40:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0xff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000380)=0x1ff, 0x8) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7) [ 2375.154058] binder: undelivered TRANSACTION_ERROR: 29201 03:40:43 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:43 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = semget(0x2, 0x3, 0x214) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000180)=""/185) 03:40:43 executing program 0: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2375.340464] binder: 4078:4081 got transaction to invalid handle [ 2375.377020] binder: 4078:4081 transaction failed 29201/-22, size 0-0 line 2896 [ 2375.417269] binder: undelivered TRANSACTION_ERROR: 29201 [ 2375.431634] protocol 88fb is buggy, dev hsr_slave_0 [ 2375.436755] protocol 88fb is buggy, dev hsr_slave_1 03:40:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(0x0, &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:43 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x17fff, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x12, 0x0, 0x4}}, 0x14) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:43 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, 0x0) 03:40:43 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000000)={0x3, 0xfffffffffffffffe, 0x2, [], &(0x7f0000000080)=0x5}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x40000) getpeername$ax25(r1, &(0x7f0000000100)={{}, [@remote, @remote, @bcast, @remote, @rose, @default, @bcast, @null]}, &(0x7f0000000300)=0x48) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000002c0)=0xfffffffffffffffd) 03:40:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x0, [], &(0x7f0000000140)}) 03:40:44 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x101, 0x20000) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x1, 0x4}) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x15, 0x0, 0x20, 0xf35e}}, 0x20) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x100000000002) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2376.165939] binder: 4101:4109 transaction failed 29201/-22, size 0-0 line 2896 03:40:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8447, 0x20000) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0xb7b, 0x0, 0x201e, 0x1ff, 0x3, {0x40, 0x1ff}, 0x1}) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x800) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x4, 0x4, 0x400, 0x2, 0x80000000, 0x7, 0x2a5, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x200, 0x8, 0x7, 0x3, 0x7}}, &(0x7f0000000400)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={r2, 0xfff, 0x7}, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x1, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/7, 0x7}], 0x3, 0x0) bind(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @empty}, 0x4, 0x1, 0x2, 0x4}}, 0x80) 03:40:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x8447, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @bcast, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 03:40:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x0, [], &(0x7f0000000140)}) [ 2376.411293] binder_transaction: 1 callbacks suppressed [ 2376.411300] binder: 4132:4135 got transaction to invalid handle [ 2376.431773] binder: 4132:4135 transaction failed 29201/-22, size 0-0 line 2896 03:40:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(0x0, &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) [ 2376.507034] binder_release_work: 1 callbacks suppressed [ 2376.507040] binder: undelivered TRANSACTION_ERROR: 29201 03:40:44 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x0, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105200, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000300)={r2, &(0x7f00000002c0)=""/48}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}, &(0x7f0000000380)=0x10) 03:40:44 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x101040) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000240)={0x3, "c7fcf4b394ea00abbace3531c75766d9955b1fabfa2f102492769acf22f78fe6", 0x2, 0x705, 0x4, 0x3002100, 0x0, 0x4}) 03:40:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x0, [], &(0x7f0000000140)}) 03:40:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:45 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], 0x0}) 03:40:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x844b, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x400000, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x4514, {{0xa, 0x4e20, 0x9, @mcast1, 0x6}}}, 0x88) sysinfo(&(0x7f0000000180)=""/252) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f00000003c0)={0x3, 0x0, 0x2, [], &(0x7f0000000400)=0x8}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x8, 0xa, 0x4, 0x40002, {r2, r3/1000+10000}, {0x1, 0x3, 0x39a352c6, 0xac, 0xfffffffffffffffb, 0x21, "96a9ea86"}, 0xf1c3, 0x3, @planes=&(0x7f00000000c0)={0x1, 0x8ae3, @mem_offset=0x3ff, 0x4b33}, 0x4}) [ 2377.202149] binder: 4158:4165 got transaction to invalid handle [ 2377.208237] binder: 4158:4165 transaction failed 29201/-22, size 0-0 line 2896 03:40:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2377.287939] binder: undelivered TRANSACTION_ERROR: 29201 03:40:45 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) 03:40:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x8000000008001, 0x80800) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x5, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) [ 2377.455120] binder: 4185:4186 got transaction to invalid handle [ 2377.477660] binder: 4185:4186 transaction failed 29201/-22, size 0-0 line 2896 [ 2377.495682] binder: undelivered TRANSACTION_ERROR: 29201 03:40:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:45 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:45 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x200100, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000680)={@loopback, 0x6d, r1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r5 = getegid() r6 = msgget(0x2, 0x108) msgctl$IPC_RMID(r6, 0x0) mount$9p_xen(&(0x7f0000000000)='/dev/video#\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2, &(0x7f00000002c0)={'trans=xen,', {[{@afid={'afid'}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@msize={'msize', 0x3d, 0x1}}, {@noextend='noextend'}, {@loose='loose'}, {@posixacl='posixacl'}, {@cache_none='cache=none'}], [{@dont_hash='dont_hash'}]}}) 03:40:45 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x5, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0xffffffff}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e22, @empty}], 0x4c) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x7ff, 0x7, 0x8, 0x4, 0x4, 0x1, 0x1, 0x8}}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x6, [], &(0x7f0000000000)=0x3}) 03:40:45 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x0, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:45 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [0x0, 0x0, 0x0, 0xfdfdffff], &(0x7f0000000140)}) 03:40:45 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [0x0, 0x3000000], &(0x7f0000000140)}) 03:40:45 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x81) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x80000001, 0x0, 0x4, {0x5, @pix={0x7, 0x4, 0x0, 0x7, 0x10001, 0x2, 0x7, 0x3c, 0x1, 0x6, 0x2, 0x4}}}) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000002a80)={'syzkaller1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}) sendmmsg(r0, &(0x7f0000007300)=[{{&(0x7f0000000280)=@hci={0x1f, r2}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000300)="6ddf0fcbfe32a10b0d045b8323eba9502de50bf2198f5daf68134c141de34cc2824ac2f44cfe5dc2c6cc4fd3833b5448d26aeb9a7fdecc4bdbff6834c140536f25280967dd1d75be34e04a273d84139b68358a876853336e621d9d05c8cdf9835828ba27da8d59d2e98e9a5b3834726ac5f9405bf31f714dcbe1aaf341ab93bdbb285c4b3be197f5296c105e2073ec04d0d0b5640b66fb3777e3dca042c1c918f562f05d6eeb4f588adb779b1b8cb3d552da0b4759459645dc7d54052aef3d4c5919b8b9a36a2065eb45bf4a3664e5", 0xcf}, {&(0x7f0000000400)="06e61e995f6ed777f185aced49cb239223b7ce88015a45fa2810cfd3c55691769a3db437ae020aa88d793b7bf241010bb66b38e2b743ac97bae57da0fdc8bd206db79fa8799fe89dab3a16c13a2e5a89497a595baeb72740f3c594ed6778da298033042762d0396055dbfc072dab50a0dffcd5b22a7361dedaa9cfcdfc86706080f2e41acc593822814651b2625a4a77c83e3f5aca7ca99158235b158954cabdad60595202c2f64c1566ad78d015fa12ac2e670a215eb1cd0a6da2ba66f7bd021ef9feb409a5482da9e84c9e97c55e464d904111719748138203645a128a3d23ad0c363e9984a02c7c0223fe3ecb998d", 0xf0}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="f9d3ad92e4b94aa16edad829cd800a974957e76822c7b4245570fc9081b226dec617119ba6ab7cea82", 0x29}, {&(0x7f0000001540)="e194bb59a24a2eeed52777966df212b0439fbe3655a4e32103438e2d23b3a42b4bb9a62b9320a5e22d7b7ee93d857ecba5d36a29eefe571398e9b4fb5e8fea6c1464d344f786fda9af846f88fcbe36f8e4fa0ff80abbc7c7ebf89385ccafe43d7e04ce0d5e1f02c0a83965500a71e770ba0cd2f35d08dc7b03d97ce2a482e139600a10a4a1dd5574c43d9848e3b6d093d922977148e061be8181c3f6dab493d24ce15e28752809942c53c7390e3a54085c", 0xb1}], 0x5, &(0x7f0000001680)=[{0xa0, 0x10f, 0x3f, "66867b77a772998336fb74e8bff430a30bfea758a8fbe6af12b077813dcb980ef6fa17d5d733fb10e3c6fbb6490a09ae41486235a5721ababd585634b45d224d55f066b0b2d18cefce19336b1e3bdda701d5249ae31b3a527325fc520f1a15608d332432a3c42b5f71b5116624d7202604fe1d5567229ff1ac4f4eaa4a83bde3477cf1113cc08ece503edd9a7f8a"}, {0xe0, 0x88, 0x8, "2fda70f473938fd15b68931dddee1cd72928cf5d9ec06a9515ccbf2643f40b24a025652cd2b161ce19a1cb1587c9e2be887c36d74dc8d54d927e3a90a8ec8c3f8b01c43a0eb913d5b92b5336cf7ba376163a0f22182567586b53d0cdd561f6de1ca290dc1bf88214f1edae07f983857bd3b7d00d98ee2857f8a6bb5fb4ad439908addd442aa20e43cfbd213df3c855522097264cf623f3dd933045e49ced64ba1b0cd2f008ce844659a40642ea67e8e4d3ddafaecdbcf0abb779474e7f6e2b1df94dfabc3bf87c8574"}, {0xe0, 0x112, 0x1f, "725c449d646d19634d2c7771be432affb3d5ffb049f38509b49fbe09071373037300ba7f4d65f9a2cfd753d12a75fbbbc71c0f70b03e843069c2d3bab70401e78ae186a2819e075153329300f82c6b5e8ac2740fc161856652d714b106cea0e3151036df9abf74353f76c83ad12066ebd2ab58bfb9a6e30dd5a07289e83b8634c30b7849cd9e26622fda366b3d0132a2a8e5d54c95ea579fda3480f99ec5dbf62c25696985acf981fa578b62f7d6914def3d710a9158b1cc04568a990ecceb768d0e58ded7a8e0b9ae3ca9b610"}], 0x260}}, {{&(0x7f0000001900)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x9, 0x2, "b77e113df4bef5f208af53f5c1e37c2f291f91721375ee4cde96ad1178610b3df552945f84ef3a81278755843fe148bddfadf29256baae27b979c76069a8b8", 0x3}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001980)="fab67286631f1484fc262ddc0153f6a5f6e730b5c33af5175ef271ae3ed28262e39a13bf7edbcd7476055d561d4b2e99cd1a2616b08571ff04978a10fd006a5daab4b02eb602966169a163592ff9c853dcd4b261bb03514bb260930d5fd163137aeb1855109b94e659211e04f1aea88df4830a50c2814bdd1614de2daede15c58a0389cbe959b89095169ad307fa30a0e3120a2adeb03452b3c0f020c4310fa92943d981ade80503ef330fe0237b91ab2cfbc6fdbc94fa4dee5266f4ea5aced755af25cd9da96c398c105d3139ec858a73f8ddb2af063e439efe2ed35d6f84fe1b8883da4320dd9e3c4394277447b0cd043851f8d44122970c8c57760e3764a97cd9811c8b4b1880be5d909b00e55f56896e228fccb317fa1f5d270eaa73b03b435b544a1811666c891c359caef1a781132c8e98c8337a8c7e7e19d15a914be8181b8020b9805cc5d12e0d86cbc51d79cd5af3345f1fc4691b20a66540b9db4ff55e73bab20f36e44bab8dfe6bea93d7223b4c9dbc6372a9975fefbfe707bfdf6d8e427f8501f71318e8344419818a6d8544aa6cd9bff92b1a7e512007ca05a9e9b1b0308d0e8b6bbdf0c123c36d16e4f5bf2d3121871c86fd8ef8ebd650a1fb15b1a7bf7eb7ec86afe529f741da9740e2e608d699a2fff7d29adc49a7c6fadd694aa0be6b5d43e7f9afa047bd9f405c84cc68957e5032f30c8c8bf4c09e5eb9a653eeec6f9cb3a1452f691956bd351c278e1776da813d20301252517e7d1488761ae03605bbfff591cc6ea070b5b1a68ed7bad93952938ef4dea1757df7af872f05bfe453775a340545de827913626df0ed594cca0e21c0087172b7eda6c917303fe1565473a3c18f49fda7b9375fd136261336f4a82795d6bd59ccd0ee4c767236fbcb788ad7e9aef4b60c0a16a08df994a5f304f701fcaba3f8324583de34223572616f6f2063cd7ed7811ad01de27d9c126b34de593dcc50fe21f4268091cf0e143eccb56e75a81c92e99a7ede957e20016a41c994029a8d13d7d6579f21446bb2f22f5233950d6d6de444d867deef74757e6fa0b0f6a7eacf6578cd496a9f5e4d167d845421261c6caf6f524a8ab46c50aa816aeaa1f3ab24537325958acc4c5cb41f47bbc9318d438c3d0308888154cd903d44ff9ef4bfa0cc10f4b4cc2f11b2fefa16f1d0d1880616bc2dc4b4c080fe9426750e66c15dbbedbadebcdf467109e597e28ee01e980c739c4cfc528553cfad096c6ec31eb758a81b6a73a22c8b702b485b15b0b20c5907be787060a300cec4fef3175567c7c5109e55ffb9a87ab45e7361bcd22bb929c4f862fdac8f156ad28034d93c8374e4183bf51f1340f056c57b6bc2a5e9594f690b88fea3cd1cabd1a13f5e05d597db7af1595e4b24c09f866c38ddadeacfd22c5960c42466eed78bb1297e4d145f8e75ae4a81508fa0a5028cfb0b6de7690e92d28fb13f29cd8f6f9e9a0a51b01e0743ff104d5f3c5c2ccf626df099861ca3662d0b657770d423f6571f3e8e640ed7eb5338e172d2211339ee802bf94d94065e6c5150389998a7304e2c0afd5c5d7cc6b41be76a07ae6d6d30d91654962a7612abeffae36d5de8e466d503bff271e98af1b1d5736d6689d5690961ff8f8d58c85dcc10017ae664aa7edbe9098e5381d7ff6d009f6562e5223c59271c9a464a3f2400c3efa701c67e6c9522c4449d70166ac1792dec706bbe4524f56886811c9d509ac7563954264b6da20199634225205858ff70d9c8e7235b79290dfa8ca4e69191e658dfc9b4a47e6d348950e30117b03894e65ad84f47fad18c4cccebe0a945cc2cfeeda20cdae1e639d7bee58a03b95320814d3d0c5c250c10b26d4308a2c2dea6cb7f3dc66d99f6708b279af479bdcd2da9e322c752498ab44bfbd1f21bc3ba16d1e648a082d99e77d2e31dfa7f2bb5bbf096e6ae25b5a34e3019c90cec19fea69cd65858eed81a7b0a00bb7eea374179c730ca12072c219f354d36fe278ef93957c83af6c61968a755be305a68bd11993f132ce45ec06fabbb9295693e05c322c02063f60b984bc0e97a5634041de0df0a61b1e65e61fb76415c51110c636713ff80bc1d752bb3e71420de2a3707c43df3e1a97f6fa68252b3a5bc4ae398c8b8a371a88de61772ce90d5bf9c423c904b8fd2932828053a405f4279a7fa7aade423fcc4abd07bd30e10c0b0041c9f65e06dee43678746a48c22310d4f968bb8f6ed9df80fad9b8312e64a49bef9fb2029ca8c1fc432a577a45b5af9c64dd981f19398bbad787bc7d8c8ab8a47a165440ba5718c4b2d7ee40b5e3cf2afcc0edcf4e4bd26564dbfbff4fe4f210d0cfc665de2f80227ba5cc9b40227a321acf59db8e99c53c069276aaf03432422525f6f6b0c78db73e4464461f4eac58ec6b90e4a32d7bb5d338bca6c08180f5c1e59ec2d296e8dd127e5af9f5614f069dff418c44d6749964d3464ba68b346dc03bd39db81660991867f8cb377a178a6870417c6b7da4653fe4a908ce1072794495198671e0657cac93f3e8f69d720ffc143ff7ff290981294be28ff84fdb29012bbf4dad0946783f0f5703c9492dd4d55b766bc19c1158fd52a473ef064562da7ee8b29cfb6851c6a26c5910c72ef2f4f8be278099440c342a0da00f43f5c1177856e684b6ce802a84a0814a4b48c338d6e9242f8487e662d14b7bcc943c7f569202e5d4222c9827b59cf72624157c3cfeaa232dd1fbf6fc1b1cd54db9c1b1dde7923479c0c63a609f4dcb6abd53640e50c75415254185e4d83bd174511e444ba7c74fee11986e012d6d9fb86d124fb751cff880481c77caa4261b9a01292dba1206de0f5177a51c26fd399079eb16e6afcf790a3bb5ccfaaef26e272a8fbe064999d57d9e4bfa5146ef64b1e767065990c73598781fd636214ff2809c00b251da12209e0a377f6738f34695cd60fbff37acef35b8db2ddaea4dd845d73bc155519f4599dc3418435587cfae3adaf3ac66fa72e9a77436b33ddf55567cc0f326bdfd6714a9dbc68c97de03a426ee7568b246a92641017b97d7c5818d554b9a8d2f34eff313cb005acd1a0d9edd7925d8021171cfb3a31771efe6bb5bdabff51bff0136dbffce4f215385529afd56369f7606bb7e057badb22d1cda561351dd7a62a181bb2dea045dc328e1c5437c1b152967158bc076fd39fd2cbd84ba7de31f8dc7ae18106a982d873f763e144333fd13ed9577c48d7e4782c1fd7dd2bc103cdda6803097e2f4116ef501bcc3737c29a72e4d02e9541f330dfdafe642dd28fbe853a9dc71453254912b4563cfa29ea1936656f712a39c52ad84a9c1ca2b2127d2d554f59641e385c3b575526d61a43196ddfab34e3173fcfc5e55e020b41f88c5fd6c534f2420dab726c5f2d87cbd0756b5ec802e3af5027f17c6537f5fef9117fff3b26cc9308aeedb9edaab2a20e5f39af68c046cc862ff40f913d44043a4c0c4ae6d380579b9ee3907828acda4edca1681d01ffc02692f0394a680be7daef66c8b723c95963262ae5715aee69aa45386d11633145cd5993ee585f1b2c2bd181f4b37b858aea2c6f442d1aa36aae1b9b0e570140766b34a5c7d200fd6112b9f4867564dfefe1d955e3caad136ca610431bba5821dc7cc4d407952db17bf13e0e70c6e9b57553ca0adb61d0892948abbe0e3e1f8e90fd67aacc5468cfd5cb0b87165a86ec7bfc34fe72513bcd111c0f74bef80bb634c928831ec9fd21b67eddb7c4b990f3892cadc51104d57370da0500b85e473255a521ab9a761f38ace87198743f6c7ada23e05b5ad83b47b5f273e0735ac8d8a942ac8c72166066c7f82854924c2c01cb01deaceff33eec7fcaa9f33ae55e17eb8a789339f74437df462eb313b3babd6889a4722a7cb84f6273fe59f82dc73b82d6df7f42bbc613973c9d94389e4e1437f29efa6cdc2ff278ad4ce89ef0eeacfda8e9982502d81af42a9e2f08cd54e5328ca38acf76a86467597224ab66cd1eba11b2a6fa4500caea12d0295fce98f867b8ae53f05bccef62ce88af672cce5988152695e22608afba212425a08f45c81069705e0ead989c0ea609e5de92a35ed0f42853d64f7dfcd1def77778c7763af84ab9789eeb0134e451f0c287f34ed1e6b90c88c47532a7022e5f3f9d7f729a579fb7d501d6704923c61ed707e669a63f05fb2bf7777bed59331fc930cdbee611067d04e198ec7aaae0650800c63043419ac7c40af1fe7fe50b2a80b86fd7a12497fde5f2667f0f0754b18c7b16966a0e8f7a21d86172b64974f3fe941ff95b4331c4996ced6d6922f7754cfcf8e51a9a67e6ae8baa21342cc4b996cf717045489b8c7a104daeb369d1cb074c09cd140cc47cdcd437828f3e56bf3bdbcf302681e03c981754336975304b3e3ac3ffdec5c14b9dac5077f91a344f7c63e2b25844b4856bc2fcc9735dd5bc327da1cfbb33450f38310fabfaaec79b905b4271923fa9490c1d8362e9a3e2221231d0e852b7bc1fc00ecb9c7c26225f618971a8c425b0c3e7e995ff5bf0aded6d7dbc0e0398bf49832a6aa646142e4d35328ed2e4a273036e7c33448c0a68a8ddc13c83f3b039899bcedfbaa3f988982ac190bab970ee60d9c8e0646e59ea0ce2deffa12d464642985b129e2cf879ec26cbe890718defead5fa14a927a9bd5466585df8a39df0be37afcd5335614b4b089928fab01c7913d5a2ca97a0ffd6b7f37c2e895cd0c12fc57154858df99784dfbb06c7369eb137a6588d87e4023db0b869a30ab3fd61607f54de68caa512c583dc88d736d063bbb879db42f0a6661dee6d518fb0012d4daa6d9b16bd9dfc04c400d1870248d7cfdeaed973125321ec47f728612ca4f24f43511e4e4dfc740b81e1cac8500b65100f1cdbbbff4aaed2c78e57cb30d94b45a50df144b97c14d28dfdc2851f6c091e5831c206b4ec1e142cc7d5eca3d9cbc7d9bdfa30166b01e020a537767b3e69b22786cf149ef5e94a201e1061a0737c77254ffa87669db929a9615199f9ccfe1c446ecb5bc1f21750f40c358fd076891ae24c7601025bc9868534164309a91bf49fd09c48fe16c7534bceca6c3b4be33d1ec6a0497cac2956706353cfadf3cda6222bf1648de2aa2300f55170d5c619d21008ca43d058f63b45d762fe4de5c2facc6cc2478bc11a5fc17cc2a2719db61247629a106fb55ffded5fdd97d74c8da75ef81b4e7f8f680350cecde694c7c4b4a3153169b169135dc816274fe30de08b67988487c37e47b24644e1a88d115702bc5f94d4d5339a2b35aa41b00fe55eb608a2d765a28e39474f2fcd7eb9647c414f67dcbcb57c88af6f6f38682c4d22d7e45d20e4d3f98e1411f08d8a2e385d2ac0f3234c3ac1544ad391c7d48750366360ba4e5577138b27a7666f5432b8168246ae151270f03f4c8382df1a314379f7971691020c6b03a647c1b70af44332b7c37f8a404186aef215dc8983dc2aabbd05fe2b0fa367b80b356f058116f436660134c91d5d06cfd1efe886c2fec5b1eecc24b1f2ed8ead5d93a2d0069c3da3f9aa99c0f7a9d60d22f8ea7672beeab18cb411f93b0f466d537a1be93a67987b5219b37ea948161348be5795048445ff6b0d319d156cef19cbc66b20db4c446d5fdf46004f2dd643ca8fce1c1779f1cd0f7c98a2847a3c5188988739f1b13c330923a4b895029e93fe4721b6cfc690335af029daee10d669cfa698d0650d1f9c662802ab6de048050ff5dcb9de9694496c479bae2297e8931cd82b5cf8aed396dc7152fe07d28ce6182469eb8f", 0x1000}, {&(0x7f0000002980)="6fb409b5c9fe8f046c14596f82f3fd0a53b59247a86e0e4b234c7f3833485df55a3e939329352ad1ce10253d29f759a1d00c008691ad5c90626d8609fe4e15107ad4cd908b0f7557c3dd2477563988df943b4226b44db6143391aae6daafb73243c947e2be0d712a59f1c357b2bea228d053555b76e7399cddb7ceeb962d353e9d7e0b170b8cf33a143e10c86bca9e180f73d8746d6e622b5fa3296a6ec00f3f39cba18e8c114735044751718eb53003147217a81239da3a3ee8751e103d3fe491023ff338246ba2e4cc15074b978b44d77021928c58", 0xd6}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)="b372edaa04fead8a6feb28fb4b54d68546efed9705cbdb6f84563213c9c619db6cde0d899f7f49b7a1960cd33647f1e8a4f33d7d26d690c66a46873e74db4cc19ccf15d4efb0d5761aa1fc225d14d90a666ca588b64d61e0cdea8a75a560d7fac57a2ebd018b5a56fea5388438c8ddda3bb765975728eadf017c4fc1da46bc3fa99ab27f77aacd45321f505d5cf548b5da1de26ff6c254872345bc633f357a4734dc695f2dce7e64fedda045d24cbc4f028b639b40d2482875115bc42afdc4d3c6307b8de43325ca62fb1cbfbf02732f07ab6408e9d38c9837621f6a2eefbdc4307967bcb8266c", 0xe7}], 0x4}}, {{&(0x7f0000002c00)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c80)="e93b4f38b3613c621a8c9096f752080d37ff7c71effa9d06a934f8df4c894bfffdb7452ef38a1a71eefe38bcfd139e6e5feac1a7bbab51000b8da91116ad4437deb940290a1b58fec1af3527986d4fb07fd640af56e40dabb1cebb6c7bfdf25c435763a60c1839ceb8a1fab511cf51fc8477b67ea74ed0bdd0a998110a2e548a", 0x80}], 0x1, &(0x7f0000002d40)=[{0x1010, 0x10a, 0x80000000, "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"}, {0x48, 0x110, 0x5, "74ef947fb22a18da418cc689a07b16ba4c4be9d00bad8d0400cd533be67c7d4ce6da493b9d6286abe1cc2cf86b68a2b6503336a430"}, {0x1010, 0x10a, 0x0, "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"}], 0x2068}, 0x1}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000004dc0)="521cb767af5f5661c6623a5999808865cd043e1f89382b9831d3c75df71875cd630a551242de0717b2845eefa9806d322fa8386b17dfe11d4bff78eae668102d129aef0c60de53ab24fdf77c5d513eef0cd2f3c855a0aefffba1e7ab1c19241a5bea5d7e51f5dec7955ca9af2585688cf23734243de99e9e843475a48870764a89cf20fb3936d57cf5ffa1ae3b36cc30ab0d41f1bf1edc9e41c86a14dd06af4eed2ae095fb87ccd2d8a923a74e21ea20e3e92dd046c8ca5eef47dbaffb0b199b5c7d92ddfc2f6cfda53afdac07eb30235c25784e691b72b76a4dc700ae4f675131623c49ba6f97dee8a15926eeb9c63c169aadc2c5215e53546245c0fa1bfa3f200461b4ae25f050be755876eb78fc0fe6548eb8da34565efaa899c4fe8fa6b0fb31f9cb64a929d705308a393b58bdd09d454a10e44ea2c2e615ed136bae894142bc88d26dd6ae09e90c7927b31631fd955cb6231137e81fef70f9b33c61654057b152fd579802c6e661379edcd63f0f24500bf78aaad036fb11c5ebd309ca7b8dcaf5885685567fa5f6cbd4a36da11940b4e8e3cdf19761b2a358b2b490fbeca32e74a58b0c14e8a77f79b383e588bc9de6f18c7e53138a9e9053a3855f5822afc6fc98854d6f2ed2b8e2edab01e86a016d7b044983c42fd6314b9f47ba546db40aee8ae19fcdb043e1f1fd76c7698623dc0089ac5d0d260d8b5338c82b87c62c79f0232057912c9544672e1710319afcb60c36a3e5f93c0681a6ece53a23a2d520ac28ca9d8e3d9fccc20e90173c322691d55c2f8fa53078cc19e47abc2b26a75b793847b0e19801f549a01d47e29c5e2979055aec0b9051c0e8ff520aae841a4dc465826799af8129c99334c4c7324496d1db3582303499aebe2fb752a3a31979634dd692c282bb59006f6b403cf923c6350c6837a2a17e1de0b23cb39ab4b330c048c2209dbc5fa920b504f28007bf97f6c9463a0c108a8f2b96cda7ffe4a7fb6443815c1aa9e647407928edeb4a5ae4ea398223ebf462475c6b5d214b72392268b53b1effba2e78df87d514ebff7bf6fbaea9bd3d0e79aef5cf03261556b10371fc117930e5d03033a25ab24b6aaf5a4a37eceab6817471f4623931ac8d178e9309660fe39f77032eaed7165d80c84d6e15433c55f88a66cd705df7696e9462da8fcbc66e8ed2d1f2089d41f842c1541d3e59a60436fa47b644bb188702a0bfde282b4b3dca05a937d4774e1a95d8a9059e9ad8c693571beec723db75c3643d6135845f5a356424e7f988742240e9648a489b7955a897a96d6c1ef5827eb6ac98a3e316408badf84493c96eb130116953d280ab3f8c2c585d5c166932d7b911944e614900f271c22d076d0db72435b2f3efed519315baac321382f26878154f6d41bed8a290ea2e1c00d8fe3a8c26210636a7d27fb15d862a9417d0018e2def9c87babda6e58ef36279b48ce3b33ca38ff04f2404ce7623d3b901b2d5fb31acf3cf845c188839575e9f64229baefb9393dc8c2b3fb9d0c2a276682c83128ab6d84fb510ed98da7c634438c67e8c4a95ec87edd8ed7b19250aba33240725bcb1783e96ebd3997a6275ce55edb283b8adf6810e2587434cac961d0e9bf1efb585d1cf3c2815666019297edf5f0d9b54399990c52a8fd2017e0862b6b49aca9c629dd2f87d11569ee1498bb30091e1a72fb1f390eea7924c96f7979e78f2cb7dd5cfd53a195ac1b6f5ec9121de9c766e8bedcad1917d9aa030f1e45a10b0d19e98ffc982b0d34f6fbb1c9e54beec8c3e4a5cd679617a21aecae158b373b3eebce76ac856448fde5b7e3c2e8697d8c02624b8e2c2c7cd3075b98a2f20b4708aaea1e6114d6aceeb16b79cfca6edfd2fe01ce575f370507bd095c2bbc1af95d4d06448cefb8ce56e32b049788a532bfe098665810df31f6646d04b676a4e1c2f8fbc91fd001dbebdab4dc8646c7f8fb77f06e865284d6c470a6fc4afff027aca124cb65d91f1c4fe467a5a6e336c1cb93d239b140c9121a0cc2e8a867648cea2fe2ec8655733b961a3f387a5a4aef65b1eb9a0f679fcb30c9e542505a33a0232a08557dc3ecdb9ad3c846a6fe5b80dcb75837369ae00adb2dca5bd0f6c97a100b4cfc072292bc6e2be882a7a597d51993528e09b43d7586bf8dc273a94d73da239d7ed3fedbaed2819f35eaac765a4c4580fb9eb7396d1bb37b8db5398b96f92d2ba72192bc3ba3ff2a2c1f73dd8d8a53ca291d363e180889849ca1fef0f65127e4e5da44d96003baaec959bbafc3cbcf6d79aefa17b3d43f55c4461498be259eea50e203fb4d8ad5aa94900f34e0159d21eace02204eb34e17f06c917427bc06372d66dc141d6a69e680e29d29ab0765da6294388d1ab95c1e9f0c29ab77fa67016735025f92afc1d3072c24cf4d41837ebb6b53e44aed387aeaebacaabd4b20d97f837e24c952e6f13237af256bebbe097076601c6100659d2a1790bd6a7c2514652b092c4670ecc05239c6f7a32f63a4e60869db9fdc761c7eae02ef347eefcd2fbd918552df74c4267db3b26b8e5d1eacb7e2e944c3abe118afc23b931219927e5f405ce5887b1234afc313430dd1dbf8443aaa95e5a6fe4871b08eea9763e3c6c13833730ef43b4e81fdedb9ca45dda24d605c7b7af068b45490f6deaf8a3619ff134305999c1318bcbf9214c087da688d1e70de44e66e4d86ab464d8b0fab830fa4af0f002ec7d7cadb614715bdc49e7cadd12bca63b6124d0d8676f81daa57524cf6d3fdd450b627b16c6b6892dd5978143446070cc6897dd10692363d4c9e9b6d3fc025a204f121b3a596353b9f6fc20844f949f9d33c3227c6c20d10796f49957c6c45780b441d5e62790e5e6ec5b5e41b465333c568b9ae43d1c312502b4b7b9561ba1bbe86c8f8f254f66a79dc974d5cc62cb4c71470b163e59596a29c7094be74188bf29806fb53085a6a40d9193f5b281342d6e32b793d335e4addd32ae6f708b1de39a5fe0985a88df9f1fd7afeadca228cc6bef7cf61b7dd57c4b1a1190f3f0d0a264360cafb33242085d4c138805ec91529d84238468b31fc2f0bfb394a14dd7f028dc16428c0a15528c8c93dbca79884bb79d6bbd1c27f0a93aed3560de4e6792d1fcdecc152365587595169f0db034398a6cab07f81fa42e3cf6d7351cf2ba1916688b2b12c3f58281a90cbbbf31e3d927192a5db51ac7c59063be625af53208ac5d95bc2de37d7731da7d6a025b86417177db8d65ce00fb5a3c80586bb08264ae19d88eb955541ddbb8f2fc6829a24f69a3363b63d75dfda0d4abc06bfbd1df6fec3961d4fa39f0728fc9cf5bee9b5b61a38c465df2d6ecf7bd23575cc14d3a500aa132c6c96f330d63cf676d38ede4ce7a8dd4e04884b19af8f00418d4ee6b34462aa3af004fc048c948a5dd2eaee12d6159c6e1d4cb6aed5151e2e08d9db49d99b658b446d1df4733695df3fcbcbc7843e404eb034951bf9f10ca0bbabd3c33d67b475ac184cbce10f3fd178d54f2d71b0b4bb70dc7c6f867c947f9a67266c45665cd54019c4bb70ddde51a6a599ff2801def04c3bdaeb27bf4fdabc11d6055d5d03fcf11f610ad5a41d01f0031942c7c36fc2baebe23ec56a9eaa9dfa191a3ed8da243eefcd693db80c5b8dc7debfb8c2a42b21d2a1d06928ceffec349f26284dd909eb69153fac058fa540a9805a29169a681a502d0e50be78f94b36f4f9c3689b4d742d8c24856ffd7bc90fda4c6eaefde4ff8ee72e8c41d25820ef4d5515d0ab22446f0217b0ecebc67e42060b23f5c69fd086b7988511430e766edd8629d178a4b8879d9fb8047046315ba0ce7552d8a8e99f3af11f5a3dae810e0571b59dc3f8ccaa268286e8aec6c3487282cb0cd97c5303ecfe5dfa1e6ede830b929e4cbbe7dfa1525120cf0cf348af80febe8dbcd8173c38c0a6ba27f32f25b817b08c2a9f91a164a3a4556bf76340dd4fec193ec66bfbb30fde2bb1f1f869303900b494b20910633b903f5b79bde192cfd4ef586c1e81d38cc6a119cb772f6935386b83d05a79fabc7124d4b21e19c710b8ce293aa667c22b7b823b3f087134562384e9689ff1d33aa6275e9eb1af4e0c678c3ee83d83d32ffc8ae6b883ef4acbd9e79a934a415ca2bdac0864e245e5d7987986e8a814390f626cf39b838c48f4ceba1316336f9de095221701e82c14e7befe4747d227571971fd8a3c5b04f0b178887f453fdcd0013e05c1013d5f4aed2a82ebc87117c3d611973a2c15a9fbb6f57547c9815f186992e847e149cc95d1b83aaac934964037764eed15dd13f95a9a1408f1452530bc074c8957cefafd4c5600daead426bd5e94a106279337040ab7908edaeeb8b8941f0dfd2ad73786b1e9c570058e858fe9b834bef5d0e44de82621c49875e33d445aa4f2c071011e9137176bc00c3565227bc0ff90c3f42f247dbccb1a5a0772a7df88942b4211b40c298357a4447220a89544d1fc98cab97ce541b07dd7fafd00e7f8e6647052aef38e8e02bc65ec11b5cb8cabf499817c0e2571737251cd53d514f212444503d6621b69122d76507dee9f0e2b6238dd15e8504a3bbb655e4bdc896f79533c25516f60667d6ec4270b5c53006df1e07ab450cdc5b52027732f74b2fd6da87e1bb51fbccc05184048e79d8ad5f6be402752cfb320ef5350d236084be6852e717de26ead72bce2907016400634fb0a55c46ca2da19f9a794fab944473377c96005c9cf17811ce1decbb7168e3d7cdbadd2ca24fea5ad5fa6e0e6b0a8b527f7a561d2fc65d309dbd4beb3d3fe82a811f63928df1d61a70d6160d90977d7b852d191440b4dac8327160d1740c3817a8c84724ac4b0be3550b4b7bdb0e7f0ce8fde3b9a9e6c3daddeffab87c3b201c46d93e997d76f025e6d3650a892eaa03eca0e60a224dc4eac29da13e8cf6740211ab57969f9f6f4c1a21f599b2415fdacdd1176e98d748f32694f388e48676027fd4276f13b46fb09b7b010c9c9086b655047d6425cda44ae5d44608291e1b688e124b71073d9cfe24887de297cbfa1d7eeea650f01bdfa68b18aa7eba7f5c612d033623f5ae72cb7fccf60814455d7362869a0a18735c5e26abf58c0caeb716f8d736bcccf345f5a9e30e7354a0ed61ec69843b4726f997ee1e5f7185cff95daf51b9ecc7d106ed44f01056acb2077da671ce3757edff85c8b342ecf6daa8e0f5b99e5abfbabdc7761efcea1365ec0bc51b41b24348a20c3c3e634a165e596e69f642c13c0c030d613c22cffe268a4d2357eb27adeeecad26a929b731453da3102be2d951fe19758f6214cbbc857fb6b633c7975837d4e9916244ff22068e7fa35a7daf3decf250d0a643c4976314dd4985fe17a7fb959b76fa3d1d69545a4500ed1b3e477ce5db6f02a9845978403facdf50b293becebfd58a8f5ccc87adb0400bbf05d5f5be9a5ce1fd67475177f295ef584d19fc1649b8c23caccd454c3c926932e016f5ceae609edeedd83c84929dda9288b799b49779ad71884b02ff5946eedeb1367a34efccfb42bff644374b44c72fdfd79ffcd4174cf175571001b82302b79965f98c99fe175ed7306a112476f6163b4c38cb8be563da6e53f63dbac6a248e3012da37706aa4cce55a2b1d9e9c01472879a3da0caac28600fe6510c6c86e9781983095d843cb6b94fafc0c3d12a3f238d2bc64ce6f03489d8f59d287efe5774e2641b2af5dddd1f0ea213767c8613269601c6d03fcb5ebfffb87f5ab7881e7c8d98217b6edb04c64b135846e6e6f73e8c0b67a779114136", 0x1000}], 0x1, &(0x7f0000005e00)=[{0x100, 0x0, 0x1, "e1ca23419d2c617b81587a57dc1ee9e52f5069e1edbd53f6c6bc5e6b0289acb2c4bacfd93c53fca14010ce57aebb40b483a7a6070bf3a412a5e84c9ac55497d81ff790095445207d47ed3fcfcc1620bf07767afc3f52a6644e7bea258e496a7ca00e5406bbb484643fbd0dd00cc157b344f4a46b85e7810afcacb2e32f912d756ef4d62f0e405829234bde9009fac49196661cd29e4eff602ba2addc438e878190db03d4131763f77d3abe41661809d110c629ad94f78fb67d7085ffdd4af33d6be3da48efc5006243bfb09abd857057685927f47e67117d6dbf484f32990e280c629a5ce68a05a3b2"}], 0x100}, 0x7}, {{&(0x7f0000005f00)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@default, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000007200)=[{&(0x7f0000005f80)="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", 0x1000}, {&(0x7f0000006f80)="22aac7dda9cb21f4a4252b4c3977ef781a8c6d46b01115e8eb0363f772c2e9943d878f85eff8388504d9dfa3e2f872a3a4d042f337821a2df4820456c9ff85890bfb7ca0c54a9a2944fc7e338cd7a27e55a7135b23cefaff7c14a446e3e7cc4980d2fcdc02d933417a33163d4da18af0e47559e56168661e3f1fb9d1c9db190aae6162c7d21140245c0edeedc7d231a2d404a1961df9a5628e7d8832627f6de5da65405adfd648348397ee43e9109de2b0755497c6ba0f6693b0f8f8ba42bce168abb881bcbfa7e1bcf96b8f880d53bef1b8d178aba99f68", 0xd8}, {&(0x7f0000007080)="f6133de66af89cfa1b3be8dcbcb9a47675dc68ee6358de50a86b1837f169f530d4d61ed0d25fabaf993035544886eccbd3f2c5b17fc26e89bd224fed942ed7310c62f51482c37a359666987a82301f65eb6df028a754b63f66924413cdc993642c6893f22d2b6811aa0be7676126b4f6bf057206bdb5da9eb1454453361dad050763f2711b243cc38f4c44f44f2ac182b5f982e70f8c4bec450a50596fc15c095573756011dd41f1e6e0", 0xaa}, {&(0x7f0000007140)="76f7891a8e5327026f9ccaec1be6616cc1649975062a091e64316ed027309c052c302e5e8e4a269239f54c01ff5d5b129fce8f8f44addce3ef5542f5d28e1f41919454fd367acc77888224fad9ac3a7a3c51b80575f33d67ce571a7b033f2ee4dcb9718bc37631139d7130900ab4b7c6053ffb9a8243ad9a9842cbb1a430199b2b805eeebfaad6b17500217e1fe81d4356f3f229db42ca99886e85d290bfd43715f735aa3e3e15cac2b78817b360f616bf5578b962a5bc8426284a4e2831", 0xbe}], 0x4, &(0x7f0000007240)=[{0x90, 0x113, 0xca, "c4c0d2432e61744b28677cb7487c6638f85c48f93f7f526b8ba8918373a0612ce0528db9f477e21625961bd1dc3d43d65d48a100eb4de51804e120342969fb440c417b4e521914dd33feeb3c8f36b50fa5683f97254ca9a85fc6778d929f222f1919d17712465a94a76535d24eda339fd646b50bdd31ce9ec05949"}], 0x90}, 0x3}], 0x5, 0x1) 03:40:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2378.157331] binder: 4213:4221 got transaction to invalid handle [ 2378.187187] binder: undelivered TRANSACTION_ERROR: 29201 03:40:46 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:46 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [0x0, 0x1a0ffffffff], &(0x7f0000000140)}) 03:40:46 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x200000000000007f, 0x8004) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7ff, 0xa33533b020119410) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2378.355667] binder: 4240:4243 got transaction to invalid handle 03:40:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x1}, 0x8) [ 2378.397765] binder: undelivered TRANSACTION_ERROR: 29201 03:40:46 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [0x2], &(0x7f0000000140)}) 03:40:46 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x4, 0x4) set_thread_area(&(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x5000, 0x7fffffff, 0x5, 0x3, 0xd3, 0x3, 0x5}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x201, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:46 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [0x200000000000000], &(0x7f0000000140)}) 03:40:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f00000002c0)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e2136b701f12bd8b6ecbdfb0cf81d8b497746c05b6fdf1249430b79c3583994bb35a2760f4475eddd0db31152e6ff9c26bb2ba6cb0bfc0f1f5e90e3d4ec31d84eddfd443a9c6f771d86d7b0d3a9f44732d35dea2601abe5a31434489b172a40fbb2afbe47296c96d3141cfa377262f2e41d7425d458d2dd1c1a3dd8c3f5bac2b2ae33efe1f8f5f7b59cffb07e739e000000", 0xcf}, 0x68) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x480200, 0x0) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x731, 0x9}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1028, 0x4) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)=0x40}) 03:40:46 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000240)=0x8000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r3, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:46 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x84102, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0xfb) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x1}, &(0x7f0000000280)=0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={r0, &(0x7f00000002c0)="a43c7f094f3350de55320e1bed13efd29147dcee53408c71d16cdf37972bc8a164a20ad4b2d828cad314baff0c99ab3e15cab59530485c5deef540e5cdeb5672a8bffbff1779cb000a7934755b0ec9216a759e9f0386023f00a44b951366766a726756e21a25b3254ba6b33062f3b517729a7b6dbd2efc8e32c0942a7d2d48733309127e5f5cbdcc00a9cadfc0160be5781fecb0797afed6634e3ffac038c4", &(0x7f0000000380)=""/4096}, 0x18) 03:40:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x0, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:46 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:47 executing program 1: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f00000003c0)="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", 0xffffff1b, r0}, 0x68) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0x77b0, &(0x7f0000ffe000/0x2000)=nil, 0x1) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x401, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000002c0)=""/114) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) [ 2379.231689] binder: 4277:4286 got transaction to invalid handle [ 2379.237802] binder_transaction: 2 callbacks suppressed [ 2379.237818] binder: 4277:4286 transaction failed 29201/-22, size 0-0 line 2896 [ 2379.254292] FAULT_INJECTION: forcing a failure. [ 2379.254292] name failslab, interval 1, probability 0, space 0, times 0 [ 2379.270188] binder: undelivered TRANSACTION_ERROR: 29201 03:40:47 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0x1, 0x200000000012f, 0xa5, 0x5, 0x3ff, 0x9, 0x78d, 0xd6af, 0x7, 0xffffffffffffffc1, 0x2800000003f, 0x8, 0x73, 0xffffffff, 0xfffffffffffffffd, 0x1f], 0x2, 0x80}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) socket$alg(0x26, 0x5, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) [ 2379.277038] CPU: 0 PID: 4290 Comm: syz-executor0 Not tainted 4.20.0+ #175 [ 2379.283966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2379.283973] Call Trace: [ 2379.284000] dump_stack+0x1d3/0x2c6 [ 2379.299527] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2379.304712] ? __lock_acquire+0x62f/0x4c20 [ 2379.308950] should_fail.cold.4+0xa/0x17 [ 2379.308969] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2379.308982] ? print_usage_bug+0xc0/0xc0 [ 2379.309000] ? set_next_entity+0x2f0/0xaf0 [ 2379.309012] ? __lock_acquire+0x62f/0x4c20 [ 2379.330630] ? find_held_lock+0x36/0x1c0 [ 2379.334704] ? ___might_sleep+0x1ed/0x300 [ 2379.338851] ? arch_local_save_flags+0x40/0x40 [ 2379.343431] ? __might_fault+0x12b/0x1e0 [ 2379.343445] ? lock_downgrade+0x900/0x900 [ 2379.343467] __should_failslab+0x124/0x180 [ 2379.343484] should_failslab+0x9/0x14 [ 2379.343497] kmem_cache_alloc_node_trace+0x277/0x740 [ 2379.343516] __kmalloc_node+0x3c/0x70 [ 2379.351687] kvmalloc_node+0x65/0xf0 [ 2379.351708] video_usercopy+0xaf6/0x1760 [ 2379.351722] ? v4l_s_fmt+0xb50/0xb50 03:40:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0xffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x79f}}}, &(0x7f00000004c0)=0xfffffffffffffffa) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r3, 0x78, &(0x7f0000000240)=[@in={0x2, 0x4e22, @rand_addr=0xffffffff7fffffff}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x28}, 0x80}, @in6={0xa, 0x4e23, 0xe2f, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000300)=0x10) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x7f, 0x9, 0x1, {0x6, @pix={0x3, 0x324, 0x31303553, 0x8, 0x7, 0x100000001, 0x6, 0x3, 0x1, 0x7, 0x1, 0x7}}}) setsockopt(r0, 0x10e, 0xc, &(0x7f0000f67000), 0x0) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000140)=0x32a) [ 2379.351739] ? v4l_enumstd+0x70/0x70 [ 2379.383704] ? find_held_lock+0x36/0x1c0 [ 2379.387768] ? __fget+0x4aa/0x740 [ 2379.391235] ? lock_downgrade+0x900/0x900 [ 2379.395377] ? check_preemption_disabled+0x48/0x280 [ 2379.395400] ? smk_access+0x53b/0x700 [ 2379.395413] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2379.395435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2379.404199] ? smack_log+0x423/0x590 [ 2379.404217] ? __fget+0x4d1/0x740 [ 2379.404236] ? smk_tskacc+0x3dd/0x520 [ 2379.404254] ? video_usercopy+0x1760/0x1760 03:40:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5d1f023c126285c09070") r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) lookup_dcookie(0x86, &(0x7f00000001c0)=""/253, 0xfd) [ 2379.404267] video_ioctl2+0x2c/0x33 [ 2379.433852] v4l2_ioctl+0x154/0x1b0 [ 2379.437485] ? video_devdata+0xa0/0xa0 [ 2379.441379] do_vfs_ioctl+0x1de/0x1790 [ 2379.445266] ? __lock_is_held+0xb5/0x140 [ 2379.449325] ? ioctl_preallocate+0x300/0x300 [ 2379.453731] ? smk_curacc+0x7f/0xa0 [ 2379.457360] ? smack_file_ioctl+0x210/0x3c0 [ 2379.461675] ? fget_raw+0x20/0x20 [ 2379.465129] ? smack_file_lock+0x2e0/0x2e0 [ 2379.469372] ? fput+0x130/0x1a0 [ 2379.472655] ? do_syscall_64+0x9a/0x820 [ 2379.476639] ? do_syscall_64+0x9a/0x820 03:40:47 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2379.480625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2379.486162] ? security_file_ioctl+0x94/0xc0 [ 2379.490571] ksys_ioctl+0xa9/0xd0 [ 2379.494017] __x64_sys_ioctl+0x73/0xb0 [ 2379.497901] do_syscall_64+0x1b9/0x820 [ 2379.501785] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2379.501801] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2379.501814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2379.501830] ? trace_hardirqs_on_caller+0x310/0x310 [ 2379.501844] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2379.501865] ? prepare_exit_to_usermode+0x291/0x3b0 03:40:47 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2379.521942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2379.521965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2379.521976] RIP: 0033:0x457ec9 [ 2379.521990] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2379.521997] RSP: 002b:00007fb32eed3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2379.522010] RAX: ffffffffffffffda RBX: 00007fb32eed3c90 RCX: 0000000000457ec9 03:40:47 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x480900, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x48) connect(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80) socket$rds(0x15, 0x5, 0x0) [ 2379.522018] RDX: 0000000020000000 RSI: 00000000c0285628 RDI: 0000000000000003 [ 2379.522025] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2379.522032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32eed46d4 [ 2379.522039] R13: 00000000004c2c4b R14: 00000000004d5118 R15: 0000000000000004 03:40:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40810) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0xb) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x3f000000, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x7, 0x80) getpeername$unix(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) 03:40:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = memfd_create(&(0x7f0000000040)='proc,\x00', 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r2) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) eventfd2(0x5, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 03:40:47 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2379.709256] binder: 4310:4319 got transaction to invalid handle [ 2379.740954] binder: 4310:4319 transaction failed 29201/-22, size 0-0 line 2896 [ 2379.790034] binder: undelivered TRANSACTION_ERROR: 29201 [ 2380.231654] net_ratelimit: 26 callbacks suppressed [ 2380.231660] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.241848] protocol 88fb is buggy, dev hsr_slave_1 03:40:48 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:48 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x8}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000006880)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') close(r3) recvmmsg(r1, &(0x7f0000006440)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000001900)=""/19, 0x13, 0x8ea}, 0x3}, {{&(0x7f0000001940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000019c0)=""/2, 0x2}, {&(0x7f0000001a00)=""/72, 0x48}, {&(0x7f0000001a80)=""/88, 0x58}, {0xffffffffffffffff}, {&(0x7f0000001b00)=""/197, 0xc5}, {&(0x7f0000001c00)=""/140, 0x8c}], 0x6, &(0x7f0000001d40)=""/129, 0x81, 0x9}}, {{&(0x7f0000001e00)=@l2, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000002f00)=""/52, 0x34, 0x4}, 0x7fffffff}, {{&(0x7f0000002f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000002fc0)=""/25, 0x19}, {&(0x7f0000003000)=""/93, 0x5d}, {&(0x7f0000003080)=""/9, 0x9}, {0x0}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005140)=""/91, 0x5b, 0x1}, 0x4}, {{&(0x7f00000051c0)=@rc, 0x80, &(0x7f00000054c0)=[{0x0}, {&(0x7f0000005280)=""/223, 0xdf}, {&(0x7f0000005380)=""/184, 0xb8}, {&(0x7f0000005440)=""/107, 0x6b}], 0x4, 0x0, 0x0, 0x1ff}, 0x2915}, {{&(0x7f0000005580)=@xdp, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005600)=""/25, 0x19}, {&(0x7f0000005640)=""/155, 0x9b}, {&(0x7f0000005700)=""/126, 0x7e}, {&(0x7f0000005780)=""/222, 0xde}, {&(0x7f0000005880)=""/96, 0x60}, {&(0x7f0000005900)=""/96, 0x60}, {&(0x7f0000005980)=""/84, 0x54}], 0x7, &(0x7f0000005a80)=""/180, 0xb4, 0xce}, 0x8}, {{&(0x7f0000005d80)=@pptp, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005e00)=""/39, 0x27}, {&(0x7f0000005e40)=""/100, 0x64}, {&(0x7f0000005ec0)=""/93, 0x5d}, {&(0x7f0000005f40)=""/95, 0x5f}, {&(0x7f0000005fc0)=""/9, 0x9}, {&(0x7f0000006000)=""/146, 0x92}, {&(0x7f00000060c0)=""/250, 0xfa}, {&(0x7f00000061c0)=""/178, 0xb2}, {&(0x7f0000006280)=""/37, 0x25}], 0x9, 0x0, 0x0, 0x8}, 0x8001}], 0x7, 0x20, &(0x7f0000006640)={0x0, 0x989680}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@x25={0x9, @remote={[], 0x2}}, {&(0x7f0000000240)=""/138, 0x8a}, &(0x7f0000000100), 0xfb93fc6ab82ccc15}, 0xa0) sendmsg$nl_route_sched(r1, &(0x7f0000006700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000066c0)={&(0x7f0000006ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) fcntl$getownex(r4, 0x10, &(0x7f0000006a80)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000000), 0x0}, 0x20) write$FUSE_IOCTL(r0, &(0x7f0000000400)={0x20, 0x0, 0x5, {0xffffffffffff0000, 0x0, 0xa8, 0x7f}}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000006740)=0x5) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='rose0\x00') r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000480)={0x8, 0x9d, 0x6c792f5f}) 03:40:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r0, 0x5) r3 = dup3(r2, r0, 0x0) time(0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x40000007fff, 0x1000}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0) write$UHID_INPUT(r3, &(0x7f0000002680)={0x8, "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", 0x1000}, 0x1006) lseek(r3, 0x0, 0x3) 03:40:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x5451, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f0000000300), 0x121, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000280)=""/155, 0x9b, 0x0, &(0x7f0000000340)={0xa, 0x4e24, 0x4, @loopback, 0x7fff}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/wireless\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="8c82ea625f705019a116fac22ddf021548ba158131ffd863a581ddc88b9a9bc6026c02ea25e01532932279dfe50b7669bea64032f18a19d56e921b5b293d720d310c43e23553e2be", 0x48}], 0x1, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 03:40:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2380.726004] binder: 4344:4355 got transaction to invalid handle [ 2380.739576] binder: 4344:4355 transaction failed 29201/-22, size 0-0 line 2896 03:40:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/52, &(0x7f0000000100)=0x34) r2 = socket(0x400000000a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf5ffffff, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x6000000, 0x0, 0x0, 0x9effffff00000000]}}]}, 0x40}}, 0x0) 03:40:48 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2380.792840] binder: undelivered TRANSACTION_ERROR: 29201 03:40:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285667, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:48 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/157) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x401, 0x2a000000, 0xffff, 0x8, 0x589, 0x9}) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) fsetxattr(r0, &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000240)='/dev/null\x00', 0xa, 0x2) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000280)) ioctl$KDSETLED(r0, 0x4b32, 0x8) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=""/37, &(0x7f0000000340)=[{0xfffffffffffffeff, 0x20, 0x5, &(0x7f0000000300)=""/32}]}) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x4, @local}, 0x1c) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000400)={0x0, @reserved}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) mount$9p_unix(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x880, &(0x7f00000006c0)={'trans=unix,', {[{@access_user='access=user'}, {@privport='privport'}, {@uname={'uname', 0x3d, 'trusted.syz\x00'}}, {@version_L='version=9p2000.L'}, {@access_any='access=any'}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}, {@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}], [{@uid_lt={'uid<', r2}}, {@obj_role={'obj_role', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000b80)={0x4, &(0x7f00000007c0)=""/223, &(0x7f0000000b00)=[{0x9, 0x55, 0x925, &(0x7f00000008c0)=""/85}, {0x2, 0x8f, 0x8, &(0x7f0000000940)=""/143}, {0x1000000, 0x11, 0x7, &(0x7f0000000a00)=""/17}, {0x70bcf1bb, 0x92, 0x2, &(0x7f0000000a40)=""/146}]}) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000bc0), &(0x7f0000000c00)=0x40) openat$cgroup_procs(r1, &(0x7f0000000c40)='cgroup.threads\x00', 0x2, 0x0) r4 = msgget$private(0x0, 0x10c) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000c80)=""/116) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x1b, 0x5, 0x5c8, 0x298, 0x160, 0x0, 0x0, 0x160, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x5, &(0x7f0000000d00), {[{{@ipv6={@mcast2, @loopback, [0x0, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'lapb0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x3e, 0x10000, 0x4, 0x1}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x18, 0x7, 0x11}}, @common=@eui64={0x28, 'eui64\x00'}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv4=@multicast2, @ipv4=@multicast1, @gre_key=0x1, @port=0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x5}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, @ipv6, @icmp_id=0x66, @port=0x4e24}}}, {{@ipv6={@local, @ipv4={[], [], @multicast1}, [0xff0000ff, 0xff, 0xff000000, 0xff000000], [0xff0000ff, 0xff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'erspan0\x00', {}, {}, 0x0, 0x200, 0x4, 0x20}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@l2tp={0x30, 'l2tp\x00', 0x0, {0x1, 0x1, 0x2, 0x1, 0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x6, 0x400, 0x8}, {0x3, 0x1, 0x9}, 0x2, 0xfffffffffffff801}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x40, 0x32f}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@local, @port=0x4e24, @gre_key=0xffffffff7fffffff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) setxattr$trusted_overlay_upper(&(0x7f00000013c0)='./file0/file0\x00', &(0x7f0000001400)='trusted.overlay.upper\x00', &(0x7f0000001440)={0x0, 0xfb, 0x43, 0x0, 0x237e, "42c8be534847aca41a3e5d0a36d844a0", "2062f35e43a667e2320cc63c3f1dc1d55c8e7405fe3481d687d48d6c08eafdf14dbd97ce4d08c967edb13856867a"}, 0x43, 0x3) r5 = open(&(0x7f00000014c0)='./file0/file0\x00', 0x400000, 0xd4) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001500)=@req3={0x1, 0x7f, 0x7, 0x3, 0x200, 0x1f}, 0x1c) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001580)={0x16, 0x39, &(0x7f0000001540)="d4948a37d417eaed33737e0499d6be4ddbb57c829282e95db78f3a6b4aaeec8dd26261e10fbfb6d205d384e71027b0af86dba6b5dbf208b354"}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000015c0), &(0x7f0000001600)=0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001640)=0x1) epoll_create1(0x80000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000001680)={0x7, 0x0, [], {0x0, @reserved}}) [ 2380.947259] binder: 4373:4375 got transaction to invalid handle 03:40:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x5452, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:48 executing program 2: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) [ 2380.995746] binder: 4373:4375 transaction failed 29201/-22, size 0-0 line 2896 [ 2381.010039] QAT: Invalid ioctl [ 2381.023771] QAT: Invalid ioctl [ 2381.078172] QAT: Invalid ioctl [ 2381.086892] QAT: Invalid ioctl [ 2381.088208] binder: 4373:4375 got transaction to invalid handle [ 2381.107369] binder: undelivered TRANSACTION_ERROR: 29201 [ 2381.112951] protocol 88fb is buggy, dev hsr_slave_0 [ 2381.113010] protocol 88fb is buggy, dev hsr_slave_1 [ 2381.119212] QAT: Invalid ioctl 03:40:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc058565d, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2381.134220] binder: 4373:4375 transaction failed 29201/-22, size 0-0 line 2896 [ 2381.145114] binder: undelivered TRANSACTION_ERROR: 29201 [ 2381.155553] QAT: Invalid ioctl 03:40:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2381.191635] protocol 88fb is buggy, dev hsr_slave_0 [ 2381.191693] protocol 88fb is buggy, dev hsr_slave_0 [ 2381.196842] protocol 88fb is buggy, dev hsr_slave_1 [ 2381.201942] protocol 88fb is buggy, dev hsr_slave_1 [ 2381.212056] protocol 88fb is buggy, dev hsr_slave_0 [ 2381.217200] protocol 88fb is buggy, dev hsr_slave_1 03:40:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_deladdr={0x20, 0x15, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) [ 2381.252358] QAT: Invalid ioctl [ 2381.259406] QAT: Invalid ioctl [ 2381.283507] QAT: Invalid ioctl [ 2381.300369] QAT: Invalid ioctl [ 2381.313843] QAT: Invalid ioctl [ 2381.318892] QAT: Invalid ioctl [ 2381.325644] QAT: Invalid ioctl [ 2381.330427] QAT: Invalid ioctl [ 2381.334639] QAT: Invalid ioctl [ 2381.338787] QAT: Invalid ioctl [ 2381.343134] binder: 4402:4407 transaction failed 29201/-22, size 0-0 line 2896 03:40:49 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0xcafe, 0xffffffffffffffab, 0x1, 0x3, 0x10000}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) syz_emit_ethernet(0x140, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 03:40:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0045878, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:49 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x400, 0xfffffffffffffffe) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01003a1e2410"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800)) r3 = socket$unix(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = gettid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000700)) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x80000) connect$packet(r2, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x138, 0x6, @random="4126beaf67de"}, 0x14) sched_setscheduler(r6, 0x2000000000002, &(0x7f0000000500)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r8 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r8, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r3, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r8, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) mkdir(&(0x7f0000000480)='./file0/file0\x00', 0x1) ioctl$KVM_S390_UCAS_MAP(r8, 0x4018ae50, &(0x7f0000000280)={0xeb0c, 0x7ff, 0x3ff}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r9 = accept4(r4, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0xffffffffffffffde, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r10}, 0x14) sendto$packet(r8, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) 03:40:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") readahead(r0, 0x400, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x9, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"], &(0x7f0000000040)='G.\xdd:@\x83\xb90PL\x00', 0x400000000008000, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 03:40:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x2, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:49 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r0, &(0x7f0000000000)='at\xab\xe7\xbe\f\xcd~\a\x00\x00\x00\x00') write$FUSE_ATTR(r2, &(0x7f0000000400)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7286, 0x3, 0x2, 0x7}, &(0x7f0000000080)=0x14) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0xa47, @ipv4={[], [], @remote}, 0x8}}}, 0x84) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) setresuid(0x0, 0xee01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x480, 0x0) [ 2381.577801] binder_transaction: 1 callbacks suppressed [ 2381.577809] binder: 4417:4424 got transaction to invalid handle [ 2381.598197] binder: 4417:4424 transaction failed 29201/-22, size 0-0 line 2896 [ 2381.638830] binder_release_work: 1 callbacks suppressed [ 2381.638836] binder: undelivered TRANSACTION_ERROR: 29201 03:40:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r2}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)=""/184, &(0x7f0000000140)=0xb8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r3}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) 03:40:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0585611, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:49 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x400, 0xfffffffffffffffe) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01003a1e2410"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800)) r3 = socket$unix(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = gettid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000700)) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x80000) connect$packet(r2, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x138, 0x6, @random="4126beaf67de"}, 0x14) sched_setscheduler(r6, 0x2000000000002, &(0x7f0000000500)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r8 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r8, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r3, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r8, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) mkdir(&(0x7f0000000480)='./file0/file0\x00', 0x1) ioctl$KVM_S390_UCAS_MAP(r8, 0x4018ae50, &(0x7f0000000280)={0xeb0c, 0x7ff, 0x3ff}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r9 = accept4(r4, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0xffffffffffffffde, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r10}, 0x14) sendto$packet(r8, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) 03:40:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x3, 0x4, 0x6, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) getsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000380), &(0x7f00000003c0)=0x4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f", 0x7, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) request_key(&(0x7f0000000400)='ceph\x00', 0x0, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffe, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000440)={@local, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x5}, 0xc) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(r5, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x2800, 0x0) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) [ 2381.967721] binder: 4445:4452 got transaction to invalid handle 03:40:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0045878, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2382.011333] binder: 4445:4452 transaction failed 29201/-22, size 0-0 line 2896 03:40:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000200)={0x1, 'bridge_slave_1\x00', 0x3}, 0x18) prlimit64(r3, 0x7, &(0x7f0000000180)={0xc7, 0x962}, &(0x7f00000001c0)) sigaltstack(&(0x7f0000000000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x2000)=nil, &(0x7f0000000140)) [ 2382.057115] binder: 4445:4452 got transaction to invalid handle [ 2382.074965] binder: undelivered TRANSACTION_ERROR: 29201 [ 2382.081068] binder: 4445:4452 transaction failed 29201/-22, size 0-0 line 2896 [ 2382.088727] binder: undelivered TRANSACTION_ERROR: 29201 03:40:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x8000, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, 0x8, 0x65, 0x3ff, 0x3, "e8329e"}, 0xf) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000004c0)={0x2, [0x0, 0x0]}, &(0x7f0000000500)=0xc) 03:40:50 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0189436, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:50 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc020660b, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x12) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x100, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm_plock\x00', 0x200, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x2000000000}, 0xffffffffffffff7d) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001f00)={@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x1, 0x1, 0x0, 0x2}}, {&(0x7f0000001fc0)=""/183, 0x8e}}, 0xfffffffffffffda1) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='+$\x00') setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x6}, 0x14) msgget$private(0x0, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) clock_gettime(0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x80000) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xc0109207, 0x0) syz_open_dev$usb(0x0, 0x1ff, 0x0) [ 2382.252608] binder: 4468:4478 got transaction to invalid handle [ 2382.285541] binder: 4468:4478 transaction failed 29201/-22, size 0-0 line 2896 [ 2382.322278] binder: undelivered TRANSACTION_ERROR: 29201 03:40:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2382.392055] Unknown ioctl 1090549505 03:40:50 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x5450, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x2400000000032, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x3ff, 0x4) r2 = accept(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) pread64(r0, &(0x7f0000000280)=""/39, 0x27, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x4}, &(0x7f0000000240)=0x8) [ 2382.542306] binder: 4495:4498 got transaction to invalid handle [ 2382.573532] binder: undelivered TRANSACTION_ERROR: 29201 [ 2382.736956] Unknown ioctl 1090549505 03:40:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r3, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xfff, 0x4) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x400800, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x0, 0x7f, 0x20, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x7f}, &(0x7f0000000340)=0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cmdline\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x2, 0xe34, 0x2}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @multicast1}}, 0x1ff, 0x10000, 0xc2, 0x8000, 0x8}, 0x98) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x4000000000000001}, 0x8) close(r0) sendto$inet6(r0, &(0x7f0000000600)="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", 0x1000, 0x40000, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x100000001}, 0x1c) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000380)=0x2) 03:40:50 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x5460, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045510, &(0x7f00000000c0)={0x3f000000, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}}) 03:40:50 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f00000001c0)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) r1 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) openat(r1, &(0x7f0000000280)='./file0\x00', 0x200000, 0x10000000) rmdir(&(0x7f0000000080)='./control\x00') 03:40:50 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x4020940d, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2382.900580] binder: 4509:4516 got transaction to invalid handle 03:40:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x12) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x100, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm_plock\x00', 0x200, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x2000000000}, 0xffffffffffffff7d) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001f00)={@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x1, 0x1, 0x0, 0x2}}, {&(0x7f0000001fc0)=""/183, 0x8e}}, 0xfffffffffffffda1) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='+$\x00') setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x6}, 0x14) msgget$private(0x0, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) clock_gettime(0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x80000) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xc0109207, 0x0) syz_open_dev$usb(0x0, 0x1ff, 0x0) [ 2382.943216] binder: 4509:4516 got transaction to invalid handle [ 2382.967442] binder: undelivered TRANSACTION_ERROR: 29201 [ 2382.981748] binder: undelivered TRANSACTION_ERROR: 29201 03:40:50 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x40049409, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:50 executing program 1: getcwd(&(0x7f0000000380)=""/240, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvfrom$packet(r1, &(0x7f0000000600)=""/62, 0x3e, 0x40010002, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) unlink(&(0x7f0000000900)='./file0\x00') getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/28, &(0x7f00000008c0)=0x1c) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r1, &(0x7f0000000240)="97b7c30341", 0x5, 0x8000, &(0x7f0000000340)={0xa, 0x4e22, 0x4, @empty, 0x8}, 0x1c) chown(&(0x7f0000000280)='./file0\x00', 0x0, r3) r4 = semget(0x3, 0x0, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000880)=""/15) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000300)={0x7c70, 0x4, 0x1}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000480)={0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0x4, 'lblcr\x00', 0x0, 0x9, 0x7c}, 0x2c) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x7, 0x40}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x800000000002, 0x84043) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000500)={0xd, 0x0, 0x1}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040c08}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680), &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) ustat(0xffffffffc0000000, &(0x7f00000001c0)) read$eventfd(r1, &(0x7f00000005c0), 0x8) 03:40:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 2383.077956] Unknown ioctl 1090549505 [ 2383.183173] binder: 4538:4545 got transaction to invalid handle [ 2383.285797] binder: undelivered TRANSACTION_ERROR: 29201 [ 2383.388551] IPVS: ftp: loaded support on port[0] = 21 03:40:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r3, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:51 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0205647, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2384.017567] IPVS: ftp: loaded support on port[0] = 21 03:40:51 executing program 2: ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xbc, 0xc80) syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000008c0)={0x0, 0x9f, "b4c83d95a230b0ebe73b17bd0bae70c25d1db052133a7c7cbd73b468c446825c16013c2081d57ffe0e2a36854bc7e0b479b54fdbd30229adf029e013b8b009763fd563b76e391f61dbdcde8ee87c57e3a1fd931ad6b0b71d11ddf5bcbe67af974ce19e812f59c99facbbea858b6b7ad7419d65479f2c993a01d374558a7b435aefe1319ec9cf84f43d3caf3299edcf3b2b07ece3b21db3fab95c9a3b591ecd"}, &(0x7f00000039c0)=0xa7) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000003a00)={0x0, 0x8001, 0x0, 0x2, 0x5}, &(0x7f0000003a40)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003b80)={0x0, 0xc8, &(0x7f0000003a80)=[@in6={0xa, 0x4e21, 0x615, @mcast1, 0xffffffffffffffff}, @in6={0xa, 0x4e24, 0x4, @remote, 0x70}, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x2}, @in6={0xa, 0x4e23, 0x100000001, @remote}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xb75, @loopback, 0xa9f}, @in6={0xa, 0x4e22, 0x9, @local, 0x4}]}, &(0x7f0000003bc0)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003cc0)=[{&(0x7f0000000100)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="6c9a044c3cc930f2e7f9c152a3707a4914ae2a8fdf23eb37dcb58419a2f1d8e455225a8eeda4411751f2feacf3678b1132a871da5822abe499516a1c26f729", 0x3f}, {&(0x7f0000000380)="2c5f29f4e54fdd3365b51f7706ac6976f30c25ba1152f738f0f6ae75b2220a69c5481efaf1de86a65806615c978fc37513e09274e753c333f9598cfb076defb62e67263ff91d568f4947d7ad1fb9ef1cad3eb1f7098cee9b05b8346e7b9741e5268a3543ce72bb85dc7642b3b8b8fbd4f53d31ebe09ac78fa1067cef773b388c85c6aee6c7aeaeb7c75c564265810f8cf445dfb7bf806ced73cb2496492f4eefba0cdbe41c167328854f6d3ac879daf8b54c3064d7edc8a71eea4cd5785ac7df20cefff8ba4fbc834e69739b9acaf103d04c2fd756739ad4f23b51753f467afe5dedc46192ce839f20b5883fc122657a29dfb20f", 0xf4}], 0x2, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @multicast2}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x50, 0x40}, {&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x9, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f0000000480)="4bfed8225b3415267acf43d4761a032732cc1044a4539904402acbe798132dfd44acf99367ba33659e2523471672fff10df64cce637f6e8061cbb167e86f9326d4388e52fd3c9c33f8f0978f8cf750c01a077c7e7ecf401f27e4816efdc18a125a81e800b996a22c81ec9612007a", 0x6e}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000000580)="531b55497abfcd6b06b79622736d08afeede8f29a70bbe367453b5aa4ab5c6703704446492366ac3e91ceb305ff7290a9401e0fce59f43c71ce423e6f69216855aba36104dac9f2c6df2dbb77264a6ebd1b09425b439f18f3461d69123d9ef9cfd5f81d17416379e3c35afef35f9ef1b7467c00bc74540e19227d1376e1b309b9c112f3abaa06c96a892ef0fcc3307c50bdf7606c8946216235e1daeab5d2ca2da9a8a", 0xa3}, {&(0x7f0000000640)="8a1cdeb9956d9d487264577b95934260aa1cfb54a77d68076599601d5f638c9f78f2f519084c80120cbad1989ff30ef9f557f1f1f38343eb1bc0d49f450f22715fc542383e3ffa22b3ac26d17b646405063004f5e3b88df93e9b0fa5c91361df45dc9a6fae74a7ff2fbf08d1cd9ff5f4ae1204186cae8e8e15d21dc04e1abd0008afe47c8fd1207372e0a68d1de13853db8d1b016eedb40c2f965b8e9eb97a278e3000859e", 0xa5}, {&(0x7f0000000240)="4e36fc4cb066930907eb5b9b36fcbc26fa3e0642c1e2027055b8b6e179fa6b94550914", 0x23}], 0x6, &(0x7f0000003c00)=[@sndinfo={0x20, 0x84, 0x2, {0x100, 0x8000, 0x4, 0x8, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @remote}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1000}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8, 0x205, 0x5, 0x10001, 0x9, 0x7, 0x8, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x3, 0x20c, 0x8000, 0x1, 0x8, 0xda4c, 0x5, r4}}], 0xb8, 0x20000000}], 0x2, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40881, 0x0, 0x0) fchdir(r1) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x8ff, 0x2, 0x100, 0x0, 0x4}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000980)={0x8, "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", 0x1000}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/215, 0xd7) sendfile(r5, r5, &(0x7f00000000c0)=0x900, 0x8080fffffffe) r6 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000003d40)={0x2, {0x0, 0x400, 0x50, 0x4}, {0x6, 0x1ff, 0x1, 0x7}, {0x800, 0x4}}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x121001, 0x0) 03:40:51 executing program 4: seccomp(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x1fe, 0x1400}], 0x0, 0x0) open(0x0, 0x440000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 03:40:51 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0205649, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2384.090547] binder: 4558:4562 got transaction to invalid handle [ 2384.103375] kauditd_printk_skb: 207 callbacks suppressed [ 2384.103386] audit: type=1326 audit(2000000451.920:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4561 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 [ 2384.139720] binder: 4558:4562 got transaction to invalid handle 03:40:52 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0x5421, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2384.182141] binder: undelivered TRANSACTION_ERROR: 29201 [ 2384.193308] binder: undelivered TRANSACTION_ERROR: 29201 03:40:52 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:52 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0585609, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2384.334562] binder_transaction: 6 callbacks suppressed [ 2384.334575] binder: 4585:4586 transaction failed 29201/-22, size 0-0 line 2896 [ 2384.904160] audit: type=1326 audit(2000000452.720:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4561 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 [ 2385.271647] net_ratelimit: 17 callbacks suppressed [ 2385.271654] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.281705] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.351632] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.351667] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.356702] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.367024] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.372164] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.831638] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.836781] protocol 88fb is buggy, dev hsr_slave_1 03:40:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ', 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ', 0xfffffffffffffffa) keyctl$negate(0xd, r1, 0x2, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x4000000031, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, 0x0, 0x1000) pipe(&(0x7f0000000240)) 03:40:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc058560f, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:54 executing program 4: r0 = perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000880)={0x3, 0x0, 0x9, 0x2, 0x7ff, 0x4, 0xfffffffffffffff9, 0x42, 0x0, 0x8}) finit_module(r1, &(0x7f0000000440)='\x00', 0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x56) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000001200)=""/169, &(0x7f0000000200)=0xa9) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="9602b6b3c582d1bc17c654ab2d867963e2117be6fdeb3a1efedaa97251b8dad48b314a0975391f158c0360e881aebf906819cca029bd1fb8891612e986bd8874c507128cead649506961622ded9b900a543324926f2eb475a8c2e436b617209a68f411a2f6718b855d61996327796c0aadde6b07b9d04a06dcd5a0d533adbb43e2ca1f20d43fb14b96cb7a0f67e76332850df1eab9bf6fcb722438b780e8924b9d86d01ea08c56db3a63382c9d0814662615910eed701c60830a72d4b3ef42c6eaa12e11abd888df5d91e2b7c23b4d658730789f2abacd1ed0b8f994b6ab49c6e4391f6f12d3c7728f51868fe06c39c20099b90df7074987939f91d780d712a71f90354b64f3e5bd250a40b7006f5e8ba91df94739daf1e86331000000009736fb1439028ab7bf070bb679c5b7c18c00000000000000008558b395ea76f3cc32d0d33690b0e3f1e69bf0f08ec930e8bc1f7b0904e6f5ea1408563db5321257b71806afd16cd18b6aa139e796c75f059158233a735b0fab04f4a0bd0ffbbed7c18b434b1b4ed63cab1e81337dea16fbc93d7a1f45a9b54a3601cf9ca60e31ac8ae11d44fb9e9fb1ba402bc7ca"], 0x1}}, 0x44801) syz_mount_image$reiserfs(&(0x7f0000000b00)='reiserfs\x00', &(0x7f0000000b40)='./file0\x00', 0x58e, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000c00)="215c304bdd20751b4426a752fc45f039267482f0eb4df23f2c4ba8b97e569437de83278e4ff55abb8f5fea5340bc67add01a5731851db26b7eb2762947a6448a782eff6e67d9397cb5ed4bb558aefcefbfe22eb9ce6a1c6f9308b05b10246ccf", 0x60}], 0x440, &(0x7f0000001180)=ANY=[@ANYBLOB="0800b09f8258c8b71f16613a2c7461696c733d73"]) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) r5 = geteuid() lsetxattr$security_capability(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b80)='security.capability\x00', &(0x7f0000000a80)=@v3={0x3000000, [{0x0, 0x6a34}, {0x7f, 0x3730}], r5}, 0x18, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000012c0)=0xc, 0x4) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c9b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000fffffffe, @empty}, 0x0) ustat(0x80000000, &(0x7f0000000180)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) socket$inet(0x2, 0x7, 0x85) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="73656375726974792e76944f0000000000b0050000ffffef001059e922d9601557e2a6b83362b847a65ffbf2d9a4adeb2b8ff1fd30a2ceb0ed8cab47136bcdc9f06a759e9b1fd095548d717739e5dcf81f80e11717ff0dd4fa7eaa5051994f578b74b6943ef417"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') 03:40:54 executing program 2: pipe(0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x4, 0x2, [0x3, 0x7]}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0xfffffffffffffca2, 0xfa00, {&(0x7f00000000c0)}}, 0x18) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:40:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r3, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) [ 2386.291486] binder: 4602:4604 transaction failed 29201/-22, size 0-0 line 2896 03:40:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x4, 0x0, 0x5, [], &(0x7f0000000140)}) 03:40:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) flock(r0, 0x3) r3 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") r4 = open(&(0x7f0000000280)='./file0\x00', 0x400280, 0x24) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x48, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x2, @local, 0x80000000}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x5}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0x7c201605, 0xfffffffffffff801, 0xf8a, 0x2, 0x51}, &(0x7f0000000480)=0x98) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000004c0)={@mcast2, r1}, 0x14) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000500)) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000540)={0x2, 0x52, "d87dad491da42b07fe1b5a30cac0fc851ec1a87a00488d1190a5748556e192218ba569b05b11a7fa61a680aaf7dfb3859d4efedc89a695e27378d271d530c221842c3a3f475984d066aed958a51c44f8eb2b"}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x0, @empty, 0x20}, @in={0x2, 0x4e20, @multicast1}], 0x7c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680)="9a8c7b3c75dbaf4e177f08c790b0984b363513595532b0e3348b041eb09045b7bacf64f67d124663c2404a0e2f67bb61db344fe7c90b33e70ea0337143ca1706f43e76724147425886d609645ec05fcddb4f676eb6f957a7f31ffd55be15f22bf8394d67b6b2be677a5c01c1c2e5362d71dfb4409948e6745c5583aadc995105c377442a338f4cfa79e0bd3b0684b13530641ef7e34424777b7b8930d78c99", 0x9f, r4}, 0x68) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000007c0)={'HL\x00'}, &(0x7f0000000800)=0x1e) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000840)={0x1, 0x0, {0x56, 0x7c689851, 0x1, 0x5}}) r6 = open(&(0x7f0000000880)='./file0\x00', 0x40000, 0x100) ioctl$VIDIOC_G_JPEGCOMP(r6, 0x808c563d, &(0x7f00000008c0)) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000980)={0xfffffffffffffffe, 0xfffffffffffffc00, 0x4, {0x2, @vbi={0x7, 0x7ff, 0x100000000, 0x77757f7f, [0x1310, 0x80], [0x40, 0x8], 0x13a}}}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000a80)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001b40)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x6, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000b40)=""/4096}, &(0x7f0000001bc0)=0x78) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001c00)={r5, 0x1000, 0x5, 0xc0fa}, &(0x7f0000001c40)=0x10) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000001c80)=0x9, &(0x7f0000001cc0)=0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001d00)=0x100000001, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001d40)=""/167) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000001e00)={'vxcan1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x1) r8 = semget(0x0, 0x3, 0x40) lstat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001f40)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000001f80)={{0xa1, r2, r9, r2, r10}, 0x20, 0x1000, 0xfffffffffffffff9}) [ 2386.471737] protocol 88fb is buggy, dev hsr_slave_0 03:40:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xfffffdfd, 0x5, [], &(0x7f0000000140)}) [ 2386.507859] binder: 4622:4626 transaction failed 29201/-22, size 0-0 line 2896 03:40:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2386.662840] input: syz1 as /devices/virtual/input/input17 03:40:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xffffffffa0010000, 0x5, [], &(0x7f0000000140)}) 03:40:54 executing program 1: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856813000900070014cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x13f, 0xa}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1dc, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7306}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88ef00000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x48000}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3000000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdae0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff2310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140)=0x3, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01020000000000000000030000004800010044000400200001000a00000000000000fe8000000000000000000000000000bb00000000200002000a00000000008000ff0f000000000000000000000000000100000000"], 0x5c}}, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x4, 0x0, 0xfd19}, 0x4}, 0xa) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0xffffffff, 0x3, 0x6, 0xc7f9}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) [ 2386.733909] binder_transaction: 3 callbacks suppressed [ 2386.733916] binder: 4642:4647 got transaction to invalid handle [ 2386.762063] binder: 4642:4647 transaction failed 29201/-22, size 0-0 line 2896 03:40:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xfdfdffff00000000, 0x5, [], &(0x7f0000000140)}) 03:40:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2386.852061] binder_release_work: 3 callbacks suppressed [ 2386.852067] binder: undelivered TRANSACTION_ERROR: 29201 [ 2386.947321] binder: 4659:4660 got transaction to invalid handle [ 2386.955059] input: syz1 as /devices/virtual/input/input18 [ 2387.009199] binder: 4659:4660 transaction failed 29201/-22, size 0-0 line 2896 [ 2387.071464] binder: undelivered TRANSACTION_ERROR: 29201 03:40:54 executing program 4: r0 = perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000880)={0x3, 0x0, 0x9, 0x2, 0x7ff, 0x4, 0xfffffffffffffff9, 0x42, 0x0, 0x8}) finit_module(r1, &(0x7f0000000440)='\x00', 0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x56) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000001200)=""/169, &(0x7f0000000200)=0xa9) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="9602b6b3c582d1bc17c654ab2d867963e2117be6fdeb3a1efedaa97251b8dad48b314a0975391f158c0360e881aebf906819cca029bd1fb8891612e986bd8874c507128cead649506961622ded9b900a543324926f2eb475a8c2e436b617209a68f411a2f6718b855d61996327796c0aadde6b07b9d04a06dcd5a0d533adbb43e2ca1f20d43fb14b96cb7a0f67e76332850df1eab9bf6fcb722438b780e8924b9d86d01ea08c56db3a63382c9d0814662615910eed701c60830a72d4b3ef42c6eaa12e11abd888df5d91e2b7c23b4d658730789f2abacd1ed0b8f994b6ab49c6e4391f6f12d3c7728f51868fe06c39c20099b90df7074987939f91d780d712a71f90354b64f3e5bd250a40b7006f5e8ba91df94739daf1e86331000000009736fb1439028ab7bf070bb679c5b7c18c00000000000000008558b395ea76f3cc32d0d33690b0e3f1e69bf0f08ec930e8bc1f7b0904e6f5ea1408563db5321257b71806afd16cd18b6aa139e796c75f059158233a735b0fab04f4a0bd0ffbbed7c18b434b1b4ed63cab1e81337dea16fbc93d7a1f45a9b54a3601cf9ca60e31ac8ae11d44fb9e9fb1ba402bc7ca"], 0x1}}, 0x44801) syz_mount_image$reiserfs(&(0x7f0000000b00)='reiserfs\x00', &(0x7f0000000b40)='./file0\x00', 0x58e, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000c00)="215c304bdd20751b4426a752fc45f039267482f0eb4df23f2c4ba8b97e569437de83278e4ff55abb8f5fea5340bc67add01a5731851db26b7eb2762947a6448a782eff6e67d9397cb5ed4bb558aefcefbfe22eb9ce6a1c6f9308b05b10246ccf", 0x60}], 0x440, &(0x7f0000001180)=ANY=[@ANYBLOB="0800b09f8258c8b71f16613a2c7461696c733d73"]) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) r5 = geteuid() lsetxattr$security_capability(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b80)='security.capability\x00', &(0x7f0000000a80)=@v3={0x3000000, [{0x0, 0x6a34}, {0x7f, 0x3730}], r5}, 0x18, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000012c0)=0xc, 0x4) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c9b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000fffffffe, @empty}, 0x0) ustat(0x80000000, &(0x7f0000000180)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) socket$inet(0x2, 0x7, 0x85) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="73656375726974792e76944f0000000000b0050000ffffef001059e922d9601557e2a6b83362b847a65ffbf2d9a4adeb2b8ff1fd30a2ceb0ed8cab47136bcdc9f06a759e9b1fd095548d717739e5dcf81f80e11717ff0dd4fa7eaa5051994f578b74b6943ef417"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') 03:40:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x1a0ffffffff, 0x5, [], &(0x7f0000000140)}) [ 2387.278142] input: syz1 as /devices/virtual/input/input19 03:40:55 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:55 executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:40:55 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in=@broadcast}}, {{@in6=@loopback}}}, &(0x7f0000000140)=0xe8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0xf00, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) 03:40:55 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xfdfdffffffffffff, 0x5, [], &(0x7f0000000140)}) [ 2387.360082] binder: 4676:4679 got transaction to invalid handle 03:40:55 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x2000000, 0x5, [], &(0x7f0000000140)}) [ 2387.419009] binder: 4676:4679 transaction failed 29201/-22, size 0-0 line 2896 03:40:55 executing program 2: r0 = perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000880)={0x3, 0x0, 0x9, 0x2, 0x7ff, 0x4, 0xfffffffffffffff9, 0x42, 0x0, 0x8}) finit_module(r1, &(0x7f0000000440)='\x00', 0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x56) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000001200)=""/169, &(0x7f0000000200)=0xa9) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x1}}, 0x44801) syz_mount_image$reiserfs(&(0x7f0000000b00)='reiserfs\x00', &(0x7f0000000b40)='./file0\x00', 0x58e, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000c00)="215c304bdd20751b4426a752fc45f039267482f0eb4df23f2c4ba8b97e569437de83278e4ff55abb8f5fea5340bc67add01a5731851db26b7eb2762947a6448a782eff6e67d9397cb5ed4bb558aefcefbfe22eb9ce6a1c6f9308b05b10246ccf", 0x60}], 0x440, &(0x7f0000001180)=ANY=[@ANYBLOB="0800b09f8258c8b71f16613a2c7461696c733d73"]) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) r5 = geteuid() lsetxattr$security_capability(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b80)='security.capability\x00', &(0x7f0000000a80)=@v3={0x3000000, [{0x0, 0x6a34}, {0x7f, 0x3730}], r5}, 0x18, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000012c0)=0xc, 0x4) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c9b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000fffffffe, @empty}, 0x0) ustat(0x80000000, &(0x7f0000000180)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) socket$inet(0x2, 0x7, 0x85) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="73656375726974792e76944f0000000000b0050000ffffef001059e922d9601557e2a6b83362b847a65ffbf2d9a4adeb2b8ff1fd30a2ceb0ed8cab47136bcdc9f06a759e9b1fd095548d717739e5dcf81f80e11717ff0dd4fa7eaa5051994f578b74b6943ef417"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') 03:40:55 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x1000000, 0x5, [], &(0x7f0000000140)}) [ 2387.500598] binder: undelivered TRANSACTION_ERROR: 29201 03:40:55 executing program 1: r0 = perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000880)={0x3, 0x0, 0x9, 0x2, 0x7ff, 0x4, 0xfffffffffffffff9, 0x42, 0x0, 0x8}) finit_module(r1, &(0x7f0000000440)='\x00', 0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x56) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000001200)=""/169, &(0x7f0000000200)=0xa9) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="9602b6b3c582d1bc17c654ab2d867963e2117be6fdeb3a1efedaa97251b8dad48b314a0975391f158c0360e881aebf906819cca029bd1fb8891612e986bd8874c507128cead649506961622ded9b900a543324926f2eb475a8c2e436b617209a68f411a2f6718b855d61996327796c0aadde6b07b9d04a06dcd5a0d533adbb43e2ca1f20d43fb14b96cb7a0f67e76332850df1eab9bf6fcb722438b780e8924b9d86d01ea08c56db3a63382c9d0814662615910eed701c60830a72d4b3ef42c6eaa12e11abd888df5d91e2b7c23b4d658730789f2abacd1ed0b8f994b6ab49c6e4391f6f12d3c7728f51868fe06c39c20099b90df7074987939f91d780d712a71f90354b64f3e5bd250a40b7006f5e8ba91df94739daf1e86331000000009736fb1439028ab7bf070bb679c5b7c18c00000000000000008558b395ea76f3cc32d0d33690b0e3f1e69bf0f08ec930e8bc1f7b0904e6f5ea1408563db5321257b71806afd16cd18b6aa139e796c75f059158233a735b0fab04f4a0bd0ffbbed7c18b434b1b4ed63cab1e81337dea16fbc93d7a1f45a9b54a3601cf9ca60e31ac8ae11d44fb9e9fb1ba402bc7ca"], 0x1}}, 0x44801) syz_mount_image$reiserfs(&(0x7f0000000b00)='reiserfs\x00', &(0x7f0000000b40)='./file0\x00', 0x58e, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000c00)="215c304bdd20751b4426a752fc45f039267482f0eb4df23f2c4ba8b97e569437de83278e4ff55abb8f5fea5340bc67add01a5731851db26b7eb2762947a6448a782eff6e67d9397cb5ed4bb558aefcefbfe22eb9ce6a1c6f9308b05b10246ccf", 0x60}], 0x440, &(0x7f0000001180)=ANY=[@ANYBLOB="0800b09f8258c8b71f16613a2c7461696c733d73"]) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) r5 = geteuid() lsetxattr$security_capability(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b80)='security.capability\x00', &(0x7f0000000a80)=@v3={0x3000000, [{0x0, 0x6a34}, {0x7f, 0x3730}], r5}, 0x18, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000012c0)=0xc, 0x4) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c9b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000fffffffe, @empty}, 0x0) ustat(0x80000000, &(0x7f0000000180)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) socket$inet(0x2, 0x7, 0x85) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="73656375726974792e76944f0000000000b0050000ffffef001059e922d9601557e2a6b83362b847a65ffbf2d9a4adeb2b8ff1fd30a2ceb0ed8cab47136bcdc9f06a759e9b1fd095548d717739e5dcf81f80e11717ff0dd4fa7eaa5051994f578b74b6943ef417"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') 03:40:55 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x55c1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={{0x2000000, 0x1, 0x9, 0x5, 0x8, 0x5}, 0x2bbc, 0x8, 0x7, 0x3, 0x80000000, "b2d68cc26a1ef927994c75ff61b865ba0a22baa7e3047380506106f893395c4e0d4adb96645fa1cf4a6d8df8a1e5a118de44e0efe8356d3cfbb6c6b4f40c31a673c321467e6de41b9cba03835c1ff53894b6edb471674653526c9ed598e2979d06c6eabf6bb644bdd9f7e6baafc6f3c188ab9e80b12ad2f969f6027204ac3931"}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x2}}, 0x10) syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300002, 0xffffff29, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic={0x3, 0xfffffffffffffffa, 0x9}) 03:40:55 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x2, 0x5, [], &(0x7f0000000140)}) [ 2387.683268] binder: 4710:4711 got transaction to invalid handle [ 2387.748067] binder: 4710:4711 transaction failed 29201/-22, size 0-0 line 2896 [ 2387.781279] binder: undelivered TRANSACTION_ERROR: 29201 [ 2387.831377] input: syz1 as /devices/virtual/input/input20 [ 2387.938675] input: syz1 as /devices/virtual/input/input21 03:40:56 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:56 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:56 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xffe7, 0x5, [], &(0x7f0000000140)}) 03:40:56 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x8, 0x5, 0x9, 0x5, 'syz0\x00', 0x2}, 0x6, 0x20, 0xffff, r2, 0x3, 0x9, 'syz1\x00', &(0x7f0000000100)=['hfs\x00', 'hfs\x00', 'hfs\x00'], 0xc, [], [0x7fff, 0x100, 0x0, 0x1]}) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="63726561746f723d1bdae85f2c636f6465706167653d78"]) 03:40:56 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1fc00000000, 0x80101) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000000c0)={0x7e95, 0xfffffffffffff800, 0x3481, {r3, r4+30000000}, 0x200, 0x5}) ppoll(&(0x7f00000004c0)=[{r1}], 0x1, &(0x7f0000000500)={0x77359400}, 0x0, 0x0) close(r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:40:56 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000140)='cgroup-eth1-bdev\x00', 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0xfffffffffffffce8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x0, {0x77359400}, 0x4, 0x101}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000580)={0x0, 0x1001, 0x4, 0x94cd}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0), 0xebc6604d02dbcd0b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000600)=""/232, 0x0, 0x0, [], 0x0, 0x9}, 0x48) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040)) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) clone(0x20000000, &(0x7f0000000980)="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", 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000005c0)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, 0x0) syncfs(0xffffffffffffffff) fchdir(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r6, &(0x7f0000000280), 0x80000003) [ 2388.391943] binder: 4737:4739 got transaction to invalid handle [ 2388.433916] binder: 4737:4739 transaction failed 29201/-22, size 0-0 line 2896 03:40:56 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xfdfd, 0x5, [], &(0x7f0000000140)}) 03:40:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0xa6, 0x29, 0x1, {0x4, [{{0x4, 0x1, 0x5}, 0x0, 0xffffffff, 0x7, './file0'}, {{0x0, 0x1, 0x3}, 0x100000001, 0x2, 0x7, './file0'}, {{0x20, 0x1, 0x3}, 0xc43a, 0xffffffffffffffff, 0x7, './file0'}, {{0x93, 0x1, 0x3}, 0x2, 0x80, 0x7, './file0'}, {{0x8, 0xffff, 0x4}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x3}, 0x2) ioctl$TCFLSH(r1, 0x5437, 0x0) [ 2388.483293] binder: undelivered TRANSACTION_ERROR: 29201 03:40:56 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:40:56 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:56 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xe7ffffffffffffff, 0x5, [], &(0x7f0000000140)}) [ 2388.658439] binder: 4763:4767 got transaction to invalid handle [ 2388.698534] binder: 4763:4767 transaction failed 29201/-22, size 0-0 line 2896 [ 2388.711438] mkiss: ax0: crc mode is auto. 03:40:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 2388.752585] binder: undelivered TRANSACTION_ERROR: 29201 03:40:57 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:57 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x4000) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x4000) r4 = socket$caif_stream(0x25, 0x1, 0x3) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x2, 0x24400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)='\\\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r5, r6, 0x0, 0x1, &(0x7f0000000240)='\x00', r7}, 0x30) ppoll(&(0x7f0000000100)=[{r0, 0x800c}, {r1, 0x20}, {r2}, {r3}, {r4, 0x40}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={0x4e52}, 0x8) gettid() setxattr$trusted_overlay_upper(0x0, &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') preadv(r8, &(0x7f00000017c0), 0x1a1, 0x0) ioctl$LOOP_GET_STATUS64(r8, 0x4c05, 0x0) 03:40:57 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x1a0, 0x5, [], &(0x7f0000000140)}) 03:40:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000140)='cgroup-eth1-bdev\x00', 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0xfffffffffffffce8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x0, {0x77359400}, 0x4, 0x101}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000580)={0x0, 0x1001, 0x4, 0x94cd}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0), 0xebc6604d02dbcd0b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000600)=""/232, 0x0, 0x0, [], 0x0, 0x9}, 0x48) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040)) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) clone(0x20000000, &(0x7f0000000980)="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", 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000005c0)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, 0x0) syncfs(0xffffffffffffffff) fchdir(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r6, &(0x7f0000000280), 0x80000003) 03:40:57 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9c0ee58210cd9bc}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x48080) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xc1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="2b000000e84d3213d3eef08105afc0916d79032d2b94123991fdb985d1a0c87cb6b7cca9ba000000000000000000008223b0c55c1d2e035ba5f3f6d5026df59a59c8b11ca2b1cbbffe6273b5d918fab07aafb63c72bb492c84f8b3f1cd1db3bd0342621020be2449e5aa1c37cec9c6614c2fc7a72733c08fe1c74c75ff81267d2a9c7887c907414a3649e683f49271d37e15058d8543be1611b1894eef973414e14efd2136d1"], &(0x7f0000000380)=0x33) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x400800, 0x0) openat$cgroup_procs(r4, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @bcast, r2}) [ 2389.386281] binder: 4804:4808 got transaction to invalid handle 03:40:57 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xe7ffffff, 0x5, [], &(0x7f0000000140)}) 03:40:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x7) ioctl$SIOCRSSL2CALL(r1, 0x894c, 0x0) [ 2389.432932] binder: 4804:4808 transaction failed 29201/-22, size 0-0 line 2896 [ 2389.488059] binder: undelivered TRANSACTION_ERROR: 29201 03:40:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:57 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xe7ff, 0x5, [], &(0x7f0000000140)}) 03:40:57 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000f80)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, 0x1ff, 0x9, 0x4, 0x400, 0x8, 0x80008, r4}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0xd, @pix={0x7, 0x12722fab, 0x0, 0x7, 0x2, 0x1ff, 0xf, 0x4, 0x1, 0x7, 0x1, 0x2}}) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@null=' \x00', 0x3, 'vcan0\x00'}) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) [ 2389.718982] binder: 4832:4835 got transaction to invalid handle 03:40:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2389.785813] binder: 4832:4835 transaction failed 29201/-22, size 0-0 line 2896 [ 2389.821981] binder: undelivered TRANSACTION_ERROR: 29201 03:40:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x801) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x84202, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x40000000003) r3 = open(&(0x7f0000000200)='./file0\x00', 0x480000, 0x146) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7000ffdbdf25110000001c0001000008000900000008000b00736970002000030014000600ff02000000001fea39110238133f0001080008000100000008000400ff0f00000800060003000000000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x400000000000003) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 03:40:57 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xe7, 0x5, [], &(0x7f0000000140)}) 03:40:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000140)='cgroup-eth1-bdev\x00', 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0xfffffffffffffce8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x0, {0x77359400}, 0x4, 0x101}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000580)={0x0, 0x1001, 0x4, 0x94cd}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0), 0xebc6604d02dbcd0b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000600)=""/232, 0x0, 0x0, [], 0x0, 0x9}, 0x48) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040)) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) clone(0x20000000, &(0x7f0000000980)="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", 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000005c0)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, 0x0) syncfs(0xffffffffffffffff) fchdir(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r6, &(0x7f0000000280), 0x80000003) [ 2389.993286] binder: 4847:4855 got transaction to invalid handle [ 2390.014168] binder: 4847:4855 transaction failed 29201/-22, size 0-0 line 2896 03:40:57 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xfffffffffffffdfd, 0x5, [], &(0x7f0000000140)}) 03:40:57 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x27) [ 2390.066538] binder: undelivered TRANSACTION_ERROR: 29201 03:40:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:58 executing program 2: r0 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002e008183fad9c3b1f98e21b2068801eba0070000002339a0053571cc37153e3776f9835b3f0004000000", 0x2e}], 0x1}, 0x0) 03:40:58 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x4a0200, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000003000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001400)='/dev/rfkill\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000002800)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000027c0)={&(0x7f0000002700)={0x84, r2, 0x900, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4e6546000003000000c88c1612786908655d4e1d310e05000000a1648dd3878400080033000000"], 0x2a) readv(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/255, 0xff}, {&(0x7f0000000140)=""/146, 0x92}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/190, 0xbe}], 0x9) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) getpeername$packet(r1, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14) stat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002ac0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000002bc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002c00)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000002d00)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000002fc0)={&(0x7f0000002840), 0xc, &(0x7f0000002880)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="980100002000000603000000ffdbdf2533000000e0000001000000000000000000000000000000000000000000000000000000004e2100004e220fde020000802d000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="24000900ff03000000000000ff0300000000000057f800000000000004000000000000005c001100ff020000000000000000000000000001ac1414bb00000000000000000000000032000000073500000a000a00ff01000000000000000000000000000100000000000000000000000000000000ff0300000535000000000a000c00100000000000000000000c001c00", @ANYRES32=r5, @ANYBLOB="0100a5b3c85338f7a4f6000008000b0099000000ac000010ac1e00010000000000000000000000000000018f9870b1cadac6bfd2f9a44e210000fefffe00", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000000000009000000000000003f0000000000000001000000000000000600000000000000000000000000000000000100000000007fffffffffffffff000001000000000003000000000000000200000000000000da0600000000000000000000b96b6e000001010300000000"], 0x198}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0xfff) 03:40:58 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x100000000000000, 0x5, [], &(0x7f0000000140)}) [ 2390.288396] binder: 4868:4875 got transaction to invalid handle [ 2390.315757] binder: 4868:4875 transaction failed 29201/-22, size 0-0 line 2896 [ 2390.369869] binder: undelivered TRANSACTION_ERROR: 29201 [ 2390.631684] net_ratelimit: 23 callbacks suppressed [ 2390.631691] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.641827] protocol 88fb is buggy, dev hsr_slave_1 03:40:58 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:58 executing program 2: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x101000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e22, @remote}}}, 0x108) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="89cb5abdb17cfef86ef33248481ca11153cc06bf43f449f120ebce49d32f4f1877a4975caf7a7df9a2e51a5f75d102d3f7aeef6236da256fb75d7cd7e0b1fd4e257f91fef3b055b1b01b089563b0ade4cf7c4e0a92c2308f2b1a62b92e0c1c3b091658a87811634e502933ed62c70856e3f011d40328d4feb3159b87b8c8f619516a8d8878652f99bf49ab57074b07ed02970d2804cd122a9f18480ccb2dc319715d24340a56", @ANYRES64, @ANYRES64, @ANYRESDEC], 0x5, 0xfffffffffffffff9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f0000000200)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 03:40:58 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:58 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000003c0)=0x19f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8}]]}}}]}, 0x3c}}, 0x0) keyctl$setperm(0x5, 0x0, 0x100) r2 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x440) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x9, "cdb9bfb907765bf7bb"}, &(0x7f0000000480)=0x11) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)={r3, 0x8000, 0x5, [0x9, 0x7, 0x9, 0xffff, 0x4]}, 0x12) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000500)={'T\x00\x00\x00\xff\xff\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00^\xa0@\xb5\x00'}, &(0x7f0000000100)=0x1e) 03:40:58 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x200000000000000, 0x5, [], &(0x7f0000000140)}) 03:40:58 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x4, 0x2, 0x0, 0xa9a7ef0800000000, 0x7ff, 0x4f4381a4, 0x7fff, 0x0}, &(0x7f0000000180)=0x20) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000380)='syz0\x00') r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x7, 0x2) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000300)={0x8, 0xffffffffffffb490, 0xfffffffffffff800, 0x105}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e22, 0x80000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe5}}, 0x6, 0x9, 0x2, 0x9, 0x80}, &(0x7f0000000280)=0x98) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000030008000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 2391.025205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 2391.045680] encrypted_key: insufficient parameters specified [ 2391.053001] binder: 4891:4901 transaction failed 29201/-22, size 0-0 line 2896 03:40:58 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xa0010000, 0x5, [], &(0x7f0000000140)}) 03:40:58 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2391.079250] encrypted_key: insufficient parameters specified [ 2391.084938] binder: 4891:4901 transaction failed 29201/-22, size 0-0 line 2896 [ 2391.095097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 03:40:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffe, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xb5c4b10b3bd2366e, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl(r3, 0x40000000000ef, &(0x7f0000001780)="0a5c000000005f8571406c894ae5b4db63310fd00e668c1bef78755c33355f1b833e5872028843ccd631905a3e00ac4ddbd9ef50c0a8f187465d5c941a1127b9898a0a6e6217320b1e7b57535340bd8d4c589a7d2e7f0b46764b6f338cead12b4b8af6c98422e4e6a809cb5053ba780eb0173ed3e60704b7d4de9bd5ae91cf") r4 = socket$inet_tcp(0x2, 0x3, 0x6) sendfile(r4, r4, &(0x7f0000001740), 0x7ff) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r5 = accept(r3, &(0x7f0000000540)=@hci, &(0x7f00000004c0)=0x80) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000001840)=0x3e029ee7, 0x629) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e24}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @broadcast}, 0x6100, 0x7ff, 0x1, 0x7, 0x0, 0x0, 0x8, 0x7fff, 0x3}) sendmsg(r4, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000100), 0x100000000000025d, &(0x7f0000000040)}, 0x8000) pwrite64(r3, &(0x7f0000000600)="64407b0ebc6f01f3425269af7b5bd2120be570220c83da72526dcfd714", 0x1d, 0x24) ioctl(r4, 0x8, &(0x7f0000000700)="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") write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65300a80ff69ddbdd427bcc6151ed98564b7b2014a49b90c84a338e91012719ae32546485b09cc1daf2a6ee8595cb2d56535c48c93669a27b5d27f0e251231c5e65c58acdffa505ee7b4d6af68d2a4e9fde04ba5c19d9c814d6bd7ae8b371d395bd49bd8313cfa1509f5d8d3a5c38c8a7e6467aa4a28694829771dc63263098bc7dbd39d4b5ce11c65b38f1c51f7ca15302a3e1f25226ac084152b3252e58efa9e7d7c08e8bec7e6d47247cebf2748653ea4b3300a31917473037631c137fd4dc67882ab2701005391f7b4289aba95b9c4111201b1f71e7fbae550a04e9b"], 0xe6) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000001700)=0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="73797a302bf3d36c7b41eea1f9c5dfca4d8abf0130e4d583d4bb1fc31e9cec1c83a337a483048378d2f1aadb8fbfda0b7c23ba535312bc434b2f6ec489093fee3eead7fa6750e0fb200208261de31a11cf3e328cdad096a97b7cbcccc08013d6cedddb9c8dec4748c7d1afe6061717371a553b8dbe8d18eb84477608c37430197e52dbd2b6797ee8d34eca6b19c3cc24bb685f69665d57d7d40905cb196cddf2dce2f318a8"], 0xa5) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000680)={0x8001, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e23, @broadcast}, 0x1, 0x8, 0x101, 0xc267, 0x0, &(0x7f0000000640)='ip_vti0\x00', 0x800, 0x0, 0xfffffffffffffff7}) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000003c0)=""/190, &(0x7f0000000480)=0xbe) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 03:40:58 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000003c0)=0x19f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8}]]}}}]}, 0x3c}}, 0x0) keyctl$setperm(0x5, 0x0, 0x100) r2 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x440) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x9, "cdb9bfb907765bf7bb"}, &(0x7f0000000480)=0x11) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)={r3, 0x8000, 0x5, [0x9, 0x7, 0x9, 0xffff, 0x4]}, 0x12) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000500)={'T\x00\x00\x00\xff\xff\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00^\xa0@\xb5\x00'}, &(0x7f0000000100)=0x1e) 03:40:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xffffffe7, 0x5, [], &(0x7f0000000140)}) 03:40:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0xff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000001c0)={'teql0\x00', 0x7ff}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000780)) mq_getsetattr(r2, &(0x7f0000000200)={0x9, 0x10001, 0x7f, 0xfffffffffffff801, 0x9, 0x0, 0x3, 0x3af6}, &(0x7f00000002c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002300)='IPVS\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e23}}}, 0x90) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) ptrace$getregset(0x4204, r3, 0x5, 0x0) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)=""/170) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000009c0)=""/4096) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000000)={0x1, 0x1f, 0x8, 0x5, 0x3fffffff80000000, 0x3e, 0x1}) bind$vsock_dgram(r2, &(0x7f0000000300)={0x28, 0x0, 0x2711, @hyper}, 0x10) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f00000005c0)=""/124) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000440)=0x8, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x6, &(0x7f0000000740)=0x2) [ 2391.240580] binder: 4917:4922 transaction failed 29201/-22, size 0-0 line 2896 [ 2391.246732] IPVS: length: 190 != 8 03:40:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r3 = gettid() r4 = getuid() sendmsg$netlink(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2002000}, 0xc, &(0x7f0000000380)=[{&(0x7f00000050c0)={0x4724, 0x28, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x154, 0x92, [@typed={0x8, 0x55, @fd=r0}, @typed={0x14, 0x55, @ipv6=@dev={0xfe, 0x80, [], 0x24}}, @typed={0x20, 0x55, @str='^md5sum^eth1nodevkeyring\x00'}, @typed={0x8, 0x6, @ipv4=@rand_addr=0x1f}, @generic="3f4aaf26cd0c70f9d996ade254fd30f98c008c186a7929c02d07bd5dca34535811607ffc9ed7e74776b14d721686334073509513531aa7103f9aab69fde7e9becfa70ccc795544de6ed27c39c910699747f24987671645231ce751b68afbdd5c7ba3157244f1136c88fe35e0dbbdd8c4c71c235f7b258d00c97753bacab3a98887f64a6acf134d4e60", @typed={0x6c, 0xc, @binary="c13d3ff86551c2c2a6d11ffd692a10af643f632c4dc9f7d127819c1f3afc27efb4cd9ed2358bb95a5d9d9096eb2786e2d474395bd340f933be6b510c8fe9af3150e8fa6dfd45bedec2e1f7fe96d8436908a9cc8b2b960b12e6ec8b97f4eebf1f36609b74f33891"}, @typed={0x8, 0x8b, @fd=r0}, @typed={0xc, 0x77, @u64=0x101}]}, @generic="18b49c29455567c9d99b87976728b524707bc1f8d4b3d79ddb8ada84a55cd37b8085363907380b611829ec98998fc015c96a74648e54c3f50d06240458fc9e6c0337e049ba7a34c7deeabfc281997ca4bd52a4642c2f94c8961b34aa8cce3bad787362b2db7f4af7226bbdfc9584ad6f83bebd8952b86e38ced00bab5a6382ea6898abbbb6cd1f674869992f2727157a3c533c687e0b6a3751b336ef98f4cbeb6ef23422c1b5d249a47b5c0435d03815410bc41a7c28c1af1659aa491a2dbf5f5e7fb4247b4f16", @nested={0xc, 0x3f, [@typed={0x8, 0x3, @u32=0xf54}]}, @typed={0xc, 0x28, @u64=0x6}, @generic="9c9611413a0463697ba27a30f6c9632da1bccba0717334ac44fafc839a3f2f35c502c8214c86a68db93a1bbf6ac297c3c34e2c15039d895dd5f0d35be33a55ebbc96b2c88b5fc995524302a45ab796b8087a84210af84c3557b54ad2656c984699e5c29eb8ab2d54df76d82cfac23d", @generic="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", @nested={0x2220, 0x77, [@generic="6217624bbf5ac082ce054c9e7c241cf33ab8a629e115637028bef8b3c0a217f62800e4add819003560c706fd9a6d18469dff5e4203d978cf85584fbd4f68798d22904e465d56945d910c93f1874baca0cda2bd30a8239eef40d74ba2fe2c83bdc26fd0e3f038", @generic="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", @typed={0x1004, 0x16, @binary="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"}, @generic="f42fa45ef9191b49bb494b322b05b523def6ed034e5b8d8fecd76f6f05c67f3632f976126f177494a136e0d15529e479580a3331b5f0ffdc3aae60366feda8d9075f2e3d2bb0d470d7552b5e7aeadb867bc5bc224a78d7", @generic="6d1da6bfd2ae244ebb8cd3c8b3f89ad816adcb0e4a6387b5cc4300c89eb88f15a0cdc5f3c09f8f3e395b3f01ff8e99fdb9414584885cdc5760108d5a28532751736e38bb63d9f12590a69684a73fc188100e3d44bb6f1f001270fe9bada4acd566de6f27832d790f3a867ef5c0ae7544fe7a8995030196a6280e1936265209b038681ddd2e2eb782dea4223ee0f349c6511e91a4b788cd8b5a26ce3d841b550d1b8ff328043210e9b9fd408bfb5b2e7469463b8396fbdd134d0d2e9080b52b6988b715", @typed={0x8c, 0x3e, @binary="5ff8afb456393c9fe17aad104903efd584694675e3d673bcc8eb3dd115a6e9eb5b61e5d1b8967ad668991416fd7b62608e6702de2b59ecff778725f073177482656c3803b65b5dee37b665c3c72a3748c93753baa31f688f96038213a14e4dc810c670f62c39c12b95d8cebc166462cca845e17da86f797b834cf85972e96f54e9207021fb203164"}, @typed={0xc, 0x2a, @str='rootmode'}]}, @generic="9f18638cb47a8cdc93d7d63f582a36992ecddd380cd90dc68bd8e163cb2148e5d2fee54838ff24733b40fa73197df2f5db392893040a48b706037601f7013cebe048088dbd8e74048e8c9af8ca97184d63020ff469513a646d743abe7b3208438e92b327dcaa236701e7df0f04f5e431541fd1a20ecf80c0d5c5dcc7c6cc7b981f52b659a084fd94256387c875ce52fd1c0995d075b8d57d6ef7aa844106cb10d2cb973e730f1797ab1cd7b3340a300e10de6d74283fcea4046f3ddca8087dda9320302c7832df9fcce9ff17240fcc03e2e7a136b3c8914e2a03bf26a6661ae19b33f506", @nested={0x16c, 0x71, [@typed={0x14, 0x6d, @ipv6=@mcast1}, @typed={0x8, 0x12, @uid=r2}, @generic="26cd2fd0b5422b9523ed760c1d1ef639bd0c16944cdb0c5525d69aa510a5d042af554558c5594cc762916de2523856cfcd5eb8399a8ef0f7c78b87103545f85bff491afebc2921a9", @typed={0x8, 0x11, @pid=r3}, @typed={0x4, 0x21}, @generic="e049ba0a98177822d2125f0ca2b047300d61b41e8b2ee557713320eddd10806ec182af7a70a25869f6572f2cf34ecdb544d0d99c6b14ca7c89610bafdfe44ba1a0984cd685606b4a7d16c5bb09bc411cd05604fd1ef132e1451cbc0ece41767b22b424352f74fafb8289cccd25724c59b17daa8be990df3de0f04934470b03884927c73aa6dc9c99e492c2861c3a7c31196d26a9b6b044e925a92a96ef77351c500ed123b04a6c7eecac154ca8e0d11f030b3b5b94e4a345df4a8c118cc82df8aea7b59b065343148a21548fa7afb84235ad35e7d3b36902839dbc8133a4b68f8e51a6a97843954419e510be8cfe948b99bdf97f7abb"]}, @generic="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"]}, 0x4724}, {&(0x7f0000000340)={0x18, 0x40, 0x420, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x74, @uid=r4}]}, 0x18}, {&(0x7f0000000480)={0x11f8, 0x29, 0x404, 0x70bd28, 0x25dfdbfb, "", [@nested={0x11e8, 0x12, [@typed={0x8, 0x56, @u32}, @generic="dc6fa72b351d9db8b0305352790e5156f8d42334814367e83813cab4cea825581f9b02d5c1f1", @generic="212b48164a8208937b306a66ed9dc950a1ca5f9f2326a3388758205cc01b745b40e6dee71877a4e952c2d9cc830739cf599636d0e438df88a2ba4f5bc47f0b82decba3daee1bce18eaba5b1d06f7f90772b959e3d3670529be8ddcb1808d7f48bb70cb0b547dd1bc18927459d55e34c30c47ae46a3aa8b3d95782afbe99d574de631c867bd2a5d20690a4eae7f5dd1e6128bdf1a827f1b3dbb9ae8d31060f615de113bc3da9281c0d8652d85fd102831a93eb97eb6859fad4658d2c79eea3654da629c80c491c816bdf641a45c1ac90c3294a782ac", @generic="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", @typed={0xc, 0x64, @u64}, @generic="08e114828a9afa7782e76beb5d29fe4d9662f83bc33be4d81d6bfa1a1ca0ae8c7c73661f6487b71d90cbd8a5e80c5d17998cc80d3cd73b038555b5dde208bb5450490c8151b8760a3072f02bbc17db6c79c22b330467326e7577ca158b35c20d5acd941c5574273da194c0d7ffc4c2f76ddb557841cf17daaae195d31e8c1f13624178b02cff49427cb9173e0c57b60d6735b59ec40aef32eb72fb7710e7b75649d4175750a403ef742c4d2ef2bbf71ba03207e4ece46e416af2beaecb5fe97802bd2e6d952ed2e3ccc5aab1f943f34a1e7e030487"]}]}, 0x11f8}, {&(0x7f0000001700)={0x304, 0x10, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="1525de2289cedbe5e7896d651b71", @typed={0xc, 0x8, @u64=0x77b}, @typed={0x14, 0x8, @ipv6=@loopback}, @typed={0x14, 0x38, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x14, 0x37, @ipv6=@mcast2}, @generic="a23462e08b842802fc138af6a62075e33de5452c9e463177c96930d01a6ecd943c12d367b4", @generic="7fef18d56434522a508c79a75aed6cf9ff4274aad5299518acdbfaeccb84d2b71168d593fa9804b7c62a2869f7a2418ec0b43c91f7148ba07ecc59d6d809ca163024a575c847f85951110845067f4124517f269c2b1cb252a560702e013cd467d2ac6bfbde2bbe285336e99a8f4c17791f89128643e4692fe9bf6d8a749d11a77eb656d35cc56a6a0dfe0d3acfacce9cf5f6c313eb75ca3d423e272b4a1c3de6e08216056c04e91871c04430685b338664bb6250649b103f2f42234e5d4e5fbde021d9f966ddfb517b86796c61", @typed={0xcc, 0x46, @binary="663bac90c1d953e5da5eb554a7566257af79889e685cd3478e152ce992d7bba2007d375cc81409318fa1c8b6c73313a991d021ebf1d3aeb3856e2d7b9448ca54b6b207a90972329355055c590d369e36d1f0e7de7f428162b4bfcdbd26dc061a566f3c3458dbe8cdfda69b21b65423489007b03bcf4da21f554cf232ff425c644ece784fa9d9c75740e8137693788095f321bc3a1a10960ff2f4f1c0ce3d57dbeb279d786554a78b24d0d69679bcf8832d39d9f158fd7014228e360c9fa8731cba0e11ed82"}, @generic="c158ec116346f35ab722b080921e09ca0845c9fa19c39a727e4744a411f5120c2dca580580cf68a0982db2d35187d30c4c554d9a65661f8206f14e7e66ebae90d3f8a4251b72337bcd7451d16ee46221c1bf453fc20c72d4bf2d4f025f8e8a9fc34102a00cc163e09ff53c3534cc95a8942d6acdf9770d7a4c695ab07021973c5ce02be6bf9b03f54697e9cb65de774c58eb1035f5dd18c4d80552c86a046a835ec849c3644652e9583bb568d29e0d609767d66c3b2421b785a3da18ef68b76f9e4464c796349587b4da4720a99745c056835dbd4cbd0d9941cf", @generic="9fe24d215bc9"]}, 0x304}], 0x4, 0x0, 0x0, 0x4004044}, 0x80) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x3) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x2) read$FUSE(r0, &(0x7f0000002700), 0x1000) read$FUSE(r0, 0x0, 0x2f000000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0) tkill(r6, 0x15) [ 2391.429420] IPVS: length: 190 != 8 [ 2391.521649] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.526837] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.591651] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.591661] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.596788] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.601757] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.612037] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.617097] protocol 88fb is buggy, dev hsr_slave_1 03:40:59 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:40:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xfdfdffff, 0x5, [], &(0x7f0000000140)}) 03:40:59 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000180)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000000c0)={0xdd3a, "4b5d0dcb8c41f07cf29a5613e17835b2ec5af018c8fed8d0c91620438ef7eb75", 0x5, 0x0, 0x20, 0x5, 0x2, 0x3, 0x0, 0x5b9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:59 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x35cf35738d814ede, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 2391.937618] binder_transaction: 3 callbacks suppressed [ 2391.937624] binder: 4948:4950 got transaction to invalid handle 03:40:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xffffffffffffffe7, 0x5, [], &(0x7f0000000140)}) [ 2391.984775] binder: 4946:4953 unknown command 1986356271 [ 2391.990405] binder: 4946:4953 ioctl c0306201 200000c0 returned -22 [ 2391.995114] binder: 4948:4950 transaction failed 29201/-22, size 0-0 line 2896 [ 2392.018375] binder_release_work: 3 callbacks suppressed [ 2392.018381] binder: undelivered TRANSACTION_ERROR: 29201 03:40:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 03:40:59 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x20710000000000, 0x0, 0x0, 0x0) [ 2392.055736] binder: 4946:4962 unknown command 1986356271 [ 2392.080602] binder: 4946:4962 ioctl c0306201 200000c0 returned -22 03:40:59 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x800080008002, 0x5bcc) r0 = open(&(0x7f0000000d40)='./bus\x00', 0x0, 0x0) close(r0) [ 2392.188843] binder: 4967:4972 got transaction to invalid handle [ 2392.211446] binder: 4967:4972 transaction failed 29201/-22, size 0-0 line 2896 [ 2392.223648] audit: type=1326 audit(2000000460.040:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 03:41:00 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x200000000000000], &(0x7f0000000140)}) [ 2392.286576] binder: undelivered TRANSACTION_ERROR: 29201 [ 2392.299310] audit: type=1326 audit(2000000460.040:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 03:41:00 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') write$cgroup_int(r0, &(0x7f0000000300)=0xb196, 0x12) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000001580)=""/4096, 0x12f}, {&(0x7f00000003c0)=""/244, 0xf4}], 0x2) keyctl$join(0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)}, {&(0x7f0000000280)=""/20, 0x14}], 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0x32016b017cac6cd) [ 2392.322295] audit: type=1326 audit(2000000460.040:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.344411] audit: type=1326 audit(2000000460.040:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.366321] audit: type=1326 audit(2000000460.040:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.387531] audit: type=1326 audit(2000000460.040:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.408364] audit: type=1326 audit(2000000460.040:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.429286] audit: type=1326 audit(2000000460.040:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.450922] audit: type=1326 audit(2000000460.040:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 2392.472793] audit: type=1326 audit(2000000460.040:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4971 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 03:41:00 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x0, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:00 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)) 03:41:00 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xe7ffffffffffffff], &(0x7f0000000140)}) 03:41:00 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) 03:41:01 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:01 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xffffffe7], &(0x7f0000000140)}) [ 2393.172157] binder: 4996:5004 got transaction to invalid handle 03:41:01 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) inotify_init1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) getpgrp(0xffffffffffffffff) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 03:41:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1003, 0x0, 0x7f}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000240)={0x7f}) [ 2393.231687] binder: 4996:5004 transaction failed 29201/-22, size 0-0 line 2896 [ 2393.260431] binder: undelivered TRANSACTION_ERROR: 29201 03:41:01 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:01 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:01 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x0, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:01 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x2000000], &(0x7f0000000140)}) 03:41:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1003, 0x0, 0x7f}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000240)={0x7f}) 03:41:01 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2393.439600] binder: 5028:5034 got transaction to invalid handle [ 2393.469381] binder: undelivered TRANSACTION_ERROR: 29201 03:41:01 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:01 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x1000000], &(0x7f0000000140)}) 03:41:01 executing program 2: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:01 executing program 1: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0), 0xfd65) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) [ 2393.625879] binder: 5049:5052 got transaction to invalid handle [ 2393.648170] binder: undelivered TRANSACTION_ERROR: 29201 [ 2393.659110] binder: 5049:5052 got transaction to invalid handle [ 2393.686457] binder: undelivered TRANSACTION_ERROR: 29201 03:41:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000006c40)=ANY=[@ANYBLOB="10ef0000000000"], 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) fcntl$setown(r1, 0x8, r2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000b80), 0x4) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getresgid(&(0x7f0000000280), &(0x7f0000000500), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="010126bd7000fbdbdf2501000000000000000c410000000c001473797a31000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffffffffff81) fchdir(r0) getresgid(0x0, &(0x7f0000000380)=0x0, &(0x7f0000000740)) fstat(0xffffffffffffffff, &(0x7f00000008c0)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x401, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) fstat(r1, &(0x7f0000000580)) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000300)={0x2, 0x7, 0x1f, 0x0, 0x7, 0x7, 0x6, 0x7b41, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x51, 0x101, 0x0, 0x0, 0xffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x0, 0x1f, 0xd1ca, 0x5}) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0x0, r5, 0x0]) mkdir(&(0x7f0000001540)='./bus\x00', 0x8) 03:41:02 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x1a0], &(0x7f0000000140)}) 03:41:02 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2394.311025] binder: 5075:5081 got transaction to invalid handle [ 2394.376277] binder: undelivered TRANSACTION_ERROR: 29201 03:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x0, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:02 executing program 2: r0 = syz_open_dev$video(0x0, 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:02 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xffffffffa0010000], &(0x7f0000000140)}) 03:41:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:02 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:02 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xfdfdffffffffffff], &(0x7f0000000140)}) [ 2394.690837] binder: 5096:5099 got transaction to invalid handle 03:41:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2394.753325] binder_transaction: 4 callbacks suppressed [ 2394.753339] binder: 5096:5099 transaction failed 29201/-22, size 0-0 line 2896 03:41:02 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xfdfdffff], &(0x7f0000000140)}) [ 2394.839252] binder: 5096:5099 got transaction to invalid handle [ 2394.887795] binder: undelivered TRANSACTION_ERROR: 29201 [ 2394.894363] binder: 5096:5099 transaction failed 29201/-22, size 0-0 line 2896 [ 2394.909253] binder: undelivered TRANSACTION_ERROR: 29201 03:41:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000006c40)=ANY=[@ANYBLOB="10ef0000000000"], 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) fcntl$setown(r1, 0x8, r2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000b80), 0x4) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getresgid(&(0x7f0000000280), &(0x7f0000000500), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="010126bd7000fbdbdf2501000000000000000c410000000c001473797a31000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffffffffff81) fchdir(r0) getresgid(0x0, &(0x7f0000000380)=0x0, &(0x7f0000000740)) fstat(0xffffffffffffffff, &(0x7f00000008c0)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x401, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) fstat(r1, &(0x7f0000000580)) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000300)={0x2, 0x7, 0x1f, 0x0, 0x7, 0x7, 0x6, 0x7b41, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x51, 0x101, 0x0, 0x0, 0xffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x0, 0x1f, 0xd1ca, 0x5}) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0x0, r5, 0x0]) mkdir(&(0x7f0000001540)='./bus\x00', 0x8) 03:41:03 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:03 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2395.329517] binder: 5129:5134 got transaction to invalid handle [ 2395.352583] binder: 5129:5134 transaction failed 29201/-22, size 0-0 line 2896 [ 2395.395147] binder: undelivered TRANSACTION_ERROR: 29201 03:41:03 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:03 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xe7], &(0x7f0000000140)}) 03:41:03 executing program 2: syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:03 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:03 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) [ 2395.642175] binder: 5145:5150 transaction failed 29201/-22, size 0-0 line 2896 [ 2395.671635] net_ratelimit: 16 callbacks suppressed [ 2395.671642] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.681703] protocol 88fb is buggy, dev hsr_slave_1 03:41:03 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xfdfdffff00000000], &(0x7f0000000140)}) [ 2395.751608] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.752258] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.756704] protocol 88fb is buggy, dev hsr_slave_1 [ 2395.768750] protocol 88fb is buggy, dev hsr_slave_1 [ 2395.776648] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.782537] protocol 88fb is buggy, dev hsr_slave_1 03:41:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) 03:41:04 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @vbi={0x32315659}}) 03:41:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2396.231636] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.236917] protocol 88fb is buggy, dev hsr_slave_1 [ 2396.254173] binder: 5174:5179 transaction failed 29201/-22, size 0-0 line 2896 03:41:04 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:04 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xfffffdfd], &(0x7f0000000140)}) 03:41:04 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi}) 03:41:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:04 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="82023d000004000000000aab4e2780677bb184f47c83a1bf1cdfb1a5dd9272761f40b7bc0c4443baae648685c5a27039b2fa4b6a56ae863e759e1879bee5846a1bf0f63c36a1611fbfb9ff86be62d4f89cb09751b906c9731692d919f5cb18595f3d96f3663b3d1d712aa0e128e44cdac2aca9646ecca605434baf09404107e3450e7176408cb6ae1f36648723337317252e688ec46cf06090a8d9f99e70b189f864165e3277361bac5fbd138229a48994a40a3cc14ea800aad243d4c0c43afd22921b30f5d52bebc129e33584517dc21fa67354f56b5f735ba0ae577293d3e6438abdc82d455ab2b0c97a57bb515422ee371e73236ce03d610478b0e257038128c8e3281cb1f0ed2546ae8dc9510984ebfa2ae9218267864961d104367c191deff1af5f18e6f8c73d9bbf30b1b6503ad3a37c18cda10327f1c7238be81c4c32969e4462cda4d741c2c05dc315bd76eb333b50619a0c648b68ed2c96b660258eaccda3651dfc0998f8f9d9ebb93ea68ad32599d5d8a8bdca497113285fdb34c3cbd4d2b4a4038c68c24c575543312b93db3d2ff67a963c73709122d014d820423b46d3eac25c2653ab4dbf07bf845266f6e228c6c46d57a8d5d7fe437709c8fbd4b470b2090f97624345db505fa8bb45298f8edb5b370f45d47754267122a7361225eb6bbed7b9676f9933407add6c573cc3aa7f296bf0f29bdf0bb326f5ff151b7a1a6a3f7ea6b3b8feb47b09a532a5622e4e4e3757ab685031877a4620287b75f3fe8d29b898b538ff99be91fd"], 0x1) sendto(r0, &(0x7f00000000c0)="db833b5529784257e54d61248783fc79df708248d80ebcf3637faba6165ff85633e8633a15befcc1443bcd36fe43de2675f8b3456c48255e6ac40ea4407fc7095378a0e60f7d7713d83780e0f19afe4902459ff3f9ba7e12b6a6d5e888014f0ff39d955ea7196ab118833d5b0b6c52a9f9ae185da9004905898aa63b9e5b8508abbb8332e8c53904e1b883bc4200037fbe", 0x91, 0x0, 0x0, 0x0) 03:41:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:04 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) sendmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="ed", 0x1}], 0x1}, 0x200000d0) close(r2) 03:41:04 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x100000000000000], &(0x7f0000000140)}) 03:41:04 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi}) [ 2396.968502] binder_transaction: 2 callbacks suppressed [ 2396.968509] binder: 5191:5199 got transaction to invalid handle [ 2396.995716] binder: 5191:5199 transaction failed 29201/-22, size 0-0 line 2896 [ 2397.032207] binder_release_work: 2 callbacks suppressed [ 2397.032213] binder: undelivered TRANSACTION_ERROR: 29201 [ 2397.036726] binder: 5191:5199 got transaction to invalid handle [ 2397.051011] binder: 5191:5199 transaction failed 29201/-22, size 0-0 line 2896 [ 2397.084334] binder: undelivered TRANSACTION_ERROR: 29201 03:41:04 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:05 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:05 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xa0010000], &(0x7f0000000140)}) 03:41:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi}) 03:41:05 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="ed8f", 0x2}], 0x1}, 0x200000d0) close(r2) [ 2397.272909] binder: 5220:5227 got transaction to invalid handle [ 2397.282231] binder: 5220:5227 transaction failed 29201/-22, size 0-0 line 2896 03:41:05 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xe7ffffff], &(0x7f0000000140)}) 03:41:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2397.329396] binder: undelivered TRANSACTION_ERROR: 29201 03:41:05 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) 03:41:05 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:05 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xfdfd], &(0x7f0000000140)}) 03:41:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:05 executing program 2: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4a9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320af) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 03:41:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2397.525494] binder: 5248:5253 got transaction to invalid handle [ 2397.537346] binder: 5248:5253 transaction failed 29201/-22, size 0-0 line 2896 [ 2397.588227] binder: 5248:5253 got transaction to invalid handle [ 2397.629389] binder: undelivered TRANSACTION_ERROR: 29201 [ 2397.635937] binder: 5248:5253 transaction failed 29201/-22, size 0-0 line 2896 [ 2397.673548] binder: undelivered TRANSACTION_ERROR: 29201 03:41:06 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:06 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xffe7], &(0x7f0000000140)}) 03:41:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2398.676186] binder: 5277:5281 got transaction to invalid handle 03:41:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:06 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xe7ff], &(0x7f0000000140)}) [ 2398.737143] binder: undelivered TRANSACTION_ERROR: 29201 03:41:06 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:06 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x2], &(0x7f0000000140)}) [ 2398.898370] binder: 5300:5302 got transaction to invalid handle 03:41:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2398.971470] binder: undelivered TRANSACTION_ERROR: 29201 [ 2399.021522] IPVS: ftp: loaded support on port[0] = 21 03:41:06 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:06 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xffffffffffffffe7], &(0x7f0000000140)}) [ 2399.175762] binder: 5317:5321 got transaction to invalid handle [ 2399.211844] binder: 5317:5321 got transaction to invalid handle [ 2399.214384] binder: undelivered TRANSACTION_ERROR: 29201 [ 2399.260125] binder: undelivered TRANSACTION_ERROR: 29201 [ 2399.306376] chnl_net:caif_netlink_parms(): no params data found [ 2399.359182] bridge0: port 1(bridge_slave_0) entered blocking state [ 2399.365718] bridge0: port 1(bridge_slave_0) entered disabled state [ 2399.372986] device bridge_slave_0 entered promiscuous mode [ 2399.380338] bridge0: port 2(bridge_slave_1) entered blocking state [ 2399.387002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2399.394327] device bridge_slave_1 entered promiscuous mode [ 2399.414559] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2399.423944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2399.444335] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2399.454158] team0: Port device team_slave_0 added [ 2399.459735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2399.467264] team0: Port device team_slave_1 added [ 2399.472806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2399.480239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2399.545744] device hsr_slave_0 entered promiscuous mode [ 2399.581845] device hsr_slave_1 entered promiscuous mode [ 2399.622095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2399.629022] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2399.647793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2399.677797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2399.686417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2399.695135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2399.702761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2399.709701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2399.718837] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2399.725517] 8021q: adding VLAN 0 to HW filter on device team0 [ 2399.733974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2399.740983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2399.749719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2399.757496] bridge0: port 1(bridge_slave_0) entered blocking state [ 2399.763877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2399.771124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2399.782257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2399.789536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2399.797534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2399.805315] bridge0: port 2(bridge_slave_1) entered blocking state [ 2399.811696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2399.820072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2399.828457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2399.840273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2399.848323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2399.858356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2399.865536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2399.873481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2399.884799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2399.895483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2399.906222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2399.915653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2399.924474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2399.932236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2399.939845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2399.950592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2399.961762] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2399.967948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2399.976003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 03:41:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:07 executing program 4: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) 03:41:07 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2399.990661] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2400.002254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2400.073957] FAULT_INJECTION: forcing a failure. [ 2400.073957] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.132440] CPU: 0 PID: 5332 Comm: syz-executor2 Not tainted 4.20.0+ #175 [ 2400.139369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.148712] Call Trace: [ 2400.151286] dump_stack+0x1d3/0x2c6 [ 2400.154906] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2400.160097] ? __lock_acquire+0x62f/0x4c20 [ 2400.164326] ? graph_lock+0x270/0x270 [ 2400.168149] should_fail.cold.4+0xa/0x17 [ 2400.172201] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2400.177295] ? print_usage_bug+0xc0/0xc0 [ 2400.181372] ? find_held_lock+0x36/0x1c0 [ 2400.185425] ? ___might_sleep+0x1ed/0x300 [ 2400.189567] ? arch_local_save_flags+0x40/0x40 [ 2400.194154] ? mark_held_locks+0x130/0x130 [ 2400.198391] ? __lock_acquire+0x62f/0x4c20 [ 2400.202619] __should_failslab+0x124/0x180 [ 2400.206849] should_failslab+0x9/0x14 [ 2400.210656] kmem_cache_alloc_node_trace+0x277/0x740 [ 2400.215742] ? graph_lock+0x270/0x270 [ 2400.219535] __kmalloc_node+0x3c/0x70 [ 2400.223339] kvmalloc_node+0x65/0xf0 [ 2400.227047] video_usercopy+0x35c/0x1760 [ 2400.231092] ? v4l_s_fmt+0xb50/0xb50 [ 2400.234800] ? _parse_integer+0x180/0x180 [ 2400.238942] ? v4l_enumstd+0x70/0x70 [ 2400.242643] ? find_held_lock+0x36/0x1c0 [ 2400.246701] ? __fget+0x4aa/0x740 [ 2400.250145] ? lock_downgrade+0x900/0x900 [ 2400.254285] ? check_preemption_disabled+0x48/0x280 [ 2400.259297] ? smk_access+0x53b/0x700 [ 2400.263087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2400.268362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2400.273889] ? smack_log+0x423/0x590 [ 2400.277597] ? smk_access_entry+0x310/0x310 [ 2400.281908] ? __fget+0x4d1/0x740 [ 2400.285346] ? smk_tskacc+0x3dd/0x520 [ 2400.289144] ? video_usercopy+0x1760/0x1760 [ 2400.293463] video_ioctl2+0x2c/0x33 [ 2400.297092] v4l2_ioctl+0x154/0x1b0 [ 2400.300709] ? video_devdata+0xa0/0xa0 [ 2400.304589] do_vfs_ioctl+0x1de/0x1790 [ 2400.308479] ? __lock_is_held+0xb5/0x140 [ 2400.312540] ? ioctl_preallocate+0x300/0x300 [ 2400.316939] ? smk_curacc+0x7f/0xa0 [ 2400.320565] ? smack_file_ioctl+0x210/0x3c0 [ 2400.324882] ? fget_raw+0x20/0x20 [ 2400.328318] ? smack_file_lock+0x2e0/0x2e0 [ 2400.332550] ? fput+0x130/0x1a0 [ 2400.335833] ? do_syscall_64+0x9a/0x820 [ 2400.339804] ? do_syscall_64+0x9a/0x820 [ 2400.343765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2400.349281] ? security_file_ioctl+0x94/0xc0 [ 2400.353671] ksys_ioctl+0xa9/0xd0 [ 2400.357118] __x64_sys_ioctl+0x73/0xb0 [ 2400.360986] do_syscall_64+0x1b9/0x820 [ 2400.364857] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2400.370210] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2400.375130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.379960] ? trace_hardirqs_on_caller+0x310/0x310 [ 2400.384975] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2400.389978] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2400.394973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.399799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2400.404967] RIP: 0033:0x457ec9 [ 2400.408136] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2400.427018] RSP: 002b:00007f12d3199c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.434797] RAX: ffffffffffffffda RBX: 00007f12d3199c90 RCX: 0000000000457ec9 [ 2400.442042] RDX: 0000000020000100 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 2400.449290] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2400.456535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12d319a6d4 [ 2400.463781] R13: 00000000004c2d4b R14: 00000000004d5250 R15: 0000000000000004 03:41:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:08 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x1a0ffffffff], &(0x7f0000000140)}) 03:41:08 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:08 executing program 4: r0 = syz_open_dev$video(0x0, 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:08 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:08 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0xfffffffffffffdfd], &(0x7f0000000140)}) 03:41:08 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2400.605730] binder: 5343:5353 got transaction to invalid handle [ 2400.618385] binder_transaction: 4 callbacks suppressed [ 2400.618400] binder: 5343:5353 transaction failed 29201/-22, size 0-0 line 2896 03:41:08 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xffffffffa0010000], &(0x7f0000000140)}) [ 2400.660121] binder: 5343:5353 transaction failed 29201/-22, size 0-0 line 2896 [ 2400.660504] binder: undelivered TRANSACTION_ERROR: 29201 [ 2400.691659] net_ratelimit: 30 callbacks suppressed [ 2400.691667] protocol 88fb is buggy, dev hsr_slave_0 [ 2400.701712] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.031719] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.036757] protocol 88fb is buggy, dev hsr_slave_1 03:41:08 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5451, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:08 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:08 executing program 4: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) 03:41:08 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:08 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x1a0ffffffff], &(0x7f0000000140)}) 03:41:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5450, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2401.165118] binder: 5378:5382 transaction failed 29201/-22, size 0-0 line 2896 03:41:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 03:41:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:09 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xfdfdffffffffffff], &(0x7f0000000140)}) 03:41:09 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2401.365459] binder: 5398:5403 transaction failed 29201/-22, size 0-0 line 2896 [ 2401.383056] binder: 5398:5403 transaction failed 29201/-22, size 0-0 line 2896 03:41:09 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xffffffe7], &(0x7f0000000140)}) 03:41:09 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) tkill(0x0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0585611, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2401.570278] binder: 5418:5424 transaction failed 29201/-22, size 0-0 line 2896 03:41:09 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x2], &(0x7f0000000140)}) 03:41:09 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:09 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0205649, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) tkill(0x0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:09 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xa0010000], &(0x7f0000000140)}) [ 2401.753622] binder: 5438:5443 transaction failed 29201/-22, size 0-0 line 2896 [ 2401.911708] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.916849] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.991636] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.991691] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.996840] protocol 88fb is buggy, dev hsr_slave_1 [ 2402.001878] protocol 88fb is buggy, dev hsr_slave_1 03:41:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0585609, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:10 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:10 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xe7ff], &(0x7f0000000140)}) 03:41:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) tkill(0x0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:10 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xffffffffffffffe7], &(0x7f0000000140)}) [ 2402.603319] binder_transaction: 6 callbacks suppressed [ 2402.603327] binder: 5469:5471 got transaction to invalid handle 03:41:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0189436, &(0x7f0000000000)) 03:41:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc058560f, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2402.658087] binder: 5469:5471 transaction failed 29201/-22, size 0-0 line 2896 [ 2402.694429] binder_release_work: 6 callbacks suppressed [ 2402.694435] binder: undelivered TRANSACTION_ERROR: 29201 03:41:10 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x100000000000000], &(0x7f0000000140)}) 03:41:10 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2402.894109] binder: 5497:5500 got transaction to invalid handle [ 2402.913955] binder: 5497:5500 transaction failed 29201/-22, size 0-0 line 2896 [ 2402.932723] binder: 5497:5500 got transaction to invalid handle [ 2402.938997] binder: undelivered TRANSACTION_ERROR: 29201 [ 2402.944734] binder: 5497:5500 transaction failed 29201/-22, size 0-0 line 2896 [ 2402.952460] binder: undelivered TRANSACTION_ERROR: 29201 03:41:11 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x401, 0x9}, 0x2) 03:41:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:11 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x1a0], &(0x7f0000000140)}) 03:41:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0585609, &(0x7f0000000000)) 03:41:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc058565d, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:11 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x2, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:11 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xfdfdffff], &(0x7f0000000140)}) [ 2403.575631] binder: 5509:5515 got transaction to invalid handle 03:41:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x5452, &(0x7f0000000000)) 03:41:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2403.628732] binder: undelivered TRANSACTION_ERROR: 29201 03:41:11 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2403.805470] binder: 5531:5534 got transaction to invalid handle [ 2403.821427] binder: undelivered TRANSACTION_ERROR: 29201 03:41:12 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) 03:41:12 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x2000000], &(0x7f0000000140)}) 03:41:12 executing program 1: clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0045878, &(0x7f0000000000)) 03:41:12 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5452, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2404.631954] binder: 5547:5553 got transaction to invalid handle [ 2404.642110] binder: 5547:5553 got transaction to invalid handle 03:41:12 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xfdfd], &(0x7f0000000140)}) 03:41:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x5460, &(0x7f0000000000)) 03:41:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x4020940d, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2404.674778] binder: undelivered TRANSACTION_ERROR: 29201 [ 2404.681780] binder: undelivered TRANSACTION_ERROR: 29201 03:41:12 executing program 1: clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:12 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x5421, &(0x7f0000000000)) [ 2404.811897] binder: 5565:5573 got transaction to invalid handle [ 2404.850505] binder: undelivered TRANSACTION_ERROR: 29201 03:41:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) 03:41:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05647, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:13 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x200000000000000], &(0x7f0000000140)}) 03:41:13 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:13 executing program 1: clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x2, &(0x7f0000000000)) 03:41:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc058565d, &(0x7f0000000000)) [ 2405.577204] binder: 5591:5598 got transaction to invalid handle 03:41:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05667, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:13 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xfffffffffffffdfd], &(0x7f0000000140)}) [ 2405.623769] binder: undelivered TRANSACTION_ERROR: 29201 03:41:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0205649, &(0x7f0000000000)) 03:41:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:13 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2405.815530] binder: 5617:5625 got transaction to invalid handle [ 2405.824256] binder_transaction: 6 callbacks suppressed [ 2405.824270] binder: 5617:5625 transaction failed 29201/-22, size 0-0 line 2896 [ 2405.849179] binder: undelivered TRANSACTION_ERROR: 29201 [ 2406.071757] net_ratelimit: 22 callbacks suppressed [ 2406.071762] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.081827] protocol 88fb is buggy, dev hsr_slave_1 [ 2406.151628] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.151648] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.156819] protocol 88fb is buggy, dev hsr_slave_1 [ 2406.161842] protocol 88fb is buggy, dev hsr_slave_1 [ 2406.166872] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.176861] protocol 88fb is buggy, dev hsr_slave_1 [ 2406.711618] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.716714] protocol 88fb is buggy, dev hsr_slave_1 03:41:14 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) 03:41:14 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xfdfdffff00000000], &(0x7f0000000140)}) 03:41:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc020660b, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0585611, &(0x7f0000000000)) 03:41:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:14 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xe7ffffffffffffff], &(0x7f0000000140)}) 03:41:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2406.913677] binder: 5637:5641 transaction failed 29201/-22, size 0-0 line 2896 03:41:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x4020940d, &(0x7f0000000000)) 03:41:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0189436, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2407.033269] binder: 5653:5655 transaction failed 29201/-22, size 0-0 line 2896 03:41:14 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xe7ffffff], &(0x7f0000000140)}) 03:41:14 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x9}, 0x2) 03:41:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc058560f, &(0x7f0000000000)) 03:41:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0205647, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:15 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x1000000], &(0x7f0000000140)}) [ 2407.263548] binder: 5676:5678 transaction failed 29201/-22, size 0-0 line 2896 03:41:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x5451, &(0x7f0000000000)) 03:41:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0045878, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:15 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:15 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:15 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xffe7], &(0x7f0000000140)}) 03:41:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x40049409, &(0x7f0000000000)) [ 2407.552644] binder: 5703:5709 transaction failed 29201/-22, size 0-0 line 2896 03:41:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x9}, 0x2) 03:41:16 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0045878, &(0x7f0000000000)) 03:41:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5460, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:16 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xe7], &(0x7f0000000140)}) 03:41:16 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:16 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0xfffffdfd], &(0x7f0000000140)}) 03:41:16 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2408.574935] binder_transaction: 4 callbacks suppressed [ 2408.574942] binder: 5718:5727 got transaction to invalid handle [ 2408.605249] binder: 5718:5727 transaction failed 29201/-22, size 0-0 line 2896 03:41:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x5450, &(0x7f0000000000)) 03:41:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5421, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2408.629540] binder_release_work: 4 callbacks suppressed [ 2408.629545] binder: undelivered TRANSACTION_ERROR: 29201 [ 2408.640329] binder: 5718:5727 got transaction to invalid handle [ 2408.702827] binder: 5718:5727 transaction failed 29201/-22, size 0-0 line 2896 03:41:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x40049409, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:16 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2408.749906] binder: undelivered TRANSACTION_ERROR: 29201 03:41:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x9}, 0x2) 03:41:17 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:17 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xe7], &(0x7f0000000140)}) 03:41:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0205647, &(0x7f0000000000)) 03:41:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0045878, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x3, @vbi={0x32315659}}) 03:41:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc020660b, &(0x7f0000000000)) [ 2409.792245] binder: 5763:5768 got transaction to invalid handle [ 2409.821374] binder: 5763:5768 transaction failed 29201/-22, size 0-0 line 2896 03:41:17 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x2], &(0x7f0000000140)}) [ 2409.863579] binder: 5763:5768 got transaction to invalid handle [ 2409.869781] binder: undelivered TRANSACTION_ERROR: 29201 [ 2409.888839] binder: 5763:5768 transaction failed 29201/-22, size 0-0 line 2896 03:41:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @vbi={0x32315659}}) [ 2409.946554] binder: undelivered TRANSACTION_ERROR: 29201 03:41:17 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2410.139134] binder: 5797:5803 got transaction to invalid handle [ 2410.146742] binder: 5797:5803 transaction failed 29201/-22, size 0-0 line 2896 [ 2410.191907] binder: undelivered TRANSACTION_ERROR: 29201 03:41:18 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401}, 0x2) 03:41:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0285628, &(0x7f0000000000)) 03:41:18 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xe7ffffffffffffff], &(0x7f0000000140)}) 03:41:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xe, @vbi={0x32315659}}) 03:41:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:18 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x8, @vbi={0x32315659}}) 03:41:18 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x1a0ffffffff], &(0x7f0000000140)}) 03:41:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0xc0285629, &(0x7f0000000000)) [ 2411.053080] binder: 5808:5816 got transaction to invalid handle [ 2411.080754] binder: 5808:5816 transaction failed 29201/-22, size 0-0 line 2896 [ 2411.116100] binder: undelivered TRANSACTION_ERROR: 29201 03:41:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:19 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xc, @vbi={0x32315659}}) [ 2411.280199] binder: 5836:5840 got transaction to invalid handle [ 2411.304986] binder: 5836:5840 transaction failed 29201/-22, size 0-0 line 2896 [ 2411.361115] binder: undelivered TRANSACTION_ERROR: 29201 [ 2411.431698] net_ratelimit: 30 callbacks suppressed [ 2411.431705] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.441873] protocol 88fb is buggy, dev hsr_slave_1 03:41:19 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x1a0], &(0x7f0000000140)}) 03:41:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x80085667, &(0x7f0000000000)) 03:41:19 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x32315659}}) 03:41:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401}, 0x2) 03:41:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x4, @vbi={0x32315659}}) 03:41:20 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xfdfd], &(0x7f0000000140)}) 03:41:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x401, 0xffffffffffeffffc) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2412.121264] binder: 5857:5862 got transaction to invalid handle [ 2412.145061] binder: 5857:5862 transaction failed 29201/-22, size 0-0 line 2896 [ 2412.200045] binder: undelivered TRANSACTION_ERROR: 29201 03:41:20 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x100000000000000], &(0x7f0000000140)}) 03:41:20 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:20 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x5, @vbi={0x32315659}}) 03:41:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0xffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200040, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000140)=0x8) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x18000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xd6, 0x400000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) [ 2412.311639] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.316784] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.391652] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.392352] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.396718] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.407392] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.413352] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.418722] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.436779] binder: 5883:5889 got transaction to invalid handle 03:41:20 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x47, @vbi={0x32315659}}) [ 2412.469192] binder: 5883:5889 transaction failed 29201/-22, size 0-0 line 2896 [ 2412.522291] binder: undelivered TRANSACTION_ERROR: 29201 03:41:21 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:21 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xfdfdffff00000000], &(0x7f0000000140)}) 03:41:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0xff, "526790987d7cdcd09c015f1d9e9f4fceb388a68ecceb9e1b3ddecbc0f9106188", 0x2, 0x1}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x6, @vbi={0x32315659}}) 03:41:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401}, 0x2) 03:41:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2413.274151] binder: 5913:5918 got transaction to invalid handle [ 2413.300435] binder: 5913:5918 transaction failed 29201/-22, size 0-0 line 2896 03:41:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) fcntl$setflags(r0, 0x2, 0x1) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf9a4093, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1c1080, 0x0) 03:41:21 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xffffffe7], &(0x7f0000000140)}) 03:41:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xb, @vbi={0x32315659}}) [ 2413.342533] binder: undelivered TRANSACTION_ERROR: 29201 03:41:21 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x1000, "e5658f758002301f6de9632d9633dbea325c034d569b41e867d16348f33ab804", 0x5, 0x40, 0x80000001, 0x3, 0x2, 0x3, 0xc5, 0x100}) 03:41:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x7, @vbi={0x32315659}}) 03:41:21 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x2000000], &(0x7f0000000140)}) [ 2413.552188] binder: 5941:5947 transaction failed 29201/-22, size 0-0 line 2896 03:41:21 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2413.781238] binder_transaction: 1 callbacks suppressed [ 2413.781246] binder: 5960:5963 got transaction to invalid handle [ 2413.809372] binder: 5960:5963 transaction failed 29201/-22, size 0-0 line 2896 [ 2413.834491] binder: 5960:5963 got transaction to invalid handle [ 2413.834770] binder_release_work: 1 callbacks suppressed [ 2413.834775] binder: undelivered TRANSACTION_ERROR: 29201 [ 2413.848195] binder: 5960:5963 transaction failed 29201/-22, size 0-0 line 2896 [ 2413.879463] binder: undelivered TRANSACTION_ERROR: 29201 03:41:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:22 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xfdfdffffffffffff], &(0x7f0000000140)}) 03:41:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xd, @vbi={0x32315659}}) 03:41:22 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2414.373269] binder: 5967:5972 got transaction to invalid handle 03:41:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x401}, 0x2) 03:41:22 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xa0010000], &(0x7f0000000140)}) [ 2414.416034] binder: 5967:5972 transaction failed 29201/-22, size 0-0 line 2896 [ 2414.445426] binder: undelivered TRANSACTION_ERROR: 29201 03:41:22 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x20080) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:22 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xe7ffffff], &(0x7f0000000140)}) [ 2414.603354] binder: 5986:5987 got transaction to invalid handle [ 2414.621918] binder: 5986:5987 transaction failed 29201/-22, size 0-0 line 2896 [ 2414.644565] binder: undelivered TRANSACTION_ERROR: 29201 03:41:22 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2414.710645] IPVS: ftp: loaded support on port[0] = 21 [ 2414.732017] device bridge_slave_1 left promiscuous mode [ 2414.737478] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.738216] binder: 5999:6002 got transaction to invalid handle [ 2414.775752] binder: undelivered TRANSACTION_ERROR: 29201 [ 2414.822529] device bridge_slave_0 left promiscuous mode [ 2414.831062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2414.975602] device hsr_slave_1 left promiscuous mode [ 2415.014679] device hsr_slave_0 left promiscuous mode [ 2415.059250] team0 (unregistering): Port device team_slave_1 removed [ 2415.071634] team0 (unregistering): Port device team_slave_0 removed [ 2415.084054] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2415.116950] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2415.224681] bond0 (unregistering): Released all slaves [ 2415.389910] chnl_net:caif_netlink_parms(): no params data found [ 2415.428180] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.435364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.442736] device bridge_slave_0 entered promiscuous mode [ 2415.449619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.456199] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.463493] device bridge_slave_1 entered promiscuous mode [ 2415.481003] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2415.489806] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2415.506270] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2415.514640] team0: Port device team_slave_0 added [ 2415.520131] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2415.527592] team0: Port device team_slave_1 added [ 2415.532957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2415.540166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2415.613134] device hsr_slave_0 entered promiscuous mode [ 2415.632203] device hsr_slave_1 entered promiscuous mode [ 2415.712279] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2415.719218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2415.735091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.741430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2415.748028] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.754371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2415.798794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2415.807827] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2415.826352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2415.840647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.847808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.868216] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2415.881265] 8021q: adding VLAN 0 to HW filter on device team0 [ 2415.891392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2415.905386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.911861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2415.934432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2415.946887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.953287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2415.969248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2415.994553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2416.009967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2416.021292] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2416.034415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2416.045416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2416.055656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2416.066885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2416.083902] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2416.098082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2416.108377] 8021q: adding VLAN 0 to HW filter on device batadv0 03:41:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:24 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:41:24 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:24 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xfffffdfd], &(0x7f0000000140)}) 03:41:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x1000, "e5658f758002301f6de9632d9633dbea325c034d569b41e867d16348f33ab804", 0x5, 0x40, 0x80000001, 0x3, 0x2, 0x3, 0xc5, 0x100}) [ 2416.265773] binder: 6015:6016 got transaction to invalid handle [ 2416.299714] binder_transaction: 1 callbacks suppressed [ 2416.299729] binder: 6015:6016 transaction failed 29201/-22, size 0-0 line 2896 03:41:24 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xffffffffa0010000], &(0x7f0000000140)}) 03:41:24 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2416.315380] binder: undelivered TRANSACTION_ERROR: 29201 03:41:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:24 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xfffffffffffffdfd], &(0x7f0000000140)}) [ 2416.472081] net_ratelimit: 24 callbacks suppressed [ 2416.472106] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.482570] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.493282] binder: 6039:6043 got transaction to invalid handle [ 2416.501626] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.506763] protocol 88fb is buggy, dev hsr_slave_1 03:41:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2416.540623] binder: 6039:6043 transaction failed 29201/-22, size 0-0 line 2896 [ 2416.551645] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.551959] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.556706] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.556799] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.562058] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.566813] protocol 88fb is buggy, dev hsr_slave_1 03:41:24 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x408c00, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) [ 2416.649072] binder: undelivered TRANSACTION_ERROR: 29201 03:41:24 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:24 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xffffffffffffffe7], &(0x7f0000000140)}) 03:41:24 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x200) ioctl$TCSBRK(r2, 0x5409, 0x0) [ 2416.779544] binder: 6060:6061 got transaction to invalid handle [ 2416.805485] binder: 6060:6061 transaction failed 29201/-22, size 0-0 line 2896 [ 2416.885019] binder: undelivered TRANSACTION_ERROR: 29201 03:41:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x1000, "e5658f758002301f6de9632d9633dbea325c034d569b41e867d16348f33ab804", 0x5, 0x40, 0x80000001, 0x3, 0x2, 0x3, 0xc5, 0x100}) 03:41:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:24 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x200000000000000], &(0x7f0000000140)}) 03:41:24 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:24 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x10000, 0x40000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x6, 0x100, 0x2, {0x8000, 0x2, 0x5}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x3a1000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x8, "ca25cbb5db1f6138ff0f6783b8ffc9e207c456767caf6c86fd03cf0f5756bb82", 0x3, 0xb452, 0x4, 0xc01408, 0x2}) 03:41:25 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x1000000], &(0x7f0000000140)}) [ 2417.130950] binder: 6078:6085 got transaction to invalid handle 03:41:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = shmget(0x3, 0x2000, 0x280, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x800, 0xfb]) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000180)=""/71) 03:41:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2417.181174] binder: 6078:6085 transaction failed 29201/-22, size 0-0 line 2896 [ 2417.232572] binder: undelivered TRANSACTION_ERROR: 29201 03:41:25 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2417.418690] binder: 6110:6111 got transaction to invalid handle [ 2417.458470] binder: 6110:6111 transaction failed 29201/-22, size 0-0 line 2896 [ 2417.500087] binder: undelivered TRANSACTION_ERROR: 29201 03:41:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000240)={0x3, 0xaf02, 0x4, 0xffffffff, 0x0, 0xb04}) waitid(0x3, r1, &(0x7f0000000080), 0x80000001, &(0x7f0000000180)) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x1000, "e5658f758002301f6de9632d9633dbea325c034d569b41e867d16348f33ab804", 0x5, 0x40, 0x80000001, 0x3, 0x2, 0x3, 0xc5, 0x100}) 03:41:25 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:25 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xffe7], &(0x7f0000000140)}) 03:41:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:25 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xe7ff], &(0x7f0000000140)}) [ 2418.032630] binder: 6122:6127 transaction failed 29201/-22, size 0-0 line 2896 03:41:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x10008000) getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0x0]) setgid(r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='/dev/video#\x00'}, 0x10) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x9, 0x4, 0x40, 0xfffffffffffffffe, 0x2240c774, 0x8, 0x8}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) sched_getscheduler(r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x80) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000240)={0x0, 0x101, 0x3007, 0x1}) fstat(r2, &(0x7f00000001c0)) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000000c0)) 03:41:25 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:26 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0xfdfdffff], &(0x7f0000000140)}) [ 2418.222602] binder: 6149:6156 transaction failed 29201/-22, size 0-0 line 2896 03:41:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2418.274887] binder: 6149:6156 transaction failed 29201/-22, size 0-0 line 2896 03:41:26 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:26 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x8000) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x80000001, 0x2, 0x10001, 0xff, 0x85, 0x1}, 0x7}, 0xa) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:26 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xffffffffa0010000], &(0x7f0000000140)}) 03:41:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) socket$caif_stream(0x25, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2418.921810] binder_transaction: 3 callbacks suppressed [ 2418.921817] binder: 6171:6173 got transaction to invalid handle 03:41:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:26 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x1a0ffffffff], &(0x7f0000000140)}) 03:41:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2418.980427] binder: 6171:6173 transaction failed 29201/-22, size 0-0 line 2896 [ 2419.009241] binder_release_work: 3 callbacks suppressed [ 2419.009247] binder: undelivered TRANSACTION_ERROR: 29201 03:41:26 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2419.174628] binder: 6196:6202 got transaction to invalid handle [ 2419.211027] binder: 6196:6202 transaction failed 29201/-22, size 0-0 line 2896 [ 2419.246037] binder: 6196:6202 got transaction to invalid handle [ 2419.254163] binder: undelivered TRANSACTION_ERROR: 29201 [ 2419.260861] binder: undelivered TRANSACTION_ERROR: 29201 03:41:27 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:27 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x88100004001006, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @local, 0x7f}, @in6={0xa, 0x4e21, 0x7fffffff, @empty, 0x1}], 0x38) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x899d, &(0x7f0000000140)={'veth0_to_bond\x00', @ifru_settings={0x3, 0x68, @te1=&(0x7f0000000100)={0x1, 0x3, 0x2000000000, 0x5}}}) 03:41:27 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xe7ff], &(0x7f0000000140)}) 03:41:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:27 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:27 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x2], &(0x7f0000000140)}) 03:41:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x800) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x1, 0x41b}}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) prctl$PR_GET_CHILD_SUBREAPER(0x25) 03:41:27 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2419.820738] binder: 6216:6222 got transaction to invalid handle [ 2419.851101] binder: undelivered TRANSACTION_ERROR: 29201 03:41:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2419.996251] binder: 6238:6243 got transaction to invalid handle [ 2420.018827] binder: undelivered TRANSACTION_ERROR: 29201 03:41:28 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:28 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xfffffdfd], &(0x7f0000000140)}) 03:41:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0xb, 0x4, 0x10000}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 03:41:28 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fedbdf250b00000024000900080002000000000008a2000100f7ff6e627427fa359b2aa006ffff0800010006000000080001000002000014000200080002000500"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:28 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xfffffffffffffdfd], &(0x7f0000000140)}) [ 2420.706435] binder: 6256:6262 got transaction to invalid handle 03:41:28 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2420.761728] binder: undelivered TRANSACTION_ERROR: 29201 03:41:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) tkill(0x0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:28 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xfdfdffff00000000], &(0x7f0000000140)}) [ 2420.916996] binder: 6280:6288 got transaction to invalid handle [ 2420.938809] binder: undelivered TRANSACTION_ERROR: 29201 03:41:29 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x101, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = gettid() r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80000, 0x0) connect$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0xffff, 0xb, 0x4, 0x1000, {0x77359400}, {0x0, 0x8, 0x300000000, 0x8, 0x8, 0x1, "03811842"}, 0x101, 0x7, @planes=&(0x7f0000000040)={0x400, 0x8, @mem_offset=0x81, 0xede4}, 0x4}) 03:41:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) tkill(0x0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:29 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xfdfdffffffffffff], &(0x7f0000000140)}) 03:41:29 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:29 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x200000000000000], &(0x7f0000000140)}) 03:41:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) tkill(0x0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:29 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080)) 03:41:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2421.602295] binder: 6300:6305 got transaction to invalid handle [ 2421.639249] binder_transaction: 5 callbacks suppressed [ 2421.639265] binder: 6300:6305 transaction failed 29201/-22, size 0-0 line 2896 [ 2421.679276] binder: 6300:6305 got transaction to invalid handle [ 2421.704006] binder: undelivered TRANSACTION_ERROR: 29201 [ 2421.710107] binder: 6300:6305 transaction failed 29201/-22, size 0-0 line 2896 03:41:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000040)=0x8, 0x8) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2421.749616] binder: undelivered TRANSACTION_ERROR: 29201 [ 2421.831683] net_ratelimit: 30 callbacks suppressed [ 2421.831689] protocol 88fb is buggy, dev hsr_slave_0 [ 2421.841782] protocol 88fb is buggy, dev hsr_slave_1 03:41:30 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:30 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xa0010000], &(0x7f0000000140)}) 03:41:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 03:41:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2422.502736] binder: 6340:6344 got transaction to invalid handle 03:41:30 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x2000000], &(0x7f0000000140)}) 03:41:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={r0, 0x0, 0x6, 0x200, 0xffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40002, 0x4) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x629b, 0xfffffffffffffffd, "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", 0xea, 0x0, 0xa07, 0x800, 0x5, 0x800, 0x5, 0x1}, r2}}, 0x120) [ 2422.551184] binder: 6340:6344 transaction failed 29201/-22, size 0-0 line 2896 [ 2422.573849] binder: 6340:6344 transaction failed 29201/-22, size 0-0 line 2896 [ 2422.621821] binder: undelivered TRANSACTION_ERROR: 29201 03:41:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:30 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2422.711636] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.716846] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.721998] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.727057] protocol 88fb is buggy, dev hsr_slave_1 03:41:30 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xfdfdffff], &(0x7f0000000140)}) 03:41:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80202) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x800) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x9, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x6, 0x1f, 0x3f, 0x3, 0xff, 0x6, 0x6, 0x0, 0x6, 0x18}}) ioctl$CAPI_INSTALLED(r1, 0x80024322) 03:41:30 executing program 1: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2422.791633] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.791637] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.791682] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.796744] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.823985] binder: 6368:6370 transaction failed 29201/-22, size 0-0 line 2896 03:41:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:30 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xe7ffffff], &(0x7f0000000140)}) 03:41:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:30 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:30 executing program 4: lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00') r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2423.056459] binder: 6384:6390 transaction failed 29201/-22, size 0-0 line 2896 03:41:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:30 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xfdfd], &(0x7f0000000140)}) 03:41:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:31 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:31 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fef, 0x20000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="cf000000280300000500000063fcb522dd617f337800a8052a7e68bdcc967ee5003f1781ab4d81edf82b007a8267b8aea7dd90cd075a1aae6e97405d9c86fb5edea2d4671307b4036db4c5927103fe1b8eec3088f1dabdc4375c2e11c64f3446868f9a67e88cb4d964680bee6ea067801528c13662a035ba54664a4c03f563faf8d2ff728e1ee1f26207239d8b061f2959bc0578164427e2a0c98787f44cfe913d42d405b707d564edb90c87c3726683a30c48b00f2878da4f7ad5c2eef3eafa9bbbc94132040dac661d305d64b7de6f80bd90aa7d939c029fcad2"]) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000200)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0xa1) 03:41:31 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xffe7], &(0x7f0000000140)}) [ 2423.306365] binder: 6409:6412 transaction failed 29201/-22, size 0-0 line 2896 03:41:31 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xe7], &(0x7f0000000140)}) 03:41:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:31 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40004000fff, 0x80040) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x341200, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) 03:41:31 executing program 1: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:31 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xffffffffffffffe7], &(0x7f0000000140)}) [ 2423.694065] binder: 6424:6427 transaction failed 29201/-22, size 0-0 line 2896 03:41:31 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x205b, 0x8000) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000180)=0x8, 0xffffffffffffffdf) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) 03:41:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:31 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2423.896055] binder: 6442:6445 transaction failed 29201/-22, size 0-0 line 2896 [ 2424.013756] IPVS: ftp: loaded support on port[0] = 21 03:41:31 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:31 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xffffffe7], &(0x7f0000000140)}) 03:41:31 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2424.082803] chnl_net:caif_netlink_parms(): no params data found [ 2424.111526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2424.118017] bridge0: port 1(bridge_slave_0) entered disabled state [ 2424.125363] device bridge_slave_0 entered promiscuous mode [ 2424.134643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2424.141215] bridge0: port 2(bridge_slave_1) entered disabled state [ 2424.149714] device bridge_slave_1 entered promiscuous mode [ 2424.208778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2424.240053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2424.265505] device bridge_slave_1 left promiscuous mode [ 2424.270936] bridge0: port 2(bridge_slave_1) entered disabled state [ 2424.332441] device bridge_slave_0 left promiscuous mode [ 2424.337869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2424.494167] device hsr_slave_1 left promiscuous mode [ 2424.546110] device hsr_slave_0 left promiscuous mode [ 2424.586258] team0 (unregistering): Port device team_slave_1 removed [ 2424.596869] team0 (unregistering): Port device team_slave_0 removed [ 2424.608835] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2424.650689] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2424.729361] bond0 (unregistering): Released all slaves [ 2424.820746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2424.829094] team0: Port device team_slave_0 added [ 2424.834773] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2424.842094] team0: Port device team_slave_1 added [ 2424.847304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2424.854708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2424.903587] device hsr_slave_0 entered promiscuous mode [ 2424.941879] device hsr_slave_1 entered promiscuous mode [ 2425.002023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2425.010120] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2425.036126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2425.067038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2425.077380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2425.087436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2425.095564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2425.102827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2425.143994] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2425.150051] 8021q: adding VLAN 0 to HW filter on device team0 [ 2425.159331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2425.166681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2425.175364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2425.183471] bridge0: port 1(bridge_slave_0) entered blocking state [ 2425.189817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2425.199052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2425.208238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2425.220943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2425.229537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2425.237781] bridge0: port 2(bridge_slave_1) entered blocking state [ 2425.244162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2425.253707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2425.262169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2425.272204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2425.279722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2425.291476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2425.299418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2425.307837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2425.319257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2425.326622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2425.334435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2425.342756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2425.357988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2425.368998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2425.379756] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2425.386999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2425.395165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2425.409524] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2425.416647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2425.431407] 8021q: adding VLAN 0 to HW filter on device batadv0 03:41:33 executing program 1: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:33 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:33 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x1000000], &(0x7f0000000140)}) 03:41:33 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x904001003, 0x3) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0xab) setregid(r1, r2) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000001000085000001000000bfcd000000000000ff760000000000000400000000000000df41b42500000000f9ff0a00010000000000000020000000000000000300c845066c189242068585db1a00395812ffd7dfa61ead52a1b3000000457d000000000000580f0010000000000400000000000080"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x690001, 0x0) 03:41:33 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2425.729231] binder_transaction: 6 callbacks suppressed [ 2425.729239] binder: 6471:6475 got transaction to invalid handle [ 2425.759150] binder: 6471:6475 transaction failed 29201/-22, size 0-0 line 2896 03:41:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:33 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x8, 0x4) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000100)=0x78) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffe00, 0x48440) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x400}, 0x8) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:33 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x1a0], &(0x7f0000000140)}) [ 2425.834421] binder_release_work: 6 callbacks suppressed [ 2425.834427] binder: undelivered TRANSACTION_ERROR: 29201 03:41:33 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:34 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0xe7ffffffffffffff], &(0x7f0000000140)}) [ 2426.211408] binder: 6497:6498 got transaction to invalid handle [ 2426.268904] binder: undelivered TRANSACTION_ERROR: 29201 03:41:34 executing program 1: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x200, 0x1d, &(0x7f0000000080)=0x4}) ioctl$TCFLSH(r1, 0x540b, 0x6) 03:41:34 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x100000000000000], &(0x7f0000000140)}) 03:41:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:34 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2426.745751] binder: 6509:6514 got transaction to invalid handle 03:41:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000019c0)={0x0, 0x8}, &(0x7f0000001a00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000001ac0)={0x0, 0x48, &(0x7f0000001a40)=[@in6={0xa, 0x4e24, 0x9, @mcast2, 0x3}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0xd88, @dev={0xfe, 0x80, [], 0x15}, 0xc5aa}]}, &(0x7f0000001b00)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000030c0)={0x0, 0x7}, &(0x7f0000003100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000003280)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x9, 0x2, 0xfb, 0x5, 0x1ff}, &(0x7f0000003340)=0x98) sendmmsg$inet_sctp(r1, &(0x7f0000003400)=[{&(0x7f0000000180)=@in6={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, [], 0x29}, 0x10000}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="b37c43d8d6b087f89d8e3cc65a1203fddd23826f858145a4b664302d075f73d083248228c97af6ebc2b276824d379c8e48b092ca76cbd9232730c1ba9f9968cc36cdfb254edb11af6fefb372013ab4cadafac52c5760e12fa6ae244ec4a4b285f0f15d2dd312c3bf4a05ae56a70d81e6ad98fa449513946201ada844591faed846418d736b4adbd54e4763a827a90899e2da2f2db70ab5f9a87a13239c50c1a3bb27a97f7da5eae3270c6b1c1d89c6f285a312b5a47884f3e0ce17287f38bf36660a60bf18a9aa69cb07d058e65649ad822193817348f633aed81527", 0xdc}, {&(0x7f00000012c0)="f1e4bbb7f11583744f6820d91386e195ea866ad96d7f1fae080cda4693cdad66a67a52a28ab6ebead404fb27f50334315d1a200643fec26e74bc60fea0f8d8656f41cc8a737943f27b1785363d404bc11d823be433690538cbb8dfc224720378f92bab4331bcf14c72cb7bcaabb93aad91e3e220233ab14ebe80f87455d53d1d8d1f2efd0272c8fb367eaad909a1728a", 0x90}, {&(0x7f0000001380)="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", 0xfa}], 0x4, 0x0, 0x0, 0x8001}, {&(0x7f00000014c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001500)="98607f8a0c49692d7db6891fee589b430f6e5f0771a87b2e56458f6a8618a6d852d4b3315ac8a2b1612ba15e9db575b59d569acb9a926fb9d7a603e6dbbf091c4f359d36b3f95aeed3bb8147a754ea45c04d813feb3fe2132f165d4b50386dc3e337a13611c8b4920ce793a92cfe59df0c817a34c06a298ee1f63c6d02798527370e46ca515d6b653968fcfa1c8904c440c2c36b111faf975aa9642ddefeee20803666f04ae2b8aade4f1af9e0bbdd60e3d893104926148c2906d846ce31159c66917aae27c995b1d0fdaa63ea28bc3bcb7f4812dbfc4fe67f818c646355d5050d1384473181146ab9b94235664c4c5db7a7ce", 0xf3}, {&(0x7f0000001600)="3a1517c677348437d1ec182c2a32c54844158c007cb1f52c8370659cd879b5b88d9bea6f03fbeb692346fd4a1cf0ea53c89e6808934eea7e8cfcae90f2415188c5a5242a26d8dc488e7f5610e0d62b95c439a8293011bb4c0932ff4af8360d1700459dd082a92030c4bf3bfb885cbef4474b91ea2d863db68907c24ab76f1395d27f533cde99fa93d70ac7522b1c464c6dbdce0887f6c8c821ad438714a72afb9b13511d0ea33c1def3197a768c2c0b1e37c18cfab5537f8ba7cba1d645375af3795878ed39e3f", 0xc7}, {&(0x7f0000001700)="1974ddd690588a66ddb2e04561d9", 0xe}, {&(0x7f0000001740)="3d5d3308d75f8528d739654f86e94540002a5d60b43f4fa043948382", 0x1c}, {&(0x7f0000001780)="2250dc446c59ec1b8e7feb25fd9ffbba60d60c39a518dbbd790f2b88700e1881d1ddcd89ee0a992212e7deca269e295452d0fd83261181233d7ace5da8fb730399e7617dfe110ebf722ab2809ca83d5b6587cbedf1f327482add97d8738b2070e76b53ed360db8be7c8e667cd1073fa1927fd4058077447efc26f07001bc74d42e9b03f90439229d902054b49ee48edcdc757c1238b54733abf49b7c4e70487560621ec6afb6054564d1ee63b5d1e470e2e1bdc8", 0xb4}, {&(0x7f0000001840)="6ecfd364b6f72662b07f18e65401a2c41292751bfc8ea4bb9eb35c54761b2a42437d1a37009c987a379094a99d40bae66c5c1a20e3bee60081a86207af90733d98ed25d155ee544a2a08046b3c7d104b99f904707381714d70eb894127262503ca6ba979cbe1dbffde92f4e65560b9a404c45155f9ba86aa7e124b8bf55384bb691fbd4ac8f2e3d9f5d39be2d97f75f700a4c9de32b37e0081171d2e92fe127cc778b45f19cce805f50233d048b52c083e0ea1111b104477399c129d19367a2245bef9405ca85478a43e6af88abd0d122eedff21dbd92503711f4a8bee4dcdd88ba6246f3f322be03c", 0xe9}], 0x6, &(0x7f0000001b40)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x1ff, 0xffffffffffffd620, 0x2, 0x81}}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x3, 0x6, 0x4, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x100, 0x1, 0x4, 0x1000, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @broadcast}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0xc0, 0xc0c0}, {&(0x7f0000001c00)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003040)=[{&(0x7f0000001c40)="6090ea814d3a2a822a28c64816699b8c23cf9c342c9dc467fad2a9ca743bed1f9b3f314fa8bc5ccad64d289c5880c78aff5b8c4ab558a40be7708645c438bca8c0c2468448f5ab4003e64dd70bd82e6e5614316c3dd510b3b1ef6196648fe19842231fc6ac2fc17e425a911439af007ade6be67f76", 0x75}, {&(0x7f0000001cc0)="3d41f588f3667c041d5222558a1bd803a3dce904a4a8825fa6eef4dc866348c5ba904f7726c785aab6939a55611ab2c034d58e05fab8c4c7ceb2731fd984a0e84c27dba064e3c6f8e119a139a5903fe551e1447aadfd0d0c3294577c9cd788559ed386c92ac3200f070a4af60912ae11ee9905311e613b7654d958be9cb4acced2ac141ead131a88c1efb59ab4c02fbb39b8a6355bb263cd2f05", 0x9a}, {&(0x7f0000001d80)="a334e408d5a7d994a25fef10de39bbf27666b64ad4c77d6557156d95933fd51986ee0f48d7cf3fba8612c59d7b2305ff157171f4ed668979948171d4c90055265a11bb857b1feaeaa9f164e87959f0657d31b90829939f005d199fa654520cc5cd0a9ba345ccb05ec49d4d47b6f68ca3e590a7c61d7d6157aa33170277be802757939de0937b6e45dcf1ddd2959d6371680cf884bd7409523e92654b811ad9a6dea0997d1b733b0c6f5c0c10bd076fe0d5dd5301f7a5c50b304bd2e78baf219459c2d359f523cd365eedf7baaa49cc61acbf33", 0xd3}, {&(0x7f0000001e80)="908634f5cb3b8d9800f3d22021f0747bd7a1e48d28d6e1", 0x17}, {&(0x7f0000001ec0)="f65b180bbfb4a26e8acbf1e57c7a0ed9fc7995c823d2faa5262911b84e874c536a5a07e9299c634a12362ca119c27a141511b59273eebd7c5e9aa32c5a2b830f65e74db27bfaa1321b21feb0cb866a68da732a3997543197e60ae202be4b4d8f50dc3b", 0x63}, {&(0x7f0000001f40)="36548535143485ae858d2ae52c8bb1f308dbee7cb5ded7a4fac82297e1e8cce22430264e9da9d301ace548f177184d63429a1353f4da49fc0675d39797832e6a8747734a47f10401da38821cbee7e653d89934d7d4896a47c608675ce3f40e2facea0de93b78f63c7ec054701a94f680992b8834682509e13a3d6d5c66af42f9c875b8be93e6af87cf2fa97279c483a93d570cdeac5fd5e3fa1ba69354f77f7a768f66ac5cdb4900164603dfa740e66018863582ac0a87b51f9e19e1ca770c9d80f8b332", 0xc4}, {&(0x7f0000002040)="cb2323dbbff8da70f2c7266a223d36ec10cc8cc326004f98a40c1eb7d4ef7c8519c737bb34b9fac699a7b54da4e2ed66663b2a9895ace3e0ccafe3fbb339e7966c1ef1c335e5108b2458d9b37546f36d41a0fcf4e13000522f5960f05c12491eadbd81b732e0b8b70c9cab43ecec19ccd800c157b9e5657ed6dcd61b8527bdda9e2360868e1c12a318553038d833c14af567586a3b25e77b855435b3d37d29db760d9413030028c1be8e71885a31f16e82df6350fc36381258d7445fa037e0e3890991d00b3df92bb13ea4679591298312f8383ca1f737388dfc7ce9722a2d79af8ad9bc40106f6bba86e5ec73bc19e3b9e1eb2357e19fe6ac6c48d1076a38baa94a7961ec3bc09bd9d3dee6aaed05efdc2cd0e30ff32bf20079fb1c355dcbcfed049face51775cb7046f0ace0aad0b9477cbd93d43f79ae690831803e895f67743f37a42d5dd0b5db72d60d0d6b886ee2c0884bca1f0eadee6e6b10df1660b5e856b50da974a3ee10abb7fa94896c74a1bc236904e45bb3593fb8cd419cb7a03741da3581f37cb9b06ec2e1fd87e509282e743dc17367d6da6ddb654d0cb86fd083923d96c6d7db836043b268b155ced63f302cf4ebcd0be5efb4c0250404f21b682854c814839b54f3ea97547a81dceafedc28678f6b64b2f8b2efaf86952a5d4a7b55fa89dd8b11263053befb947540b8f2369f351e9f17a493cf27ebb255617a365b3eecd71f7fd7f47d392c7319f4e6b8d5c89b7eb9634f8c9d79909d8dbe0cd6425dd377d4305786dac89433afc909aa3201dd96ef41ffac9d08bbf4d1d08d809d3a1426d9c7ef3db42d491115871359196fa5696d35d3250969b27b5492069b4744a590017415d98d4d150371827519dc0ef90c48fa2e628be9100e853cd9785822ffabf45a0f8c5cb02e021edb62d970e264d349699469761be51e522719f1a922d1fe8c2fb42050ac417af90fcc77736e97190634e3519fc4b2d0028c58f6620caca3d9a79132a0ac3fd1ddf3dcbfe13a2d9359782b0e70be125520ff4a846b447a3384b9e2318b2370d18b92b6b5b67ae20462e047d903d0e7d70b83d5cbf536c8f6dd2d892dee0019593535c4cb329176ff30f6c43795b5190ffc2285b6c313c1c730f808b7212ea213af85f7497839940c04d0ac41f804f60ee239a3c5eb427148507527eb1f59219eadb2bbb1d77edafad24510c1441e6603ba60007545552f40434114b9cff76fa2588062e9ab3b6f98907b6f310feb19e4f0752122fff383c47c8febdb4336baca5502fa6c4c989bae15fd8c8fcae60f96775e120607ceb21aafbb3fa177e1a4540112b065bcc9317eedfb9ac4ff660cf7634fc4da21e7128529b1ecdee528312671bfb0c1fb47685ffd195f5e743d64df081ece1240d5b6e743c73b0d0cf8a41b7d4e738846deac500df194487f98dcdfa10e24f44b7d51be88c223fa42b525b6ad4bb302c0e004d3dbcce24a53f2050b749d5d19934715125323e15b8b1036f6f9fafeae1e527f257928abf766a8c4cd71f9014c440116201e2b00fffff3996c4e9a2bd96520611060f509f7130a0c770027e817efc356f97aaa3a8dfa71917ff8a018d63de1d3e8a493cdb1335f94fc606456a5477fb244c8e8014afaa41ec8aef9205324dc8a72057c3c88e3fe2a8b9ae28297a760be7575053a41bd14f7251d8ab72c75ad38204f83e0480a295cf8e608aef8a9625932f302d42812156a7d79d869a0e91af45a80581477c8f636b7624b3708e3fbf25cba0ca5bc0ea34082bb6af83ef4a5a9ff50d831b128f217f642973f1daa18dd387fc112e4f5c112d5ee6e859762e29657f36b13c2bef48528420541150e6c84dd7b6dff82f792c4e2ff515d3f53c1db6e8b7f32521a9d6556f6447f69f2988503de5c5a361ad67a4f6027afb7c626057900660504d0e7cba4ef2466200f2d163e3ee922f7f82c6442acc5f21aa866c286f03ee2cf4314818ea27e57dce9ffa803e1ac4aefdfd673438258adcedfdc8bb614752af94ef1b2010251bf0b969524dbe82d685be2059dd83d56935915815b91ba85c67f602318b1851e00fc81a4ed7c61633db04079cbb47849f2593319faeaad6234e4132bfa5af29afb69946cde71ea6c3357ae82c08cb95cb783a17fa9085a479c70a21e39b7e1cd70000ca7bf58bb9079a893cc461909f3fcfce6db97ca331a86114b01b87625b349a67f7468c009df4af8ebf01bf7e7f3c73d5c77cc81f6dbcb73c05c72cc01cd649d140aa91f36c78c3f4abeb8e3a46accc5489fe993f572a5dacef7b51c5e851bfa3417e58e3b246047baf69d78efa32626011301f20b213476eafd38d9e009de8662bd7916aad2996ddf790a7b88a12c762e6824222c8da4b098a4a4e43d83a4f2d0f6fca9e2157529ede85d019b2e2a242bf7a684d0f1247c66ef7c9dff256d831d6b7bd53cf513c1f1f2a310529ef43dde558d920f2f157110d4762c19cfef39d8e65dc3d2afad2e8832f4a85313ee1f451edee4ed26f51656d80d5b6f3bf45ee460f51f0d948959859a43574298fae6ad44c70fdc9cd884d2efc42d21b7eba65e400e8acd08429827b57e314f8f5432c173cfe9181d5712ee21a77e421ffcab384fd4878d9c97da1600de2d36fa0c5843bd0af9f76778b43161b4fb7ae48777dd25d8695507579a9be1cca48ae31d7dddcb6fd9fa4fe71f3c3f1ee07e31b8359386f17d5f0aa32b08aee0372a3d4832483d2c0596dd24b30b45d000bf080b1f0fb46c037e87c3bf8713f3050cec3a6a19d66ffd10e71a4511b88c4d26024e3a524236e56ef3e91ca8ca312862f24016e9e0f26c131ec456d57280468faa7ade3c86586f3e5a1ff5478317f884c79ece15649c7238fda8fb1f3b33f7fa121e84b56af9c7125682d71bf3b04bb1029509e03ff1b0a5d414ea7d9d4cc97642957c8b9bc02973194c19fe9ea43d7713111fc0582abced01ec56c4210f71cc4af8e89ea0e4b9554c740695afae60dbfaa39d2ae1582ecf290d3af850b7c0fba7fa18ff0316c58971100b81777abdef76e06e5375f00c83db19a29b5357f258d48a9cf2468b78b84448d20f573705d4456e15ac5f07e8582a7e64877b7be2058edb5c3df15c63cc221c6e71c428756a8ccd54bef8486175246192b63d2f518a27e76f82fe64aa22702ed43baf317cf04c28504e54344106a269d41ae1a411314179a2d463f79c3ead8ba4d0dfed09e8bb20a94661a885fce20bb899ec68557b29b96ec4120e7e88ad2695e47d3dcf2525374a7c5cefcab836d2e8c69890b0701e86b2755b152ea5b89505dc21ae9e686a8073d1182dd058888a5ced74cbbe0d664cea051d1cfd6b9a307588b9ca6385ba6a3e077d85d2df4a63cadea30b1d9bcf5887fd200065c2588392d43ca8f958f68da85dc612f26162f5e3fb46a59c75da1d3eaf61ffbd14c67441571a85a782ac064c0fc12fa495105737f4b6d57925d0f0a76580e79585ef04946466a8b1dd11e71e1a47eb53cb44d74ed026c0a259f203ab7996629e69cdbefd7382e2ba35a7a5c53bf1d75efa098f6a145a90afada881bcd640d1934caace7283fb19ce4f7974c1e000688d7a636097e9a1e0ad11f4da2f5eb364270cc0a192cb8df17441b693d244330f1e65a2f3384e70ca63d1745f898db2415dbea1537bb3f8c0f3a2b135709367c7284c6a0f6b775d683d49e248bdf92a886c2b787dd2e0056c5086ab35624ea28f54fa14964fb0bbb0c476a43f1fa80044972861227fbe8feebc2031d838c7efd0a53ad642012f20061e3ced7218431eef860cae7bf481a0841caf86fadd97d91eecbe011c3862678c51f17a95a5ecf47a84f00a16ede6a217b073c86d1b89bdaeb6bf922afde51c26a459d72ae721310d75c4db5059c64be4af193a61562069a3e67a836f5a50cb753a8ec043980bc66990a342db9fc24b6064f51cbe2d1bde2829beca0e56eefede1e5d2ad6b1b33c6334b097d2d25b11164a39df489928a715da4c6e5257d0fbdf7c9c292516d1a9de318f94772ee77fedbaaff9c4aeddc1f4470028756e5c570af1351b5409d38a0406d5d80fe04a646651f8698c8f1ea2af844e363116be495ae8793f1af9745d21180221aa7acced8bd5e9adefbb7b98cbfdcefa4ae9174f3f5fdba6e34e94dc1d765ed0dc1f23ddbf6e88bc60433171ef480e960b69694c5f9182fc71fffbb3d68a87ee76a5f12dca120c5bb99c2271c65acf54d5f590f1c0b380cc4f6b3c8923710e4325fe3a8d167f9ae67f88ae34236fd7babe4c9f6be75a8a367910b81f26b7aceec4c775d672f8e6950c53593a6bffa1fa79d05598c58534e6c423ae0374ae19c35f73bc97b0bb304548f1f99e902e7988e5a2f91bb4703c3c8ac1308b457ea70a6bc6dab2b5142342ee6007a807d93b1fff8b88772f9b6330b59beeae5540f2cf9bf96a7526596ba9dd340a3c177e69366ff8812a127845d399ea4283cabc44f0c9fda4b0bd9c9e0d125f2d847b87baf559f8eb97505c4949367c6dbdf5899e2175fde1d742e211101677b55c056ae06e3b537c8c1a0850d1795a6db9dd1ac18c68ec6ed69de53db75fc0a18b08d19f1d3e2761a2f140b64b7b629d6709eebcf2d393847faee0e45905175a0c2f5d485145541f40ab526c0cffc3a69eba301d53af40ed248797e1841411e9d70ce5b9c927272e022864737b3af947d4bf5c09b7e760736c49384da2024de15cb9344043c14490e33b09935a2c6a220613550acae1abeedecacdaa9d93ab2bd371bf021765bc9250ec44d567dafa277139aa1b16bec1d6e8dc25b7215ed17a17d7130b012589f748938483425a90716e70c7153b09cb0a97754b588d6dc291575d162a97489af8832c5ac5c423e3080cb50a1b31244078d851ff560ef7143d6205f6b21490d155ecc977fe651aea01b962da42ef4e86b8e3dd1372dc6198fd1d3e2c51f2a32735c9be162558b1d31dc3a30af249980b14ec77dbeea506f7fa6864d7e906dbeae3c4de8a87c8a799f378838e2e24706832dfae340fcd50313496e6c9c629bc188d4cb50a9452830fc5c06193d4306e1854f81434c02c185d6b0e2e8fb0dfac78523320c9059d0e3ed604cec8776642fbd1a662d6f013e2da9f4675eb10c9178117d638540423ad4bcb528b1daec6dedb930448d3dae2bb34359370daa595e7145a9b6d110c7b450cd5efc5f1d76a74e120a703c3cacc33532f029dea4ffade02e6be07b288e24f9d4dd7d60521965d224cae984f9db4252b8c10e5f02a1bbcacb8a773b4300caae5c392a2f7c54d0dfa477c453521db9a24261837cc11b2e8d0b1ca5c22e60bc7a41bc7d9831c1bef47d7f3655d2337b7de57994a5d004b4283a26548c124252174b4f0f203f95e04bdc226a7ef9b9e3f5cf6f9e263fc6a78edf44de8ff068828beeb12b1a8552f152bee2a31f3c1f312259acd9100b11257d0bb4539cb803b8eb5c574fcea81847331f7001304220bb4684b0662161abcba623c7cf9cfe3f0d689785a76933fbf0a04a59e6e19d819349722d83744e7d5ed0cddbb69bb4f14db0308f4ef7a918df65a81a3d4bbb30ec926698e23063498ae04c55bb0971ef637565a4357a7b431a6cce0b18cb24f1b8e7b71be97d81c8653ef7339f36db778ae4d9cc5ba0007e8dd939594cd2bd68fde25fc9ba6aef8ebd60542db01c8777b6c0b9297e04d071a7ef2672716b4af54ce58fb79de041a64b5e8ca034d2b22471bc0ea0da4668f248cbb5bf4659ed01c395fd7b9e6a41889305aa98b9da555", 0x1000}], 0x7, &(0x7f0000003140)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x1, 0xfffffffffffff197, 0x81, r4}}], 0x38, 0x10}, {&(0x7f0000003180)=@in6={0xa, 0x4e24, 0xff, @ipv4={[], [], @loopback}, 0x8}, 0x1c, &(0x7f0000003240)=[{&(0x7f00000031c0)="7556ee4105f2ef29e76772", 0xb}, {&(0x7f0000003200)="84a05a3e05488da16cda58c24d9f2b37579b6c77947fab2732a1aa00d1d69cd02f6771cbb2bda3190691d5fd675acdfddc459ffa62e6", 0x36}], 0x2, &(0x7f0000003380)=[@init={0x18, 0x84, 0x0, {0xfffffffffffffffc, 0x0, 0x3, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x10001, 0x4, 0x1000, 0x7, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x25}}], 0x78, 0x8000}], 0x4, 0x4090) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @multicast1}, &(0x7f00000000c0)=0xc) 03:41:34 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xffe7], &(0x7f0000000140)}) [ 2426.805461] binder_transaction: 1 callbacks suppressed [ 2426.805492] binder: 6509:6514 transaction failed 29201/-22, size 0-0 line 2896 03:41:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:34 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2426.871683] net_ratelimit: 26 callbacks suppressed [ 2426.871690] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.881774] protocol 88fb is buggy, dev hsr_slave_1 [ 2426.951638] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.951672] protocol 88fb is buggy, dev hsr_slave_1 [ 2426.956911] protocol 88fb is buggy, dev hsr_slave_1 [ 2426.967020] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.972123] protocol 88fb is buggy, dev hsr_slave_1 [ 2426.983131] binder: undelivered TRANSACTION_ERROR: 29201 03:41:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2427.182815] binder: 6537:6542 got transaction to invalid handle [ 2427.214265] binder: 6537:6542 transaction failed 29201/-22, size 0-0 line 2896 [ 2427.233924] binder: undelivered TRANSACTION_ERROR: 29201 [ 2427.511978] protocol 88fb is buggy, dev hsr_slave_0 [ 2427.517161] protocol 88fb is buggy, dev hsr_slave_1 03:41:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$update(0x2, r4, &(0x7f0000000340)="318fda3de751c5d47f44db8da47615921fbb5144b3507c8239644b2f71dd556c75d4569a3f2d6fe43c09ef7085d98de811eab5648a22f7f8031040e7163d5415d3e34b844524e9d0ba42609d72a69452846de04b99157f2cb0420a380cb7f732d6654f6d9a3ba1af162e5ba57b8843b6798be3686c26111a5ba32244f6b159e9e20531686734e5a958499286a1cdb044b0bfb73f12697f073dc073d1e8a99fb1cf8b6a83c8931080e397508ced6d1a9368d0f4ce4bc8082edc1958dd0a3caf9e449e8e9048278f60422988f93f9185d373d73b8ab0a5d9ccef", 0xd9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x24, 0x1, 0x5}}, 0x14) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000200)={0x100000000, 0x51d7}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) 03:41:35 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:35 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xe7], &(0x7f0000000140)}) 03:41:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:35 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x6}, &(0x7f0000000180)=0x8) 03:41:35 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:35 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x800000200000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:35 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:35 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff], &(0x7f0000000140)}) [ 2427.697358] binder: 6549:6555 got transaction to invalid handle [ 2427.731750] binder: 6549:6555 transaction failed 29201/-22, size 0-0 line 2896 [ 2427.800845] binder: 6549:6555 got transaction to invalid handle [ 2427.835866] binder: undelivered TRANSACTION_ERROR: 29201 [ 2427.843084] binder: 6549:6555 transaction failed 29201/-22, size 0-0 line 2896 03:41:35 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd], &(0x7f0000000140)}) 03:41:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2427.882387] binder: undelivered TRANSACTION_ERROR: 29201 [ 2427.911892] protocol 88fb is buggy, dev hsr_slave_0 03:41:36 executing program 1 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:36 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6000fff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[0x5, 0xc4, 0x58dc, 0x1, 0x1f, 0x6, 0x9]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x20, 0x4005, [], &(0x7f0000000080)={0x990a6a, 0xffffffff, [], @p_u32=&(0x7f0000000040)=0x4}}) 03:41:36 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:36 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], &(0x7f0000000140)}) 03:41:36 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff], &(0x7f0000000140)}) 03:41:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2428.921469] binder: 6586:6594 got transaction to invalid handle [ 2428.935312] binder: 6586:6594 transaction failed 29201/-22, size 0-0 line 2896 03:41:36 executing program 4: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000100)=0xc03b, 0x4) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000180)={0x0, {0x3ff800000, 0xff}}) [ 2428.965841] binder: 6586:6594 got transaction to invalid handle [ 2428.968384] binder: undelivered TRANSACTION_ERROR: 29201 03:41:36 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2429.033586] FAULT_INJECTION: forcing a failure. [ 2429.033586] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.051639] binder: 6586:6594 transaction failed 29201/-22, size 0-0 line 2896 [ 2429.060296] binder: undelivered TRANSACTION_ERROR: 29201 03:41:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2429.135942] CPU: 0 PID: 6600 Comm: syz-executor1 Not tainted 4.20.0+ #175 [ 2429.142990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2429.152331] Call Trace: [ 2429.154919] dump_stack+0x1d3/0x2c6 [ 2429.158545] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2429.163734] ? __lock_acquire+0x62f/0x4c20 [ 2429.167959] ? mark_held_locks+0x130/0x130 [ 2429.172216] should_fail.cold.4+0xa/0x17 [ 2429.176291] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2429.181390] ? mark_held_locks+0x130/0x130 [ 2429.185648] ? mark_held_locks+0x130/0x130 [ 2429.189882] ? graph_lock+0x270/0x270 [ 2429.193693] ? print_usage_bug+0xc0/0xc0 [ 2429.197746] ? __lock_acquire+0x62f/0x4c20 [ 2429.201991] ? find_held_lock+0x36/0x1c0 [ 2429.206067] ? __lock_is_held+0xb5/0x140 [ 2429.210133] ? ___might_sleep+0x1ed/0x300 [ 2429.214270] ? find_held_lock+0x36/0x1c0 [ 2429.218341] ? arch_local_save_flags+0x40/0x40 [ 2429.218451] binder: 6614:6618 got transaction to invalid handle [ 2429.222910] ? _parse_integer+0x134/0x180 03:41:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) timer_create(0x3, &(0x7f0000000100)={0x0, 0xf, 0x3, @thr={&(0x7f0000000040)="b40b683b1d89fc7e141bbbadad9349b28ca9aa5451216aff1220b305139e3bd203ec0f9e10b7190ace0d3291875ec4547287eb5c71e270f2d5d61f46df161b35106d3d99d33538ab461dba84ff88be93a39efb0fcd480214ad55161ccef726227f4760b60c4a96e8d45cb548571f7e0f72771c0deb67f4b3960f6a7e09a29bc13cb5c12317401664bfd8", &(0x7f0000000180)="4de30a8a099bc869e3121cbae0f2a2b077a38d502cd934ca543f46d50a6c867666751e51940d2a3c1b76cea0abf85dcd4e416482e44c500ba86b51ec26b37ed9c40ab470a589185ac0c2f88ee074e0e2ec6b29efd682e2b6f12eb1f35a777d67679f30dc789e9c783d5e34fd0be7d2efb4c0f27e774c8f4d37087cc4a00497fa747d7d2555ce9bcc183d73984e46a6643e573abeaa7ab2ccbef492c5d5a303700a1cbe"}}, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername(r1, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80) [ 2429.233183] __should_failslab+0x124/0x180 [ 2429.237423] should_failslab+0x9/0x14 [ 2429.241231] kmem_cache_alloc_node_trace+0x277/0x740 [ 2429.246341] __kmalloc_node+0x3c/0x70 [ 2429.248172] binder: 6614:6618 transaction failed 29201/-22, size 0-0 line 2896 [ 2429.250140] kvmalloc_node+0x65/0xf0 [ 2429.250156] newseg+0x23b/0xe80 [ 2429.250171] ? shm_mmap+0x240/0x240 [ 2429.268069] ? down_write+0x8a/0x130 [ 2429.271780] ? ipcget+0x121/0x11c0 [ 2429.275316] ? down_read+0x120/0x120 [ 2429.279028] ? __f_unlock_pos+0x19/0x20 [ 2429.283013] ? lock_downgrade+0x900/0x900 [ 2429.287161] ipcget+0x159/0x11c0 [ 2429.290537] ? find_held_lock+0x36/0x1c0 [ 2429.294598] ? kasan_check_write+0x14/0x20 [ 2429.298834] ? ipc_obtain_object_check+0xc0/0xc0 [ 2429.303584] ? wait_for_completion+0x8a0/0x8a0 [ 2429.308168] ? __lock_is_held+0xb5/0x140 [ 2429.312220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.312234] ? check_preemption_disabled+0x48/0x280 [ 2429.312253] ? __sb_end_write+0xd9/0x110 [ 2429.312269] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2429.312279] ? fput+0x130/0x1a0 [ 2429.312292] ? do_syscall_64+0x9a/0x820 [ 2429.312303] ? do_syscall_64+0x9a/0x820 [ 2429.322814] __x64_sys_shmget+0x1b2/0x2a0 [ 2429.322828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.322842] ? ksys_shmget+0x280/0x280 [ 2429.322867] do_syscall_64+0x1b9/0x820 [ 2429.322879] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2429.322894] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2429.322906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2429.322921] ? trace_hardirqs_on_caller+0x310/0x310 [ 2429.322934] ? prepare_exit_to_usermode+0x3b0/0x3b0 03:41:37 executing program 1 (fault-call:7 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:37 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x100000000000000], &(0x7f0000000140)}) [ 2429.322947] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2429.332500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2429.332521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.332531] RIP: 0033:0x457ec9 [ 2429.332544] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2429.332551] RSP: 002b:00007fe2d8f15c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2429.332563] RAX: ffffffffffffffda RBX: 00007fe2d8f15c90 RCX: 0000000000457ec9 [ 2429.332570] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 [ 2429.332576] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2429.332583] R10: 0000000020ffc000 R11: 0000000000000246 R12: 00007fe2d8f166d4 [ 2429.332591] R13: 00000000004c5ded R14: 00000000004da818 R15: 0000000000000006 [ 2429.368012] binder: undelivered TRANSACTION_ERROR: 29201 [ 2429.585694] FAULT_INJECTION: forcing a failure. [ 2429.585694] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.599571] CPU: 0 PID: 6633 Comm: syz-executor1 Not tainted 4.20.0+ #175 [ 2429.606690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2429.616023] Call Trace: [ 2429.618594] dump_stack+0x1d3/0x2c6 [ 2429.622202] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2429.627374] ? up_write+0x7b/0x220 [ 2429.630904] should_fail.cold.4+0xa/0x17 [ 2429.634962] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2429.640046] ? find_held_lock+0x36/0x1c0 [ 2429.644088] ? graph_lock+0x270/0x270 [ 2429.647870] ? is_bpf_text_address+0xac/0x170 [ 2429.652346] ? find_held_lock+0x36/0x1c0 [ 2429.656391] ? __lock_is_held+0xb5/0x140 [ 2429.660525] ? ___might_sleep+0x1ed/0x300 [ 2429.664654] ? arch_local_save_flags+0x40/0x40 [ 2429.669217] ? kernel_text_address+0x79/0xf0 [ 2429.673612] __should_failslab+0x124/0x180 [ 2429.677825] ? shmem_destroy_callback+0xc0/0xc0 [ 2429.682477] should_failslab+0x9/0x14 [ 2429.686256] kmem_cache_alloc+0x2c4/0x730 [ 2429.690395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.695913] ? percpu_counter_add_batch+0x141/0x190 [ 2429.700912] ? shmem_destroy_callback+0xc0/0xc0 [ 2429.705559] shmem_alloc_inode+0x1b/0x40 [ 2429.709601] alloc_inode+0x63/0x190 [ 2429.713208] new_inode_pseudo+0x71/0x1a0 [ 2429.717250] ? prune_icache_sb+0x1c0/0x1c0 [ 2429.721464] ? format_decode+0x1b2/0xaf0 [ 2429.725503] ? enable_ptr_key_workfn+0x30/0x30 [ 2429.730065] new_inode+0x1c/0x40 [ 2429.733410] shmem_get_inode+0xf1/0x920 [ 2429.737367] ? shmem_encode_fh+0x340/0x340 [ 2429.741592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.747114] __shmem_file_setup.part.47+0x1e8/0x2a0 [ 2429.752116] shmem_kernel_file_setup+0x68/0x90 [ 2429.756679] newseg+0xa91/0xe80 [ 2429.759942] ? shm_mmap+0x240/0x240 [ 2429.763546] ? down_write+0x8a/0x130 [ 2429.767236] ? ipcget+0x121/0x11c0 [ 2429.770760] ? down_read+0x120/0x120 [ 2429.774456] ? lock_downgrade+0x900/0x900 [ 2429.778598] ipcget+0x159/0x11c0 [ 2429.781949] ? find_held_lock+0x36/0x1c0 [ 2429.785994] ? kasan_check_write+0x14/0x20 [ 2429.790208] ? ipc_obtain_object_check+0xc0/0xc0 [ 2429.794944] ? wait_for_completion+0x8a0/0x8a0 [ 2429.799505] ? __lock_is_held+0xb5/0x140 [ 2429.803550] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.809067] ? check_preemption_disabled+0x48/0x280 [ 2429.814073] ? __sb_end_write+0xd9/0x110 [ 2429.818114] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2429.823632] ? fput+0x130/0x1a0 [ 2429.826897] ? do_syscall_64+0x9a/0x820 [ 2429.830849] ? do_syscall_64+0x9a/0x820 [ 2429.834812] __x64_sys_shmget+0x1b2/0x2a0 [ 2429.838949] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.844290] ? ksys_shmget+0x280/0x280 [ 2429.848177] do_syscall_64+0x1b9/0x820 [ 2429.852039] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2429.857402] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2429.862311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2429.867130] ? trace_hardirqs_on_caller+0x310/0x310 [ 2429.872127] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2429.877148] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2429.882148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2429.886989] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.892158] RIP: 0033:0x457ec9 [ 2429.895328] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2429.914205] RSP: 002b:00007fe2d8f15c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2429.921890] RAX: ffffffffffffffda RBX: 00007fe2d8f15c90 RCX: 0000000000457ec9 [ 2429.929134] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 03:41:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:37 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:37 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xa0010000], &(0x7f0000000140)}) [ 2429.936380] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2429.943628] R10: 0000000020ffc000 R11: 0000000000000246 R12: 00007fe2d8f166d4 [ 2429.950872] R13: 00000000004c5ded R14: 00000000004da818 R15: 0000000000000006 03:41:37 executing program 1 (fault-call:7 fault-nth:2): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2430.046369] binder: 6637:6643 got transaction to invalid handle 03:41:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:37 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x2000000], &(0x7f0000000140)}) 03:41:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) open_by_handle_at(r0, &(0x7f0000000180)={0xcc, 0x0, "4b47a43fd8f43d31701428d7f113dec67eed89e52e0788f61236eab06419e5356a6f73ffcbd2c51ad01e14cb6b9d1df12af384cf5143a74010943c91daf50b2dbe1fde30f27a563579dbf3ddf3d8e1631a7d74faa27197173ffe6ab614b20621b7de25445916f07b58f255847e216731a4a23ca976c5a2bb26e6feaa1310636d08e638c77699a65eb2428b97523ab2c51ed702d51cab584082bb47b2d535cab919cab721a90422bc84e9cc6d83f14108f4064e563e8310af38d87c9e4ec7cb29966b4365"}, 0x8c000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80080, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2430.089258] binder: 6637:6643 transaction failed 29201/-22, size 0-0 line 2896 [ 2430.115058] binder: undelivered TRANSACTION_ERROR: 29201 03:41:38 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xa0010000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2430.248516] FAULT_INJECTION: forcing a failure. [ 2430.248516] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.287316] binder: 6662:6667 transaction failed 29201/-22, size 0-0 line 2896 03:41:38 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2430.319690] CPU: 1 PID: 6663 Comm: syz-executor1 Not tainted 4.20.0+ #175 [ 2430.326623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.335963] Call Trace: [ 2430.338552] dump_stack+0x1d3/0x2c6 [ 2430.342181] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2430.347379] ? find_held_lock+0x36/0x1c0 [ 2430.351435] should_fail.cold.4+0xa/0x17 [ 2430.355479] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2430.360569] ? kasan_check_read+0x11/0x20 [ 2430.364696] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2430.369949] ? rcu_read_unlock_special+0x370/0x370 [ 2430.374850] ? rcu_softirq_qs+0x20/0x20 [ 2430.378797] ? unwind_dump+0x190/0x190 [ 2430.382657] ? graph_lock+0x270/0x270 [ 2430.386434] ? is_bpf_text_address+0xd3/0x170 [ 2430.390921] ? kernel_text_address+0x79/0xf0 [ 2430.395309] ? __lock_is_held+0xb5/0x140 [ 2430.399373] ? ___might_sleep+0x1ed/0x300 [ 2430.403512] ? arch_local_save_flags+0x40/0x40 [ 2430.408088] ? save_stack+0x43/0xd0 [ 2430.411793] ? kasan_kmalloc+0xcb/0xd0 [ 2430.415655] ? kasan_slab_alloc+0x12/0x20 [ 2430.419778] ? kmem_cache_alloc+0x130/0x730 [ 2430.424086] ? shmem_alloc_inode+0x1b/0x40 [ 2430.428305] __should_failslab+0x124/0x180 [ 2430.432524] should_failslab+0x9/0x14 [ 2430.436303] kmem_cache_alloc+0x2c4/0x730 [ 2430.440432] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2430.445433] ? map_id_range_down+0x1ee/0x430 [ 2430.449820] new_inode_smack+0x20/0xb0 [ 2430.453699] smack_inode_alloc_security+0x92/0x100 [ 2430.458617] security_inode_alloc+0x73/0xd0 [ 2430.462917] inode_init_always+0x68f/0xd80 [ 2430.467150] ? get_nr_inodes+0x120/0x120 [ 2430.471199] ? __lock_is_held+0xb5/0x140 [ 2430.475239] ? shmem_alloc_inode+0x1b/0x40 [ 2430.479463] ? rcu_read_lock_sched_held+0x108/0x120 [ 2430.484456] ? kmem_cache_alloc+0x33f/0x730 [ 2430.488759] ? shmem_destroy_callback+0xc0/0xc0 [ 2430.493409] alloc_inode+0x80/0x190 [ 2430.497028] new_inode_pseudo+0x71/0x1a0 [ 2430.501066] ? prune_icache_sb+0x1c0/0x1c0 [ 2430.505277] ? format_decode+0x1b2/0xaf0 [ 2430.509319] ? enable_ptr_key_workfn+0x30/0x30 [ 2430.513879] new_inode+0x1c/0x40 [ 2430.517221] shmem_get_inode+0xf1/0x920 [ 2430.521173] ? shmem_encode_fh+0x340/0x340 [ 2430.525389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.530936] __shmem_file_setup.part.47+0x1e8/0x2a0 [ 2430.535930] shmem_kernel_file_setup+0x68/0x90 [ 2430.540507] newseg+0xa91/0xe80 [ 2430.543774] ? shm_mmap+0x240/0x240 [ 2430.547380] ? down_write+0x8a/0x130 [ 2430.551069] ? ipcget+0x121/0x11c0 [ 2430.554596] ? down_read+0x120/0x120 [ 2430.558285] ? lock_downgrade+0x900/0x900 [ 2430.562425] ipcget+0x159/0x11c0 [ 2430.565794] ? find_held_lock+0x36/0x1c0 [ 2430.569842] ? kasan_check_write+0x14/0x20 [ 2430.574070] ? ipc_obtain_object_check+0xc0/0xc0 [ 2430.578801] ? wait_for_completion+0x8a0/0x8a0 [ 2430.583367] ? __lock_is_held+0xb5/0x140 [ 2430.587415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.592942] ? check_preemption_disabled+0x48/0x280 [ 2430.597936] ? __sb_end_write+0xd9/0x110 [ 2430.601974] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2430.607489] ? fput+0x130/0x1a0 [ 2430.610747] ? do_syscall_64+0x9a/0x820 [ 2430.614699] ? do_syscall_64+0x9a/0x820 [ 2430.618651] __x64_sys_shmget+0x1b2/0x2a0 [ 2430.622776] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2430.628113] ? ksys_shmget+0x280/0x280 [ 2430.631983] do_syscall_64+0x1b9/0x820 [ 2430.635859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2430.641198] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2430.646115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2430.650970] ? trace_hardirqs_on_caller+0x310/0x310 [ 2430.655970] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2430.660971] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2430.665992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2430.670814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2430.675976] RIP: 0033:0x457ec9 [ 2430.679149] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2430.698029] RSP: 002b:00007fe2d8ef4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2430.705714] RAX: ffffffffffffffda RBX: 00007fe2d8ef4c90 RCX: 0000000000457ec9 [ 2430.712959] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 03:41:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:38 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xfdfd], &(0x7f0000000140)}) 03:41:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000100)="0281e9f3d6f3210f7ae7364b05a7bb505d5a9332a5ab5a08418b688ebe7bafa8b987afcbc91350b7", 0x28) [ 2430.720215] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.727460] R10: 0000000020ffc000 R11: 0000000000000246 R12: 00007fe2d8ef56d4 [ 2430.734705] R13: 00000000004c5ded R14: 00000000004da818 R15: 0000000000000006 03:41:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:38 executing program 1 (fault-call:7 fault-nth:3): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:38 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], &(0x7f0000000140)}) 03:41:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x84000, 0x0) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80800) [ 2430.894489] binder_transaction: 1 callbacks suppressed [ 2430.894496] binder: 6678:6683 got transaction to invalid handle 03:41:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2430.965608] binder: 6678:6683 transaction failed 29201/-22, size 0-0 line 2896 [ 2430.987553] binder: 6678:6683 got transaction to invalid handle [ 2431.008399] binder_release_work: 1 callbacks suppressed 03:41:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:38 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:38 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff], &(0x7f0000000140)}) [ 2431.008405] binder: undelivered TRANSACTION_ERROR: 29201 [ 2431.021098] binder: undelivered TRANSACTION_ERROR: 29201 03:41:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x69, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x3}, 0x28, 0x1) [ 2431.080348] FAULT_INJECTION: forcing a failure. [ 2431.080348] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.155724] CPU: 0 PID: 6699 Comm: syz-executor1 Not tainted 4.20.0+ #175 [ 2431.162746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2431.172091] Call Trace: [ 2431.174699] dump_stack+0x1d3/0x2c6 [ 2431.178331] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2431.178375] binder: 6708:6711 got transaction to invalid handle [ 2431.183535] should_fail.cold.4+0xa/0x17 [ 2431.183554] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2431.183578] ? graph_lock+0x270/0x270 [ 2431.183594] ? debug_mutex_init+0x2d/0x60 [ 2431.183610] ? find_held_lock+0x36/0x1c0 [ 2431.183624] ? __lock_is_held+0xb5/0x140 [ 2431.198912] binder: undelivered TRANSACTION_ERROR: 29201 [ 2431.202576] ? ___might_sleep+0x1ed/0x300 [ 2431.202591] ? arch_local_save_flags+0x40/0x40 [ 2431.202618] __should_failslab+0x124/0x180 [ 2431.202633] should_failslab+0x9/0x14 [ 2431.202644] kmem_cache_alloc+0x2c4/0x730 [ 2431.202659] ? mpol_shared_policy_init+0x235/0x650 [ 2431.202673] ? current_time+0x72/0x1b0 [ 2431.250012] __d_alloc+0xc8/0xb90 [ 2431.253462] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 2431.258524] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2431.263544] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 2431.268728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.268765] binder: 6715:6716 got transaction to invalid handle [ 2431.274269] ? timespec64_trunc+0xea/0x180 [ 2431.274283] ? inode_init_owner+0x340/0x340 [ 2431.274300] ? _raw_spin_unlock+0x2c/0x50 [ 2431.274317] ? current_time+0x10b/0x1b0 [ 2431.274332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.274345] ? timespec64_trunc+0x180/0x180 [ 2431.274357] ? lockdep_init_map+0x105/0x590 [ 2431.274372] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2431.274385] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2431.274400] d_alloc_pseudo+0x1d/0x30 [ 2431.292269] binder: undelivered TRANSACTION_ERROR: 29201 [ 2431.293081] alloc_file_pseudo+0x158/0x3f0 [ 2431.293099] ? alloc_file+0x4d0/0x4d0 [ 2431.293114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.293138] ? kasan_check_write+0x14/0x20 [ 2431.349279] __shmem_file_setup.part.47+0x110/0x2a0 03:41:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2431.354294] shmem_kernel_file_setup+0x68/0x90 [ 2431.354312] newseg+0xa91/0xe80 [ 2431.354329] ? shm_mmap+0x240/0x240 [ 2431.354341] ? down_write+0x8a/0x130 [ 2431.354352] ? ipcget+0x121/0x11c0 [ 2431.354363] ? down_read+0x120/0x120 [ 2431.354377] ? lock_downgrade+0x900/0x900 [ 2431.354391] ipcget+0x159/0x11c0 [ 2431.354406] ? find_held_lock+0x36/0x1c0 [ 2431.354422] ? kasan_check_write+0x14/0x20 [ 2431.354434] ? ipc_obtain_object_check+0xc0/0xc0 [ 2431.354446] ? wait_for_completion+0x8a0/0x8a0 [ 2431.354461] ? __lock_is_held+0xb5/0x140 [ 2431.354479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.354510] ? check_preemption_disabled+0x48/0x280 [ 2431.354529] ? __sb_end_write+0xd9/0x110 [ 2431.354545] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2431.384352] ? fput+0x130/0x1a0 [ 2431.384369] ? do_syscall_64+0x9a/0x820 [ 2431.384382] ? do_syscall_64+0x9a/0x820 [ 2431.384401] __x64_sys_shmget+0x1b2/0x2a0 [ 2431.384414] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2431.384426] ? ksys_shmget+0x280/0x280 [ 2431.384465] do_syscall_64+0x1b9/0x820 [ 2431.384476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2431.384489] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2431.402082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2431.402098] ? trace_hardirqs_on_caller+0x310/0x310 [ 2431.402112] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2431.402126] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2431.402143] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2431.402161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2431.402172] RIP: 0033:0x457ec9 03:41:39 executing program 1 (fault-call:7 fault-nth:4): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:39 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x1000000], &(0x7f0000000140)}) 03:41:39 executing program 4: rmdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1c0) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10) 03:41:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2431.420767] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2431.420775] RSP: 002b:00007fe2d8f15c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2431.420787] RAX: ffffffffffffffda RBX: 00007fe2d8f15c90 RCX: 0000000000457ec9 [ 2431.420795] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 [ 2431.420802] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2431.420809] R10: 0000000020ffc000 R11: 0000000000000246 R12: 00007fe2d8f166d4 [ 2431.420817] R13: 00000000004c5ded R14: 00000000004da818 R15: 0000000000000006 [ 2431.439116] binder: 6719:6723 got transaction to invalid handle [ 2431.506864] binder: undelivered TRANSACTION_ERROR: 29201 03:41:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2431.646756] binder: 6730:6736 got transaction to invalid handle [ 2431.675362] binder: undelivered TRANSACTION_ERROR: 29201 [ 2431.689420] FAULT_INJECTION: forcing a failure. 03:41:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000100)={r1, r0, 0x8000}) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 03:41:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:39 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x1a0], &(0x7f0000000140)}) [ 2431.689420] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.709020] CPU: 1 PID: 6734 Comm: syz-executor1 Not tainted 4.20.0+ #175 [ 2431.715952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2431.725306] Call Trace: [ 2431.727896] dump_stack+0x1d3/0x2c6 [ 2431.731526] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2431.736713] ? __save_stack_trace+0x8d/0xf0 [ 2431.741046] should_fail.cold.4+0xa/0x17 03:41:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2431.745108] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2431.750220] ? save_stack+0x43/0xd0 [ 2431.753843] ? kasan_kmalloc+0xcb/0xd0 [ 2431.757736] ? graph_lock+0x270/0x270 [ 2431.761537] ? percpu_ref_put_many+0x11c/0x260 [ 2431.766117] ? graph_lock+0x270/0x270 [ 2431.770377] ? find_held_lock+0x36/0x1c0 [ 2431.774441] ? __lock_is_held+0xb5/0x140 [ 2431.778533] ? ___might_sleep+0x1ed/0x300 [ 2431.782688] ? arch_local_save_flags+0x40/0x40 [ 2431.787284] ? lock_downgrade+0x900/0x900 [ 2431.791446] __should_failslab+0x124/0x180 [ 2431.795682] should_failslab+0x9/0x14 [ 2431.799481] kmem_cache_alloc+0x2c4/0x730 [ 2431.803624] ? d_set_d_op+0x31d/0x410 [ 2431.807437] __alloc_file+0xa8/0x470 [ 2431.811168] ? file_free_rcu+0xd0/0xd0 [ 2431.815060] ? d_instantiate+0x79/0xa0 [ 2431.818926] ? lock_downgrade+0x900/0x900 [ 2431.823068] ? kasan_check_read+0x11/0x20 [ 2431.827195] ? do_raw_spin_unlock+0xa7/0x330 [ 2431.831587] ? do_raw_spin_trylock+0x270/0x270 [ 2431.836145] alloc_empty_file+0x72/0x170 [ 2431.840190] alloc_file+0x5e/0x4d0 [ 2431.843711] ? _raw_spin_unlock+0x2c/0x50 [ 2431.847859] alloc_file_pseudo+0x261/0x3f0 [ 2431.852073] ? alloc_file+0x4d0/0x4d0 [ 2431.855860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.861380] ? kasan_check_write+0x14/0x20 [ 2431.865600] __shmem_file_setup.part.47+0x110/0x2a0 [ 2431.870598] shmem_kernel_file_setup+0x68/0x90 [ 2431.875157] newseg+0xa91/0xe80 [ 2431.878414] ? shm_mmap+0x240/0x240 [ 2431.882016] ? down_write+0x8a/0x130 [ 2431.885715] ? ipcget+0x121/0x11c0 [ 2431.889228] ? down_read+0x120/0x120 [ 2431.892918] ? lock_downgrade+0x900/0x900 [ 2431.897055] ipcget+0x159/0x11c0 [ 2431.900398] ? find_held_lock+0x36/0x1c0 [ 2431.904436] ? kasan_check_write+0x14/0x20 [ 2431.908647] ? ipc_obtain_object_check+0xc0/0xc0 [ 2431.913378] ? wait_for_completion+0x8a0/0x8a0 [ 2431.917937] ? __lock_is_held+0xb5/0x140 [ 2431.921980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.927495] ? check_preemption_disabled+0x48/0x280 [ 2431.932499] ? __sb_end_write+0xd9/0x110 [ 2431.936540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2431.942069] ? fput+0x130/0x1a0 [ 2431.945333] ? do_syscall_64+0x9a/0x820 [ 2431.949284] ? do_syscall_64+0x9a/0x820 [ 2431.953265] __x64_sys_shmget+0x1b2/0x2a0 [ 2431.957391] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2431.962728] ? ksys_shmget+0x280/0x280 [ 2431.966595] do_syscall_64+0x1b9/0x820 [ 2431.970459] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2431.975797] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2431.980700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2431.985515] ? trace_hardirqs_on_caller+0x310/0x310 [ 2431.990522] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2431.995523] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2432.000516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2432.005337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2432.010499] RIP: 0033:0x457ec9 [ 2432.013667] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2432.032542] RSP: 002b:00007fe2d8f15c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2432.040223] RAX: ffffffffffffffda RBX: 00007fe2d8f15c90 RCX: 0000000000457ec9 [ 2432.047467] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 [ 2432.054709] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2432.061953] R10: 0000000020ffc000 R11: 0000000000000246 R12: 00007fe2d8f166d4 [ 2432.069198] R13: 00000000004c5ded R14: 00000000004da818 R15: 0000000000000006 [ 2432.076650] net_ratelimit: 26 callbacks suppressed [ 2432.076660] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.086672] protocol 88fb is buggy, dev hsr_slave_1 03:41:40 executing program 1 (fault-call:7 fault-nth:5): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:40 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xe7ff], &(0x7f0000000140)}) [ 2432.190504] binder: 6755:6760 got transaction to invalid handle [ 2432.215868] binder_transaction: 5 callbacks suppressed [ 2432.215884] binder: 6755:6760 transaction failed 29201/-22, size 0-0 line 2896 [ 2432.231663] protocol 88fb is buggy, dev hsr_slave_0 03:41:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:40 executing program 4: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffff, 0x101001) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1f) r1 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) fallocate(r1, 0x42, 0x5, 0x7) [ 2432.236780] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.239245] binder: undelivered TRANSACTION_ERROR: 29201 03:41:40 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:40 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x2], &(0x7f0000000140)}) [ 2432.402583] FAULT_INJECTION: forcing a failure. [ 2432.402583] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.414526] CPU: 1 PID: 6774 Comm: syz-executor1 Not tainted 4.20.0+ #175 [ 2432.421447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.430790] Call Trace: [ 2432.433381] dump_stack+0x1d3/0x2c6 [ 2432.436990] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2432.442161] ? print_usage_bug+0xc0/0xc0 [ 2432.446326] should_fail.cold.4+0xa/0x17 [ 2432.450366] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2432.455447] ? check_noncircular+0x20/0x20 [ 2432.459658] ? __lock_acquire+0x62f/0x4c20 [ 2432.463887] ? find_held_lock+0x36/0x1c0 [ 2432.467951] ? is_bpf_text_address+0xac/0x170 [ 2432.472446] ? lock_downgrade+0x900/0x900 [ 2432.476581] ? check_preemption_disabled+0x48/0x280 [ 2432.481580] ? kasan_check_read+0x11/0x20 [ 2432.485712] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2432.490992] ? rcu_read_unlock_special+0x370/0x370 [ 2432.495898] ? rcu_softirq_qs+0x20/0x20 [ 2432.499868] ? unwind_dump+0x190/0x190 [ 2432.503734] ? print_usage_bug+0xc0/0xc0 [ 2432.507771] ? print_usage_bug+0xc0/0xc0 [ 2432.511809] ? is_bpf_text_address+0xd3/0x170 [ 2432.516285] __should_failslab+0x124/0x180 [ 2432.520498] should_failslab+0x9/0x14 [ 2432.524276] kmem_cache_alloc+0x47/0x730 [ 2432.528346] radix_tree_node_alloc.constprop.19+0x1f7/0x370 [ 2432.534037] idr_get_free+0x7a4/0xf70 [ 2432.537822] ? radix_tree_iter_tag_clear+0x90/0x90 [ 2432.542735] ? kasan_check_read+0x11/0x20 [ 2432.546962] ? graph_lock+0x270/0x270 [ 2432.550741] ? rcu_softirq_qs+0x20/0x20 [ 2432.554693] ? lockdep_init_map+0x105/0x590 [ 2432.558994] ? debug_mutex_init+0x2d/0x60 [ 2432.563123] ? psi_task_change.cold.11+0x1ac/0x1ac [ 2432.568061] ? __alloc_file+0xa8/0x470 [ 2432.571935] ? rcu_read_lock_sched_held+0x108/0x120 [ 2432.576933] ? lockdep_init_map+0x105/0x590 [ 2432.581233] idr_alloc_u32+0x1d4/0x3a0 [ 2432.585099] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 2432.589922] ? ipc_addid+0x201/0xab0 [ 2432.593612] ? ipc_addid+0x18a/0xab0 [ 2432.597304] idr_alloc+0x111/0x1b0 [ 2432.600818] ? idr_alloc_u32+0x3a0/0x3a0 [ 2432.604861] ? lockdep_init_map+0x105/0x590 [ 2432.609159] ipc_addid+0x77d/0xab0 [ 2432.612674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2432.618185] ? ipc_init_ids+0x1c0/0x1c0 [ 2432.622142] ? alloc_file+0x4d0/0x4d0 [ 2432.625919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.631435] ? kasan_check_write+0x14/0x20 [ 2432.635646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2432.641173] ? __shmem_file_setup.part.47+0x134/0x2a0 [ 2432.646344] newseg+0x715/0xe80 [ 2432.649614] ? shm_mmap+0x240/0x240 [ 2432.653229] ? down_write+0x8a/0x130 [ 2432.656918] ? ipcget+0x121/0x11c0 [ 2432.660436] ? down_read+0x120/0x120 [ 2432.664143] ? lock_downgrade+0x900/0x900 [ 2432.668268] ipcget+0x159/0x11c0 [ 2432.671611] ? find_held_lock+0x36/0x1c0 [ 2432.675647] ? kasan_check_write+0x14/0x20 [ 2432.679875] ? ipc_obtain_object_check+0xc0/0xc0 [ 2432.684621] ? wait_for_completion+0x8a0/0x8a0 [ 2432.689196] ? __lock_is_held+0xb5/0x140 [ 2432.693240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.698752] ? check_preemption_disabled+0x48/0x280 [ 2432.703746] ? __sb_end_write+0xd9/0x110 [ 2432.707783] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2432.713294] ? fput+0x130/0x1a0 [ 2432.716551] ? do_syscall_64+0x9a/0x820 [ 2432.720511] ? do_syscall_64+0x9a/0x820 [ 2432.724465] __x64_sys_shmget+0x1b2/0x2a0 [ 2432.728591] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2432.733928] ? ksys_shmget+0x280/0x280 [ 2432.737795] do_syscall_64+0x1b9/0x820 [ 2432.741657] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2432.746999] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2432.751920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2432.756741] ? trace_hardirqs_on_caller+0x310/0x310 [ 2432.761734] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2432.766726] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2432.771718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2432.776537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2432.781704] RIP: 0033:0x457ec9 [ 2432.784869] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2432.803744] RSP: 002b:00007fe2d8f15c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2432.811427] RAX: ffffffffffffffda RBX: 00007fe2d8f15c90 RCX: 0000000000457ec9 [ 2432.818671] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 [ 2432.825914] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2432.833158] R10: 0000000020ffc000 R11: 0000000000000246 R12: 00007fe2d8f166d4 [ 2432.840400] R13: 00000000004c5ded R14: 00000000004da818 R15: 0000000000000006 [ 2432.895932] binder: 6780:6788 got transaction to invalid handle [ 2432.924808] binder: 6780:6788 transaction failed 29201/-22, size 0-0 line 2896 03:41:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) 03:41:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2432.947852] binder: 6780:6788 got transaction to invalid handle [ 2432.961707] binder: undelivered TRANSACTION_ERROR: 29201 [ 2432.968443] binder: 6780:6788 transaction failed 29201/-22, size 0-0 line 2896 [ 2432.983750] binder: undelivered TRANSACTION_ERROR: 29201 03:41:40 executing program 1 (fault-call:7 fault-nth:6): perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:40 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd], &(0x7f0000000140)}) 03:41:40 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2433.111723] protocol 88fb is buggy, dev hsr_slave_0 [ 2433.116829] protocol 88fb is buggy, dev hsr_slave_1 [ 2433.146067] binder: 6807:6810 got transaction to invalid handle 03:41:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8010}, {r0, 0x20}, {r1, 0x440c}, {r0, 0x10}, {r0, 0x50}, {r0, 0x2}, {r0, 0x40}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x3f}, 0x8) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2433.169958] binder: 6807:6810 transaction failed 29201/-22, size 0-0 line 2896 [ 2433.191611] protocol 88fb is buggy, dev hsr_slave_0 [ 2433.191644] protocol 88fb is buggy, dev hsr_slave_0 [ 2433.196675] protocol 88fb is buggy, dev hsr_slave_1 [ 2433.201708] protocol 88fb is buggy, dev hsr_slave_1 03:41:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x200000000000000], &(0x7f0000000140)}) 03:41:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2433.273437] binder: undelivered TRANSACTION_ERROR: 29201 03:41:41 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], &(0x7f0000000140)}) [ 2433.435991] binder: 6835:6837 transaction failed 29201/-22, size 0-0 line 2896 03:41:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x7a00, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:41 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)}], 0x8, 0x0) fchmodat(r0, &(0x7f0000000680)='./file0\x00', 0x14) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) 03:41:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xffffffe7], &(0x7f0000000140)}) 03:41:41 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xe7ffffff], &(0x7f0000000140)}) 03:41:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) 03:41:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x6800000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2433.955880] binder: 6851:6866 transaction failed 29201/-22, size 0-0 line 2896 03:41:41 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7], &(0x7f0000000140)}) [ 2434.132195] binder: 6878:6882 transaction failed 29201/-22, size 0-0 line 2896 03:41:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000180)=""/76}) 03:41:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:42 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x700000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:42 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xfffffffffffffdfd}) 03:41:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x2000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:42 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xffffffffa0010000}) 03:41:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x1, 0x5, 0x1}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2434.878708] binder: 6900:6909 transaction failed 29201/-22, size 0-0 line 2896 [ 2434.915818] binder: 6900:6909 transaction failed 29201/-22, size 0-0 line 2896 03:41:42 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x200000) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000000300)=""/16, &(0x7f0000000340)=0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x124, r2, 0x110, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf33}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c89000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x621}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4800000000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6a32}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x82}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2435.102280] binder: 6932:6936 transaction failed 29201/-22, size 0-0 line 2896 03:41:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:43 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x100000000000000}) 03:41:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0xffffff7f, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:43 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x7f0f, 0x4) 03:41:43 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x1a0ffffffff}) 03:41:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x732, @ipv4={[], [], @multicast2}, 0x9}}, 0x5, 0x4}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r2, 0x7, 0x2, 0x4}, &(0x7f0000000340)=0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x60c, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 03:41:43 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:43 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xfdfdffffffffffff}) 03:41:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x5000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2435.982461] binder_transaction: 7 callbacks suppressed [ 2435.982468] binder: 6965:6974 got transaction to invalid handle [ 2436.031155] binder_release_work: 7 callbacks suppressed [ 2436.031161] binder: undelivered TRANSACTION_ERROR: 29201 03:41:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @local}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x101, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0), 0x0, 0x1}, {&(0x7f0000000180)="babc43526ea1e14317da7726f4344cba26e7c53e877e2ba58522744eb5fbca16cf7e1b81b520aa14b234d87027fb11c11dad7eb59e94f3aebbcc746f93c50e51c0181155c66708cdd22dd2fb10b2b6dc60ba9be0e93be75863b2061d5a780b01543968cb3c3d2476d3a5c50f84de9aa8204790709d66434304a265e7d715dd1892e24e45f8d908a95b8f62d35fca1c05c531b1ff3a81d5eae1504be883751880b640e49cea783b5a626340d080038f3d51b59b0640291620394d64d7d0ba28a314a0a3f2048a9e40", 0xc8, 0x228}, {&(0x7f0000000280)="ab890aac2315015d69a954715bc583064a785bacdac46c6fc87bd2cf0194e646cd6c0cd636a5140ccfa2d14204f8fedc764c675536c14817b63dd775e4fa2cbc992e65b58d97c4e763217df844", 0x4d}], 0x1, &(0x7f0000000540)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@noacl='noacl'}, {@sysvgroups='sysvgroups'}], [{@obj_role={'obj_role', 0x3d, '/dev/video#\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r2}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@measure='measure'}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_appraise='dont_appraise'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/video#\x00'}}]}) 03:41:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x7a000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xffffffffffffffe7}) 03:41:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xfffffffffffffc00, 0x200002) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x2}) 03:41:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2436.680289] binder: 6993:7006 got transaction to invalid handle [ 2436.716490] binder: undelivered TRANSACTION_ERROR: 29201 03:41:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x40000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xa0010000}) [ 2436.871062] binder: 7019:7022 got transaction to invalid handle 03:41:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000180)={{0x100000003, @addr=0x6}, 0x8, 0x7, 0x7}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) 03:41:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2436.913592] binder: undelivered TRANSACTION_ERROR: 29201 [ 2437.081278] binder: 7037:7040 got transaction to invalid handle [ 2437.125657] binder: 7037:7040 got transaction to invalid handle [ 2437.132384] binder: undelivered TRANSACTION_ERROR: 29201 [ 2437.138070] binder: undelivered TRANSACTION_ERROR: 29201 [ 2437.271712] net_ratelimit: 22 callbacks suppressed [ 2437.271720] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.281810] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.351666] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.351694] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.356742] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.361763] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.371845] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.376868] protocol 88fb is buggy, dev hsr_slave_1 03:41:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x6, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:45 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xffffffe7}) 03:41:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0xfffffffffffffffa, 0x8, [], &(0x7f0000000040)={0x9a0907, 0x6, [], @ptr=0x80000000}}) 03:41:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:45 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x1a0ffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:45 executing program 4: 03:41:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2437.573750] binder: 7048:7059 got transaction to invalid handle [ 2437.579872] binder_transaction: 6 callbacks suppressed [ 2437.579884] binder: 7048:7059 transaction failed 29201/-22, size 0-0 line 2896 03:41:45 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xfdfdffff}) 03:41:45 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2437.626198] binder: undelivered TRANSACTION_ERROR: 29201 03:41:45 executing program 4: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000040)={0x9, "7f073ad891ae2310faa58a410eddb98e5267192fb297873b6d1c7824098da07e", 0x1, 0x1}) 03:41:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2437.783385] binder: 7072:7079 got transaction to invalid handle [ 2437.839807] binder: 7072:7079 transaction failed 29201/-22, size 0-0 line 2896 [ 2437.888456] binder: undelivered TRANSACTION_ERROR: 29201 [ 2437.911632] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.916719] protocol 88fb is buggy, dev hsr_slave_1 03:41:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:46 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xe7ffffff}) 03:41:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x200000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:46 executing program 4: syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x101, 0x100) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xfffffffffffffffd, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:46 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:46 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x2000000}) 03:41:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x20000000000005b0, 0xfffffffffffffffc) finit_module(r0, &(0x7f0000000040)='/dev/video#\x00', 0x3) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000080)=@known='system.advise\x00') [ 2438.452728] binder: 7094:7102 got transaction to invalid handle [ 2438.458868] binder: 7094:7102 transaction failed 29201/-22, size 0-0 line 2896 03:41:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x74000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2438.577396] binder: undelivered TRANSACTION_ERROR: 29201 03:41:46 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xfdfd}) 03:41:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x100000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:47 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8001, 0x40400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd2a, 0xfa00, {0x400000000000001, &(0x7f0000000100)={0xffffffffffffffff}, 0x141, 0x8}}, 0xfffffe5a) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1}}, 0x20) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4001001, 0x10000000000201) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000000)) 03:41:47 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xffe7}) 03:41:47 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:47 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xe7ff}) 03:41:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2439.336965] binder: 7136:7141 got transaction to invalid handle [ 2439.351940] binder: 7136:7141 transaction failed 29201/-22, size 0-0 line 2896 03:41:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='\xa4\x00\xb5JP\x1f\x87\xc9P:\x99v\xfc4g\"\x88K\xfa\xf8\xf2\xa3\xaat~\xed?\xa6\x84D\xbf<\xf1\xf9\x13\xb3\xfd\xa5\xe1&(\a\xf0\xa3\xa2B\xdd\x03\x19RS\x18e;\xd1\tnF;U%E\xb0\x86`\xa2zg6\xa8\fm\x87q\x9e>m+B\xf2[!\xce`\x1b\xbc&:\n\xa6\x86\xc6\xca\b\xa5\b\xfe\xa7)\xaf\xfd-\xe6\xe8\x86\x98\xbbp0\xbbi\x18\xdeBPHX\xaa\x91\x93\xf5\xf2Aw\x9d\xda\xd0[(\x80\xf4\xc3M\x10L\xa5\x9d}\xd0#\x03s\x0eu\x03o\xac\x83\x06\xf3\xe4\xben\xac\xc0\xa8\x91$Kl\xb2D\xad_5\xbd\xa55v\x80(\x10W\x1f\xd4\xc2r\xfcF\xc4,B\xa9\xa9\\\x16\xe0!B\xcf\x8f\xa9deF\xe0O\x80\xd8\x18\xb5\x82\x03B\xfb\x18\xfa\b\x05\xde\xf9\xb1\x17\xb8x\x88L\xfd\xf3f\xd8\x11\xa43\x18,\xec\xd6\xd4\x9db\xda:+\xfe\vSc\a\x0e\xf91L\xa5v:\x14\xf6T\x16\x95\a#\xed') r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000180)={0xc0000000, 0x5, "d4079b7d0bd8eaf3aa177aa9d3a72ff28d0b3035b8b3663d7398fb41b5d1a876", 0x7, 0x3, 0x4, 0xfe5, 0x7, 0x7, 0x5, 0x4, [0x0, 0x2, 0x7ff]}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) signalfd(r0, &(0x7f0000000040), 0x8) 03:41:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x500000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2439.392178] binder: 7136:7141 got transaction to invalid handle [ 2439.400086] binder: undelivered TRANSACTION_ERROR: 29201 [ 2439.409809] binder: 7136:7141 transaction failed 29201/-22, size 0-0 line 2896 [ 2439.498321] binder: undelivered TRANSACTION_ERROR: 29201 03:41:47 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x101040) keyctl$set_reqkey_keyring(0xe, 0x5) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2439.697641] binder: 7169:7175 transaction failed 29201/-22, size 0-0 line 2896 03:41:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x4c000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xfffffdfd}) 03:41:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1300000065ffe0020000000600395032303030"], 0x13) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000000c0)={0x3, 0x8, 0xf2a5}) 03:41:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:48 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) iopl(0x800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x610000, 0x0) 03:41:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x200000000000000}) 03:41:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0xfeffffff00000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2440.273754] binder: 7183:7193 transaction failed 29201/-22, size 0-0 line 2896 03:41:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = getuid() setuid(r1) 03:41:48 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x1000000}) 03:41:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2440.564482] binder: 7216:7222 transaction failed 29201/-22, size 0-0 line 2896 03:41:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x700, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x103200, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x7f, 0x0, 0x301f, 0x2, 0x2, 0x2, 0x4eb907ff, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) 03:41:48 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xfdfdffff00000000}) 03:41:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:48 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xe7ffffffffffffff}) 03:41:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x2000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000100)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x7, 0x8, 0x6, 0x0, 0x0, [{r0, 0x0, 0x2}, {r0, 0x0, 0x80000001}, {r0, 0x0, 0x8}, {r0, 0x0, 0x3}, {r0, 0x0, 0xdb}, {r0, 0x0, 0xd21b}]}) 03:41:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2441.173457] binder_transaction: 3 callbacks suppressed [ 2441.173464] binder: 7233:7241 got transaction to invalid handle [ 2441.212894] binder: 7233:7241 transaction failed 29201/-22, size 0-0 line 2896 03:41:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x4800, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2441.283541] binder_release_work: 3 callbacks suppressed [ 2441.283546] binder: undelivered TRANSACTION_ERROR: 29201 03:41:49 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x101, 0x800) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0x1a0}) 03:41:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:49 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)=0xe7}) 03:41:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x20000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x7f, 0x321800) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000001c0)) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8080) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x6a6, 0x1, 0xd55, 0x8, 0x15, 0x6, 0x0, 0x1f, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000e5d9}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @rose={'rose', 0x0}, 0x3, [@default, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 03:41:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2442.079678] binder: 7276:7282 got transaction to invalid handle 03:41:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x1, 0x9, [], &(0x7f0000000140)}) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000180)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20829101}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$KDDISABIO(r0, 0x4b37) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000380)={{0x6, 0x5, 0x2, 0x8001, 'syz1\x00', 0xfffffffffffffffa}, 0x0, [0x0, 0x1, 0x1220, 0x80000001, 0x7, 0x6, 0x6, 0x5, 0x5, 0x2, 0x1000, 0xab93, 0x2, 0x80, 0x1, 0x9, 0x40, 0xfffffffffffffff8, 0x3, 0x1, 0x80000001, 0x0, 0x5402, 0xf8, 0x1ff, 0x6be3, 0x0, 0x6, 0x4, 0x2, 0x8, 0x1, 0x9, 0xff, 0x0, 0x1, 0x3f, 0x6, 0x7, 0x7, 0x6, 0x7fffffff, 0x100, 0x1, 0x394, 0x937, 0x0, 0xe47a, 0x930, 0x8001, 0x1, 0xc7, 0x1ff, 0xff, 0x3, 0xffffffffffff0001, 0x8, 0x2, 0x4, 0x3, 0x80, 0x3f, 0xff, 0x9a, 0x4, 0x2, 0x48b, 0x7fffffff, 0x5, 0x8000, 0x6f0b42fe, 0x6, 0x2000000, 0x0, 0x4, 0x6, 0x9, 0x9, 0x0, 0x1ff, 0x3f, 0xffffffff, 0x101, 0x1, 0x2, 0x6, 0x1, 0x1, 0x1ff, 0x5, 0x2, 0x5, 0x2efd, 0x1, 0x2, 0x15, 0x80000000, 0x2, 0x101, 0xffff, 0x100, 0x7, 0x9, 0x3, 0x7, 0x81, 0x1, 0xffffffff, 0x2, 0x100000000, 0x1, 0x7fff, 0x100000000, 0x3, 0x6, 0x2, 0x4, 0x6, 0x9, 0xfffffffffffffbff, 0x2, 0xc703, 0x0, 0x0, 0xd9, 0x25, 0xc000000000000000, 0x2], {0x0, 0x1c9c380}}) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x10b141) ftruncate(r4, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x4, 0xdd6, 0x4}}, 0x28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000880)={0x28, 0x2, 0x0, {0x0, 0xb, 0x70b0}}, 0x28) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 03:41:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x8, 0xf, 0x4, 0x510000, {0x77359400}, {0x3, 0xc, 0x0, 0x0, 0x7, 0x632, "78c43540"}, 0x200, 0x4, @offset=0x3f, 0x4}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000180)) 03:41:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x48000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2442.161713] binder: 7276:7282 transaction failed 29201/-22, size 0-0 line 2896 [ 2442.195987] binder: undelivered TRANSACTION_ERROR: 29201 03:41:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2442.368075] binder: 7304:7308 got transaction to invalid handle [ 2442.408777] binder: undelivered TRANSACTION_ERROR: 29201 [ 2442.411527] binder: 7304:7308 got transaction to invalid handle [ 2442.421498] binder: undelivered TRANSACTION_ERROR: 29201 [ 2442.471693] net_ratelimit: 28 callbacks suppressed [ 2442.471703] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.481834] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.631793] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.636871] protocol 88fb is buggy, dev hsr_slave_1 03:41:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x8447, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="fbe9efc51e974d6fe7a4bca30994f80366dfa8fd9a03a1f62fa71e044fd8c9c2470908c4904a3f994842b41cc51561b3bed0a2b01c670a0a13c515a2367250a3176b26761925ba4b5c997e3c40ac3e7ac26ae67c8e05f852d5302c8ad7b8bb47ba91de972814926a49e02df908a3cd1298a9f76a46b45b3a9263bf3c5dc32868fa018008cca7fb48bd7e09866aef5d48", 0x90, r0}, 0x68) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket(0xa, 0x7, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4044040) 03:41:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x8, 0x20000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x1a0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:50 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x9, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x2}}, 0xc0e, 0xd214}, &(0x7f0000000580)=0x90) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000440)={0x9, "6057503306088998fedbca6c7b561bad0ada9c786f2f4e0b4f683ac0f1d03c4a", 0x4, 0x6, 0x100000000, 0x16, 0x3}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000005c0)={r2, 0x64, "b2ab881cf74607ec39d5284ab1b7ff3a249d265367b112663c5b7653fdae1d81b63914e0509e3c0f06f2f57cd9926c1e3df03b1986ddea35e461f711c04f04a11b608082c1a615f86eeaf869b59d361e0087e6faa93249885db90d7e2a1de2c180f9ddd1"}, &(0x7f0000000640)=0x6c) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x40000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x6a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x404e20, 0x4, 'sh\x00', 0x22, 0xa3, 0x1d}, {@loopback, 0x4e24, 0x10003, 0x7, 0x8}}, 0xfffffffffffffe79) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xf4, "a7a4bb4e8b95165ea9da429d6f55be703aad8c725e1bb18ce587b2676b7177022f2e407e540d1966049369cdfbf2b68cfa7b96472d72ef25d114891d307d8c95d73b9d6915d739c9b9ca0e9ddb7bb1946021f00a59a661542ccbbcaeba47858d2f0c4e74d43c19da5c6ee504130420f49864b7c7edfc0274edf18317dc62fc2a3ccdd638d71261d689ee0086e44a2169ee85bd2c033b11287f176f99d7746b383add275b03c70e6a39450d07b43dd7435e83f6847ad1ad1eceb4309e74a07d20a3edb5301baaccb0cf8c37be70364214c8b3db02cd8d470ff60c75fb2a0c81432398c4786467f5d323ce53ba13eb137e79c30521"}, &(0x7f0000000280)=0xfc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x7}, 0x8) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000300)=""/231, &(0x7f0000000400)=0xe7) [ 2442.968770] binder: 7322:7330 got transaction to invalid handle 03:41:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2443.009439] binder_transaction: 2 callbacks suppressed [ 2443.009455] binder: 7322:7330 transaction failed 29201/-22, size 0-0 line 2896 [ 2443.024913] binder: undelivered TRANSACTION_ERROR: 29201 03:41:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x3f00, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:51 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x1, 0x5, [], &(0x7f0000000140)=0x400000000}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x7, 0x6, 0x100000001, 0xec4}) [ 2443.176388] binder: 7347:7353 got transaction to invalid handle [ 2443.197125] binder: 7347:7353 transaction failed 29201/-22, size 0-0 line 2896 [ 2443.221079] binder: undelivered TRANSACTION_ERROR: 29201 03:41:51 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x200000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff9c}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={r1, 0x80000, r2}) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x2000000000000) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0xffffff7f00000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2443.397496] binder: 7367:7374 got transaction to invalid handle [ 2443.418915] binder: 7367:7374 transaction failed 29201/-22, size 0-0 line 2896 [ 2443.447958] binder: undelivered TRANSACTION_ERROR: 29201 [ 2443.511691] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.516796] protocol 88fb is buggy, dev hsr_slave_1 [ 2443.591622] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.591694] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.596689] protocol 88fb is buggy, dev hsr_slave_1 [ 2443.601744] protocol 88fb is buggy, dev hsr_slave_1 03:41:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) prctl$PR_CAPBSET_DROP(0x18, 0x10) 03:41:51 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) accept$netrom(r1, &(0x7f0000000180)={{}, [@rose, @netrom, @remote, @default, @null, @remote, @netrom, @rose]}, &(0x7f0000000080)=0x48) 03:41:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x3f00000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:51 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000080)={0x10, 0x3c, &(0x7f0000000180)="7e10fc2295c23b9ebff0f9d04dd3245f32421df8cb56762fb67b79e4be87b8104ca459566c31ba837400355e764a1ffe636239a05ab6f2d7ededc329043b27e2ff7d0946587375cb0566b8fccf32b54704f3275607f9df03105bed1adc7ed9116f53fcdc43539f9c69fffde70369e0a7ca2330c65d7ef53b66e678664b2984f3e8b88484180210c8d7b4f32efc5f500e959d32beb0cd3f1e079df088d4675dceae143be964", {0x5, 0x4, 0x0, 0x6, 0x7, 0x1000, 0x8, 0x1}}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2443.932636] binder: 7390:7394 got transaction to invalid handle [ 2443.939698] binder: 7390:7394 transaction failed 29201/-22, size 0-0 line 2896 [ 2443.970851] binder: undelivered TRANSACTION_ERROR: 29201 03:41:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x68000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2444.208260] binder: 7417:7421 got transaction to invalid handle [ 2444.238182] binder: 7417:7421 transaction failed 29201/-22, size 0-0 line 2896 [ 2444.276750] binder: undelivered TRANSACTION_ERROR: 29201 03:41:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:52 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000000000000, 0x420402) 03:41:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000001c0)) 03:41:52 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x6c000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2444.793261] binder: 7435:7437 got transaction to invalid handle [ 2444.801090] binder: 7435:7437 transaction failed 29201/-22, size 0-0 line 2896 03:41:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x7400000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4001002, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x6) [ 2444.844315] binder: undelivered TRANSACTION_ERROR: 29201 03:41:52 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0x2}], 0x1000, 0x0, &(0x7f0000000180)="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"}) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000001180)='trusted.overlay.redirect\x00', &(0x7f00000011c0)='./file0\x00', 0x8, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000001240)={0x0, 0xc104, 0x5, [], &(0x7f0000001200)=0x80}) 03:41:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2444.979569] binder: 7460:7462 transaction failed 29201/-22, size 0-0 line 2896 03:41:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x7a00000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) 03:41:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:53 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:53 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) r1 = semget(0x2, 0x3, 0x0) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000180)=""/200) 03:41:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2445.689528] binder: 7477:7482 transaction failed 29201/-22, size 0-0 line 2896 03:41:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x6000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:53 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)) 03:41:53 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:53 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x8400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x9, "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", 0xaa, 0xd5, 0x1, 0x6, 0x800, 0xbb62, 0x7f, 0x1}, r1}}, 0x128) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x240000) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000040)) 03:41:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2445.859739] Unknown ioctl -2147204315 [ 2445.933726] binder: 7512:7513 transaction failed 29201/-22, size 0-0 line 2896 03:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x3f000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8446, 0x2000000000) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:41:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x42080, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a00400}, 0xfffffffffffffd3f, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0xb20, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7ffd, 0x8001, 0x0, 0x4}}}, ["", ""]}, 0x3e8}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) write$P9_RMKDIR(r1, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x28, 0x3, 0x1}}, 0x14) 03:41:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x100) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2446.583767] binder_transaction: 3 callbacks suppressed [ 2446.583774] binder: 7527:7529 got transaction to invalid handle [ 2446.622564] binder: 7527:7529 transaction failed 29201/-22, size 0-0 line 2896 03:41:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0xa0010000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2446.659072] binder_release_work: 3 callbacks suppressed [ 2446.659077] binder: undelivered TRANSACTION_ERROR: 29201 03:41:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = dup(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/sequencer\x00', 0x80, 0x0) connect(r1, &(0x7f0000006ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @rand_addr=0x100}, 0x4, 0x2, 0x0, 0x3}}, 0x80) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) recvmmsg(r3, &(0x7f0000006900)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, &(0x7f0000001240)=""/55, 0x37}, 0xd0}, {{&(0x7f0000001280)=@ethernet, 0x80, &(0x7f0000001740)=[{&(0x7f0000001300)=""/81, 0x51}, {&(0x7f0000001380)=""/251, 0xfb}, {&(0x7f0000001480)=""/254, 0xfe}, {&(0x7f0000001580)=""/175, 0xaf}, {&(0x7f0000001640)=""/149, 0x95}, {&(0x7f0000006b40)=""/59, 0x3b}], 0x6, &(0x7f00000017c0)=""/115, 0x73}}, {{&(0x7f0000001840)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/162, 0xa2}, {&(0x7f0000001980)=""/28, 0x1c}, {&(0x7f00000019c0)=""/65, 0x41}], 0x3, &(0x7f0000001a80)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000002a80)=@isdn, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/141, 0x8d}, {&(0x7f0000003bc0)=""/205, 0xcd}, {&(0x7f0000003cc0)}], 0x4, &(0x7f0000003d40)=""/64, 0x40}}, {{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003d80)=""/28, 0x1c}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/182, 0xb6}, {&(0x7f0000004e80)=""/173, 0xad}, {&(0x7f0000004f40)=""/234, 0xea}, {&(0x7f0000005040)=""/28, 0x1c}, {&(0x7f0000005080)=""/22, 0x16}, {&(0x7f00000050c0)=""/172, 0xac}], 0x8, &(0x7f0000005200)=""/184, 0xb8}, 0x3}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/93, 0x5d}, {&(0x7f0000006340)=""/178, 0xb2}, {&(0x7f0000006400)=""/192, 0xc0}, {&(0x7f00000064c0)=""/188, 0xbc}, {&(0x7f0000006580)=""/22, 0x16}, {&(0x7f00000065c0)=""/146, 0x92}, {&(0x7f0000006680)=""/65, 0x41}, {&(0x7f0000006700)=""/31, 0x1f}], 0x9, &(0x7f0000006800)=""/234, 0x1e5}, 0xffffffffffff7fff}], 0x6, 0x2000, &(0x7f0000006a80)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000040)=0x400}) 03:41:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) [ 2446.842202] binder: 7558:7560 got transaction to invalid handle [ 2446.856285] binder: undelivered TRANSACTION_ERROR: 29201 03:41:54 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:54 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001540)='/dev/dlm_plock\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x80}, &(0x7f00000015c0)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001600)={r2, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x22}, 0x5}}}, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 03:41:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x2, 0x200000, [], &(0x7f0000000080)={0x990bff, 0x0, [], @value64=0x16fc}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x5) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000280)) [ 2447.001706] binder: 7571:7574 got transaction to invalid handle 03:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2447.081665] binder: undelivered TRANSACTION_ERROR: 29201 03:41:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0xffffffffa0010000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:55 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3ff, 0xfffffffffffffffc) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x5, [], &(0x7f0000000040)=0x7ff}) unshare(0x40000000) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 03:41:55 executing program 4: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x42) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={r1, r2}) 03:41:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2447.495752] binder: 7596:7602 got transaction to invalid handle [ 2447.517111] binder: 7596:7602 got transaction to invalid handle 03:41:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:55 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2447.544750] IPVS: ftp: loaded support on port[0] = 21 [ 2447.559538] binder: undelivered TRANSACTION_ERROR: 29201 [ 2447.567613] binder: undelivered TRANSACTION_ERROR: 29201 03:41:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4000fff, 0x101000) r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$P9_RRENAMEAT(r2, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 2447.671646] net_ratelimit: 21 callbacks suppressed [ 2447.671653] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.681689] protocol 88fb is buggy, dev hsr_slave_1 03:41:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 2447.751648] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.751680] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.756744] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.761726] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.771923] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.776988] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.784181] binder: 7622:7627 got transaction to invalid handle 03:41:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x100, @tick=0x80000001, 0x18000, {0x7fff, 0x5}, 0xfffffffffffffffb, 0x1, 0x446}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xeaca, 0x6}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2447.814499] binder: 7622:7627 got transaction to invalid handle [ 2447.854229] binder: undelivered TRANSACTION_ERROR: 29201 [ 2447.880346] binder: undelivered TRANSACTION_ERROR: 29201 [ 2447.895591] IPVS: ftp: loaded support on port[0] = 21 [ 2447.941137] IPVS: ftp: loaded support on port[0] = 21 [ 2448.127287] chnl_net:caif_netlink_parms(): no params data found [ 2448.168196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.175546] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.183140] device bridge_slave_0 entered promiscuous mode [ 2448.190157] device bridge_slave_1 left promiscuous mode [ 2448.196181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2448.242581] device bridge_slave_0 left promiscuous mode [ 2448.248136] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.311640] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.316883] protocol 88fb is buggy, dev hsr_slave_1 [ 2448.414443] device hsr_slave_1 left promiscuous mode [ 2448.454697] device hsr_slave_0 left promiscuous mode [ 2448.505969] team0 (unregistering): Port device team_slave_1 removed [ 2448.516417] team0 (unregistering): Port device team_slave_0 removed [ 2448.527697] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2448.556865] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2448.627055] bond0 (unregistering): Released all slaves [ 2448.724957] bridge0: port 2(bridge_slave_1) entered blocking state [ 2448.731344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2448.738820] device bridge_slave_1 entered promiscuous mode [ 2448.759250] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2448.768407] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2448.787463] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2448.794695] team0: Port device team_slave_0 added [ 2448.800192] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2448.807330] team0: Port device team_slave_1 added [ 2448.813285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2448.820731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2448.884079] device hsr_slave_0 entered promiscuous mode [ 2448.931842] device hsr_slave_1 entered promiscuous mode [ 2449.013661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2449.023007] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2449.037876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2449.070834] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2449.077178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2449.093270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2449.115644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2449.132569] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2449.149031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2449.156716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2449.217325] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2449.224832] 8021q: adding VLAN 0 to HW filter on device team0 [ 2449.254965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2449.279882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2449.294612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2449.306620] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.313025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.327646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2449.337454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2449.359488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2449.372002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2449.379517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.385904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.449921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2449.460286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2449.514584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2449.532145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2449.563640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2449.585637] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2449.592067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2449.628143] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2449.661399] 8021q: adding VLAN 0 to HW filter on device batadv0 03:41:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x105180) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2449.822195] binder: 7658:7661 got transaction to invalid handle [ 2449.848756] binder_transaction: 6 callbacks suppressed [ 2449.848786] binder: 7658:7661 transaction failed 29201/-22, size 0-0 line 2896 [ 2449.890597] binder: 7658:7661 got transaction to invalid handle [ 2449.891040] binder: undelivered TRANSACTION_ERROR: 29201 [ 2449.902355] binder: 7658:7661 transaction failed 29201/-22, size 0-0 line 2896 [ 2449.926576] binder: undelivered TRANSACTION_ERROR: 29201 03:41:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = open(&(0x7f0000001600)='./file0\x00', 0x40, 0x61) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000000000006) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x201) sendmsg$unix(r2, &(0x7f0000001500)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000001c0)="77b3b1e3186c98bac01b93632e33055f757062a2f923399867d1dea713d1daefad1c48e74f58828871d28d9bec98b54e7ea1e44febd8c5aad92b29e912bdc243c8166111c256702d21a8bf25ad0a2ad095e1f1beb30230b5b768b5122c39d965a9cfde4d9a0d11d9bf5ee8838c8c1d48a5b48c142fe8fc6f5cb879a59395c4d68ab9de6b1359af1ab63d04c7d67c7de0bbb5c7cd02028c1fb815962a5daaf654da218d3c2e71f40daec5b42b835407ff3650c3ecffa7f41b103e7dbeb7a4023fc226", 0xc2}, {&(0x7f00000002c0)="bde52c3d8c97cbe5cd5e93bcbe0f4e204a9efab896c4fa670a785763728aa862f610cd6bbe13153b4035981e06f614c3b29c0dbcc8c607619fc64ab95e123d32326c1b1e74f9d6da3ea8bc8cb47dd41639ccb8b9fdc3f50e6af43410fe21785ae47844800ca32f2bcc47144d68047b10505d5e99b59eef8f26b5c58f408a145c9bfaaf32259923618fda", 0x8a}, {&(0x7f0000000380)="592c3b4efa6f31441e821cd90c1835257e9e56918cfdc5d1b70ee5f6597cb1c4f362fdabdc1c2774d9abeac60adfcdeb841b45bafbefe2f3f6898e8e74cd087ea3e3c50e24ab9c2c2157bce8c8948d7335647743898a7719021deeaf94e92c6bf26337c407c00c4710d835ac1c98686152f2c301130d0ea358c9e17c1a7c4ebbd4363a5d7fa7b17fcd0817bf685930a9d81d6c02c329d583f5f05ebc3df0fb7b107db856b08ed298b8c4d5929bee368c1d786026cf4ccdb5e1dd66c71c97fcc92be873d6baa99f2ec63d73aa699f1c22790a3665b0872a3cdd5ce639f33b99145809d5", 0xe3}, {&(0x7f0000000080)="512f9fa49217f90263bbd13d79344cba6ba9c1c501630267b0953d8cb29ebf8ccdda768581a451526295c77198d308bb8ac5a74cb62139828997c777c2", 0x3d}, {&(0x7f0000000480)="cea378cae0c0e50799faab43bb7f334eefb410c643a0158881b23a6ff40a64d51a0cdc094650d13de36a8f653a353c45545c52cf62e7b95d757e32e966a8f841f22c2c2e57c8153db80bb88d71499ec71ff5cb9d6453f4c14cf57581dabf7170c58848ec5fa653a4362d26e78fea7736e5b646a484949f240ff877da1ff9217c3e6cad539b5410171188b83fefad645f5387c43b18dc92d13efa791d1f5442df8b4b7499826807debdf503b6a55803f83637faac0bd23d265d2c709954d45f681eee3645675f9056ae23bdbaffe60929fb6445dbe4c7b018085acf94ef1542088332b12264c8aebbc5c2d370be1fbadd00c6b150c42960de07df6addab658cc2b84ebab5b7aa564a80aa10215b3bd4ab0072d3a49627d4326f9d76bc9418decd038da4a0edf966a4c90cc6970beeb997fab4303d9821ffb5203d96cab334a56e8a73de6fa86effee82f31d887bf3a5be12aa3b1225b045c701ac6db6384d65c53cf9a0b6636e33c2add011bb3bd5af5463bc12d77ad3735c23d910ebf6b3951462060d038c4d282d97445def1da8839995408a9c022f3d3d8204ecf004f66e70a6645ffae73474fb3391ec3c1f33615182e31556169ce55699912b3d132500b477043f116c742c6ecf3549dd9b17fe34eb14df9501a44f8cd2bfa17511b074dbc1b4291a6e7fb6e6a426d230bbbf6210be651017ea815fab84f1aa464779c8590cc70425fa2dc87d0080eaa1425bedb6fe96aba1efaae6ef5ed8b3e55c197825daa01665bc8f2938ee41dbeff0e0d24a77c552a603ef60163906997936cb7b8771703ab1e1ea74624be7af2f9ebbef303431bf9491e2f088854a6bdf18a5e774618a741bd20ab8dec1adef28356c9c547a4cbfe45678f7b574e84005c5a0aac9613fc559274c1057c7b33e4a2133f9ea70b5d56fea45aa9eabca2dc39716e976c5c26fe165186df5483b915d39a3bd8d667102c44edcf6c1f1a812c6fc90a327d9cacf74fd69411b83c079ba288a5be66abda8c3a60c983b66470f68d7bd933ca199677ae912bb61158bff9022750fc86386ef41f70051f5e01e44f285fe9eed5c32fe927ff1601da087a7509f4a71fe91067410f7375326a971193f76a2c30ca535db1200800194121b93b3cb6642738a207bfb2d6ca73292bdd5cb0433e9567c28e8b66eb2ab26d90d775798f1a87b4e23c0fedb42c87b42b6c45a952a7ea87eeee7763fe72c7133956cc61aed51e7e6342f0a43a73d277c37698341143a9fe21eecacddbd1dc0c13b7f4cf47f37a57e917d5e7a270231945d7ef17fc6a1835d4f247edeea332d92c952a9b73dd4fb2000d49592aadf6ea1b6f1caab9f68fa8707276633819fa39202644e9babe506e3eca14a4870c664f493ab6f6ebe9fbeec78c03411cf39307fc3362d105a56297d2b366aaa274f3e66017b038691e6b52cc280d7766cfc8586cd5a6325e64f21d07188152f6448f9aecbc5ba76a0fee802d018e08423a6235bf24fb55674d7af2184cadcb64f0cd353b391a46340410427b33ae97be3524c5965ee908a6643a8bb8d3fd238ce5d2f178353bed1604bb5435348bb2ca3bfc8fb2c5707b582e17d3e2a90d72126d78b4ae67bc9e093132b88fd99eb9a6cdf2b6958265a64145eb16434c4f09c3ed357c75bb5b6176f07a916b8435f48ef8a4e18438d1cad6ff6d6b51de4b561cf73b978fda86b4e9eb23586951ba69f4a89a11c91df263647f4e24646eb7ede2a37148bd3072aef46754746a945c99759c88d1732decda367a81073c2e7ab7abb6ee5faad87ce43fad11cebed0c9b83181c9879f75eb5a6441f4c272f87ceb46c2eed2e999357f4c80e29eca0e6857e7180cbba2786ed45d18669a5aa94beec1c5e0c6a6b5a2672eab1784989ffb4ee72b1215e5244b4197208a48a17f532eacdd8336a9d57738f29549fdaba1fbfc498ebfdb7bed4f308425fdcbbb7633ff280c96839156bcdaa798f86b31a3c905722baeaa7dd99472f23069e4c04f9c657429f72e93e232b8d4e6adbd94ceb33a24764ad643eb34da7c0eb55ccd7b61ea1116acc05dd9e23472c1875c59d94249d8e40a64fe4c4c358a085996ab59f5f4ddd7205d88515203b70e6d60133f2c93bfceaf9500b1ffca926ecf3d8c307bff19a8a5deb95245e9444ea065f9741c695aee900ae4d563e0c17f5f21cc0829e456387be4e6ac20a540f3ea6544f95ba505310c0ef92e72f03d9cff1158eea2ef645d5745f6697f4abe59073e266dfa58e264dded0a1986b80c9142ea37ff3aadb3eb01723da56ca45002835670bef6b9ee6525e01c5007d5ade4a241163cf4f240c9299c87d794a94072a61acd398e76298a3255a88cac2428129b00a7df6f3e064f50e9e3882fd8770272e5187ee75aaaa8ef8d7d7cfae92d1f62668191f230100777b30b8fd84aef2752ea81492e3c161d966f95ce553a628a957a05574b54a74198a8ccbada4566ccc0e9604a13acb2d09db5effe0793599224b0ac6248f070f53b25405c1376bb0d002ac1b234faf7be8a3a179b2d1cd8a1aa023444da395086861fe57b8a5dcbe4d7c87386722e8ce04a3502d91f85149f285ec3fcd74e488689b93f7bcd6767821159b5a578188bfd2eda73d333a5b54f50336c9115961fc0b478c576fdc6652e5001caf1b77c2f8d6290f828ffd0f644c5064efd9a3d8ccd380f7941df446680836c4f7e94ec1a4d74cc14e6bbf1c1a71d00c41928404c1a50e90b5ae3cadf3f973390a32e56691855461e2ed9c6f9015b24647b9d84282def9952f4b5ed7e671d1e088d8e3bbedfd2e3a05ab05c60dce31e60c5485638bc9137b652a8fcd35af5c71dce5cbd7055ec1672612dcc75d0a181290cbf87c6ba0f21a812a6ec7a074fc98f6fac7d66bbcb8f0075269f756069dda623ac5611948ed813f9cf9fde500e03db768ea31d5aeb745c21a11456257b8322797b5ff5bd4dc29654ecc69381ff3b9df090970cf81b8a7b3f366fd626cf9d9a21a491c121cbd83cb9bc77f465a549b7790a7084bfdba95e2967cf45b4401c09f4e61da49b72494d18ce30c4e0ba09ff9a92af7e88dc312dfc320ce15591dc4af26e093961836b2594317a4ac8e5337ebe720ab529f75b029212f05c2219cf32db40d2316a9a82eb7ad329c98c57dbd35b258bf95e1dfbf96aca53d210b8234afd8fdf04e87c6abb44f400df16f7b057ef3b71e06b1249c45286c10f6e6bada68d0c62fcc13fcf9ea239a4cef8c5c9f000575a30b6377cae930bd3fbec6dd15b719fcc74de7ed70ee8b005b6d85afb26c45fc263a7f424a66924222a73ca035b16cb25e4b5f3b83f267707d1170eebcd36163e2093632db09de83668b832abade6e1018c482d5bd68ea5e17ce651815fdf2c9c504b6bd36359d69529ae67e98e91b25b070adfb114d88733a41d8cc3a28c1372fdfed075125c9dd2cffd4f7e06d6d8eb25f8421bacfb63998f02bf5771c31ae9f6584c074e6949e6b99b0c41d4945481db6992ccd20068782ebc23e4c0ea57705f940b82bbdb5bc97e9e9296c97d98b259216d874dc8bf30d4557d0791efd99a1c79a491517736b5a7fc27cbd9803f878c31541d94b81d55f096a1fc40c4d3658b52174dfe786932a62a1d2a358d848f88105f9a7164807a3b08fa665ee9bd5e9c57c21f21cf4520e2a9f6bbb06f2a987ef4efaa774f66077d104ae7d1b7d44b8bd0cc76296cf2fce8829837f87ccddce82fc50b40677a623db871c20b4a6457cd57c73dd10d2e2b51d6b3f7b4fc253e20df237fcd32f9b4f537a233601d34cfa5f27f3be2b5fced591f90af3d2ddc19204bb166ca0f233154cf38ed7ea77dd5e34172bd4ad35b39c05ea059792654dc1bc23078b10ad13e4c6ee4c3cadf04d941a702e0e649cfae3c7ec83dd9a6f7fc0bc1ed589b7a1c20ba289892316c1d073b25529b837fd5a0867621c7fa0ff902fbafe4da2582e1717e9d2fa67a4b9ae4a1839c56bfa7a879781a65d4d781a714d015e4f2c8c19222cf0df5e0856b098ded961c59053bb8528af33c4563deb8b23708b28d6415c01447da6a4eaafbd10af3814ea40d0e107575e8bdf164ee1ad11cbba06b285301c1f5ae4c88384fd6fe932fac73ae4c3b764eab89dd43ab06d9264c2ec6168112d4f3acc1dacc14be98e62503c9e8f1552428cf4afd4a3b432985a9aaae6269cdcdf4680b6dd5436bfcac93697204b2358be9976ad6c46fb8fa1e00ad594be0c4c82011dff03895b2b5277795a3d297900adca45873557d2a0bd4116827c97d7d63cbb9327ab9ed29f5eaec370fb5394cdc1df9a6af790a47430f7d310f86e71964a345cda38b04e9ff6b47a723336f699b1c7aeef43adedd665e44407e57181fd725abff26bf2f01f6a8eba890ce249b10b151a4cf5e2e1d62af4b1d5a21b47c9cb807fade253d68d53beb9a13f49adb78006f9633deda736d4c57aed35c2a64111c17d4feb64853963324099ed38195b7ec02d87215ccdf5f1ee2ca1dd82eb6767f4911d8c6f0f9a330e86b50855bb1f58efa687239e6ad3d8dc5df8b195ef8d23463a71ca52e76cefa422fd40b5566b6409c9ff3daa320442c619eb9e97f2473446b69661128b77651e53e7e566a1c16aed41984fc5dc3e3944af762d6dc4c85328ed7b8808a4cdffe535d5aedb65ad6836c686fa886064a31ac53010ed86aa1ab46d72546e6e03a94822a8bd2d220e9b343af36c9efe0f5b1abc0682e14adb609f14ea9d34fa81f1d613536b816c65c45fde9d8ddb71b1db89634440ada45454959e3d62b7b25488801d690d9f754f302d9cfe4de1e40647510b5cf96d60c5a053006107f69bf24f0e8ae6e8b0493ec3b71ecbc806d5d23bc1816d25075a454c5e1f36ded2f4abce53b3bcf5980814169bb8e75b78fb330abf365cf76456ff9dfe949036e1af190cedc79dc8939c46ebaf2550c0ac00f838a9abd48271d175c549d24d843a1a1b373d8d53d0624e5731ece48ad112801edc270ab44ff693f0fc360aed599bae6ba189814d0543bf075447d8c21e3c3b3d289a901bfb4ab845f4e8eca4db30482a2edab2e57c334645449062dab850fe10e3b31db666c97aa40fb8343d7dc8c95087d574fa2ffce2f8a5a526494270d5b8c3085890ea4358a8205787893b5f7ad05f9ff95e98d57b6533ef0095ce062ce34c5c9015d87f35c0848d08d5af9b81dbbbc1c43f93f006128d4e43440ff5cd01d7941570586aadbc9882aa89bdb9254060f64b8e4f6eb9665a66aa1518bfa81f9f802955d73c62d39595489b3b32054ef1c46076a5a41cd7069761d17dde1883df87dafd5f6ed4ad0769ff11b445e6632b7843980c9bcd4f36f3d0f4a9512f0c0a63de6bd6bcc9b64bc20a70fae0acb42d62dc13090a16ece0a2be2e8cc36f8747fe8133e2f5d0e34e8fb9a21506a92be24a97d1d051b61d4ebde82a4e0e348bf147c6517d6e7a7a8cfa27c3ed44c8632e379a031d078be491505083035a060294364ba267f4c536209320af52e73dd59ef8dd066b50f0c0dfe6de81129bc41eeb24d0094b1f80951aa16155043d0ad52b6f044e43fa8dd0f4be817574adabdcf577c74721ddcb66b1a139e0780a77bed7eae881f2c4cf711c761f38652f6a01c9c43a8c3cf3c20dfcf9a40ccdcb1431a0bcea36f44d8c92013294957d20384ca0fd2159e30669bc2a07f969c719d168916a6dc3ada9ad97652534c7188a182125ace668a067e019ae5629aec69efcfe5fbd1fd404dfd0e05103a965e8f514b77364bed478600ab4ea7432f5", 0x1000}], 0x5, 0x0, 0x0, 0x4004}, 0x20000000) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x10000, 0x2000000000000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001540)={0x0, 0x0, 0xce, 0x5, 0x8, 0x42b}, &(0x7f0000001580)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000015c0)=@assoc_value={r4, 0x6}, 0x8) fallocate(r2, 0x0, 0x0, 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285628, &(0x7f00000000c0)={0x3, 0x0, 0x5, [], &(0x7f0000000040)=0x6}) 03:41:58 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:58 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x68, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000200)) [ 2451.169372] binder: 7665:7670 got transaction to invalid handle 03:41:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) 03:41:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) [ 2451.216560] binder: 7665:7670 transaction failed 29201/-22, size 0-0 line 2896 [ 2451.234320] binder: undelivered TRANSACTION_ERROR: 29201 03:41:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x1000000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:59 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd2ad, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1, "71caa0c556e68e0c38044e1be6bf78529eea9109593f61756ef020f00a66f144", 0x2, 0x76d0fc837f0c85c0}) [ 2451.449653] binder: 7691:7705 transaction failed 29201/-22, size 0-0 line 2896 03:41:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x80000001, 0x1ff, 0x4, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0x6, 0x30, 0x7fff, 0x4e}, &(0x7f00000001c0)=0x18) 03:41:59 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x4000000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) [ 2451.709898] binder_transaction: 1 callbacks suppressed [ 2451.709908] binder: 7734:7738 got transaction to invalid handle [ 2451.733792] binder: 7734:7738 transaction failed 29201/-22, size 0-0 line 2896 [ 2451.744967] binder_release_work: 1 callbacks suppressed [ 2451.744973] binder: undelivered TRANSACTION_ERROR: 29201 03:41:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:41:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:41:59 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:41:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0xffffffff00000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000180)={{0x4, @name="2506406566ba4cb8fea57fa95ed5c1290cdced1bae0ecb9b4a089a3cf8f749c4"}, "9eceffc59d1aa5b49f6fe834152b40f90d8e545b7f8d167758527c8ca7a50d26", 0xc4f2ca62ca43a573}) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{&(0x7f0000000400)=@rc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/32, 0x20}, {&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000000840)=""/2, 0x2}], 0x9, &(0x7f0000000940)=""/244, 0xf4}, 0x1}, {{&(0x7f0000000a40)=@tipc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000bc0)=""/108, 0x6c}], 0x2, &(0x7f0000000c80)=""/12, 0xc}, 0x5}, {{&(0x7f0000000cc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/238, 0xee}, {&(0x7f0000000e40)=""/162, 0xa2}], 0x2}, 0x80}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/141, 0x8d}], 0x1, &(0x7f0000001040)=""/100, 0x64}, 0x100000001}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000010c0)=""/65, 0x41}, {&(0x7f0000001140)=""/148, 0x94}, {&(0x7f0000001200)=""/9, 0x9}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x4, &(0x7f0000002280)=""/104, 0x68}, 0x2}, {{&(0x7f0000002300)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/146, 0x92}], 0x1, &(0x7f0000002480)=""/4096, 0x1000}, 0x7}], 0x6, 0x10000, &(0x7f0000003600)={0x0, 0x989680}) sendmsg$nl_xfrm(r2, &(0x7f0000003a00)={&(0x7f00000003c0), 0xc, &(0x7f00000039c0)={&(0x7f0000003640)=@delsa={0x380, 0x11, 0x400, 0x70bd2b, 0x25dfdbff, {@in6=@mcast2, 0x4d4, 0xa, 0xff}, [@algo_auth_trunc={0xb8, 0x14, {{'sha3-224\x00'}, 0x360, 0x60, "cd1e8329acf19096d60af782bad600af185712740f1bfdbeb73a18948bd3907f7b68135b7e178754b52f4673683dbe60eed0ebf198bf2911bb6d7df33d1d85fe8be884ae61cc957914084f9824ea37ca0250edc32ed9d0dd208a692b17ac592d122953ba16ad54a3a368227f"}}, @migrate={0xe0, 0x11, [{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x7f, 0x187511e1d1045ba8, 0x0, 0x3507, 0x0, 0x2}, {@in=@rand_addr=0x1, @in=@multicast1, 0xff, 0x0, 0x0, 0x3501, 0x0, 0xa}, {@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0xd}, 0x2b, 0x2, 0x0, 0x3507, 0xa, 0xa}, {@in=@empty, @in6=@mcast1, 0x6c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@loopback, 0x2b, 0x3, 0x0, 0x3501, 0xa, 0xa}]}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd29, 0x1000}}, @algo_crypt={0xe8, 0x2, {{'ctr-serpent-avx2\x00'}, 0x500, "fa57dd03f6533eadc97c0b299938690ca0f65378b1fe0d2308f09b5873df0aa09f1b49b5fede36efc8a7cf9622049af9e9fd7784da2578f4781bc48fb30df719bb5766c14d487dcb3b8f74adb6877a7f066556800a396278f5f4988028ac573ba7ef9fa4688c8b1dc66735357f7d1b4d6d7748fb44a72fb68dd99f83b52d48ad360d2bafb194790c73a574da72461f36af49c81b2eb21211bcd19f5a7dc73528"}}, @algo_auth={0xb4, 0x1, {{'md5\x00'}, 0x360, "4cc93506bd399c7362891fc293268555837cf69b924d51a455724fe2b3e733c2c5a8e50582bd8e7730d9e2848c7d53fabceb94cbacc90d51fad970a9ccbb4f02bc505d93666017db8885bdbc7bdf6c878cf2370f227b8850a621a7516c61f93555283afe569c8cf1b0afcb8a"}}, @offload={0xc, 0x1c, {r3, 0x2}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x811) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000100)=0xb691, &(0x7f0000000280)=0x4) ptrace$setopts(0x41fd, r1, 0xfffffffffffffff9, 0x34) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8) 03:41:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:41:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:41:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$revoke(0x3, r1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) 03:41:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732a666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000280)='.\x00', 0x80) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000b40)={[], 0x2000000000007ff, 0x8, 0x7, 0x0, 0x25, 0xf004, 0x64d9419b0ddd7a78, [], 0x5}) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x40) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000380)='./file0/file1\x00', 0x20000000000000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000002400)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000400)={0x1, 0x0, [], {0x0, @reserved}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000940)={0x101, 0xfff, 0x7, 0x172, 0x101}) syz_open_procfs(0x0, 0x0) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) lstat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)) syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0/file0\x00', 0x4, 0x1, &(0x7f0000000680)=[{&(0x7f0000000340)="25790fcb1e3792c8461aec9d", 0xc, 0x4}], 0xa00010, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, r5) [ 2452.094943] binder: 7755:7767 got transaction to invalid handle [ 2452.131770] binder: 7755:7767 transaction failed 29201/-22, size 0-0 line 2896 [ 2452.185232] binder: undelivered TRANSACTION_ERROR: 29201 03:42:00 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:42:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800)='/dev/video#\x00', 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x5, 0x8, &(0x7f0000000680)=[{&(0x7f0000000940)="0e496647b60949a9379b6c4595b806b007ffe42a0742e4a291f7d9c7e5e6b83abeef87bbb80df0be4e40685e6d657c25224c4373a3a12fedd9ac005944409268fd0cd8eb0839f6042c873c638e226033a436e723b50a4dd6a72412f75dfdebee71cc6ef1e24e73985e5193af1dcfdad0927f15bc43fa02d0a17f7cf1dcdaf06bd5ab5e911550ca97444ec412d653f293e529cc8afdcd82bc3a491420eb3f933d52fd78299a67", 0xa6, 0x4}, {&(0x7f0000000240)="a05e5968bf07449df9b4980b2f1b05d03be3039d2dbd6ae250631745b60dcaa59151267013b9a5663293695a599e1fd8579dd64081c694972a9f5498e6dc53ba93d4f1ee7cef51235ed41518d7c974ed3a95f5c53bc557ffc5874d5cd0db064a0aaf1b43590fe683739bbd89b1ea8144778d94d0224386f283a905adfe5c41f151ae", 0x82, 0x3}, {&(0x7f0000000a00)="7460434716d6c111f0b6110c46f46c2abccc2c83ccb21feccda8ec4ff1ffe622b7ef5b6c74ca88f4928f477d870bb89ab4196161d56dbe4ff689f8be0a0056a675ef1378f695fd0b5823f6fe97d25ae0832bcca0bdbaee0f8c5adccdef6267865da282c1", 0x64, 0x81}, {&(0x7f0000000380)="16f7ed9725bc96e1f421b4e05660255f30829164c6c3977932bce32e8f2b2a753252ae19bea04f601900c44948405176a783d95cd0634e15a3e54e8df8013641150bac4da3194cdadbe9516f0e1276581f62d2aaf8bfda544c1257125d04e58d550389d46eb4fd6fb8b7f3b668cf29b4598f0f11d4930ca404c5070dff273f12aa13c7992d431e7120fa6ed1a6bafcd85378f0f2e01b63bcf2b62520562248a720d693d3e641c22099f8521858030801579145539797f6f05bec2c93dcf15296a80930cbef8ac7b20a828fa59a8f2ba78e4e9c3c46103a29bb53768ab5797f79c20e4765c32f7cd763fb7a317b6f", 0xee, 0x9}, {&(0x7f0000000480)="d8ccfa01fb80788967b5b8f79b5d8b8a2abe252d343644bf57f5dba32145c43e4ace8e3ef20ca35123ce16417ef629c2185746970196b4c10f40e6b82d547fbb3d1d403df4f12f1ff39fe38bf84d71a01f2760ebf6d7e17222cec03ee2", 0x5d, 0xb}, {&(0x7f0000000500)="1a7d8fc10b8aa0f3862c07ce5ef8e8d7ec70b07a1c0c292b4fb822e09ed00240f39bf753958d9497aaf227568aa1d64a95162e7e12e0e579dda630f386e13d49779845122780916f7e18448ac7f8b777868b160ed21299cb7eaba9ebbe0b360ed38e47dd94c85f011d1893af6772fc3b669c48d63501391a1ba5ed54a17549f681102475bcd2b29a11f7a2ea446d7b1a0d02ae600a1cd3fb2782a7a90a46539975eb304387b62ede653056fae0a47f19edc82964d958b49f1a534ce6f69e89ad21c6c58b3c", 0xc5, 0x7}, {&(0x7f0000000600)="a0203c4c8ee9969b0f2dcf6de8f3e53d3b0eec44a259baaac0a7124199b0804b5bfad72f4d", 0x25, 0xfffffffffffffff7}, {&(0x7f0000000640)="55f0f362bd3936fb11f9f02b10e5b82b79b3", 0x12, 0x6}], 0x200840, &(0x7f0000000740)={[{@fault_injection={'fault_injection', 0x3d, 0x9209}}, {@acl='acl'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}]}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x1) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000880)={0x0, @reserved}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x620000, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000000)={0x3, 0x2, 0x10001, [], &(0x7f0000000840)}) [ 2452.383664] binder: 7787:7790 got transaction to invalid handle [ 2452.459927] binder: 7787:7790 transaction failed 29201/-22, size 0-0 line 2896 [ 2452.582239] binder: undelivered TRANSACTION_ERROR: 29201 03:42:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 03:42:00 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x32315659}}) 03:42:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x84007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x200000000000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:42:00 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:42:00 executing program 0: lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() chown(&(0x7f0000000180)='./file0\x00', r0, r1) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x7f, 0x200) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x143100, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="090000008805afc50ab3c0a5db9da89de01ab287eb6d6c3fd051e506b406fdf0b8fdf4ac0d159a1d4cf7bdfdac3919aead0b22a36e2c3b6fdd101b8b4a6bd15924b4e06f3cdff5345bd7d788982e66e1a7e2b3058a3b937a9531fd7491d87e8eb33778ac25d8a32aa7b2e1297427204af76ffc4ef431397f1304271e8ab6557733b82eeb6eb689f9dc8ca49cdfcce1388577c993560cd870f1ad50fbc189f311a75813b05c0ddb1f66de5f0405a442cf8f9fb50478e6bd563d2ae3417ebb5538e627f4a239b2da326bd7fcab8a2cd8b8682f60ee0c66078e"]) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000080)=0x3, &(0x7f0000000100)=0x2) r5 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0x8446, 0x84fe7960027ea848) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285628, &(0x7f0000000000)={0x3, 0x0, 0x5, [], &(0x7f0000000140)}) [ 2453.911649] net_ratelimit: 34 callbacks suppressed [ 2453.911658] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.921781] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.252103] sched: RT throttling activated [ 2454.252272] protocol 88fb is buggy, dev hsr_slave_0 [ 2454.253485] protocol 88fb is buggy, dev hsr_slave_0 [ 2454.256583] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.261630] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.267042] protocol 88fb is buggy, dev hsr_slave_0 [ 2454.281772] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.286895] protocol 88fb is buggy, dev hsr_slave_0 [ 2454.292510] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.152014] net_ratelimit: 10 callbacks suppressed [ 2460.152021] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.162091] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.471702] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.476825] protocol 88fb is buggy, dev hsr_slave_1 [ 2462.231668] protocol 88fb is buggy, dev hsr_slave_0 [ 2462.236901] protocol 88fb is buggy, dev hsr_slave_1 [ 2462.551710] protocol 88fb is buggy, dev hsr_slave_0 [ 2462.556819] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.311676] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.316816] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.391660] net_ratelimit: 2 callbacks suppressed [ 2466.391668] protocol 88fb is buggy, dev hsr_slave_0 [ 2466.401731] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.711665] protocol 88fb is buggy, dev hsr_slave_0 [ 2466.716834] protocol 88fb is buggy, dev hsr_slave_1 [ 2468.471650] protocol 88fb is buggy, dev hsr_slave_0 [ 2468.476765] protocol 88fb is buggy, dev hsr_slave_1 [ 2468.791681] protocol 88fb is buggy, dev hsr_slave_0 [ 2468.796769] protocol 88fb is buggy, dev hsr_slave_1 [ 2470.551679] protocol 88fb is buggy, dev hsr_slave_0 [ 2470.557074] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.631653] net_ratelimit: 2 callbacks suppressed [ 2472.631660] protocol 88fb is buggy, dev hsr_slave_0 [ 2472.641704] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.951685] protocol 88fb is buggy, dev hsr_slave_0 [ 2472.956782] protocol 88fb is buggy, dev hsr_slave_1 [ 2474.711656] protocol 88fb is buggy, dev hsr_slave_0 [ 2474.716754] protocol 88fb is buggy, dev hsr_slave_1 [ 2475.031668] protocol 88fb is buggy, dev hsr_slave_0 [ 2475.036747] protocol 88fb is buggy, dev hsr_slave_1 [ 2476.791858] protocol 88fb is buggy, dev hsr_slave_0 [ 2476.796967] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.871640] net_ratelimit: 2 callbacks suppressed [ 2478.871647] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.881626] protocol 88fb is buggy, dev hsr_slave_1 [ 2479.191666] protocol 88fb is buggy, dev hsr_slave_0 [ 2479.196738] protocol 88fb is buggy, dev hsr_slave_1 [ 2480.951680] protocol 88fb is buggy, dev hsr_slave_0 [ 2480.956798] protocol 88fb is buggy, dev hsr_slave_1 [ 2481.271690] protocol 88fb is buggy, dev hsr_slave_0 [ 2481.276864] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.031658] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.036881] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.111723] net_ratelimit: 2 callbacks suppressed [ 2485.111731] protocol 88fb is buggy, dev hsr_slave_0 [ 2485.121779] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.431669] protocol 88fb is buggy, dev hsr_slave_0 [ 2485.436755] protocol 88fb is buggy, dev hsr_slave_1 [ 2487.191658] protocol 88fb is buggy, dev hsr_slave_0 [ 2487.196867] protocol 88fb is buggy, dev hsr_slave_1 [ 2487.511687] protocol 88fb is buggy, dev hsr_slave_0 [ 2487.516847] protocol 88fb is buggy, dev hsr_slave_1 [ 2489.271669] protocol 88fb is buggy, dev hsr_slave_0 [ 2489.276801] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.351672] net_ratelimit: 2 callbacks suppressed [ 2491.351680] protocol 88fb is buggy, dev hsr_slave_0 [ 2491.361653] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.671682] protocol 88fb is buggy, dev hsr_slave_0 [ 2491.676775] protocol 88fb is buggy, dev hsr_slave_1 [ 2493.431679] protocol 88fb is buggy, dev hsr_slave_0 [ 2493.436930] protocol 88fb is buggy, dev hsr_slave_1 [ 2493.751692] protocol 88fb is buggy, dev hsr_slave_0 [ 2493.756888] protocol 88fb is buggy, dev hsr_slave_1 [ 2495.511670] protocol 88fb is buggy, dev hsr_slave_0 [ 2495.516887] protocol 88fb is buggy, dev hsr_slave_1 [ 2497.591651] net_ratelimit: 2 callbacks suppressed [ 2497.591658] protocol 88fb is buggy, dev hsr_slave_0 [ 2497.601837] protocol 88fb is buggy, dev hsr_slave_1 [ 2497.911695] protocol 88fb is buggy, dev hsr_slave_0 [ 2497.916884] protocol 88fb is buggy, dev hsr_slave_1 [ 2499.671678] protocol 88fb is buggy, dev hsr_slave_0 [ 2499.676818] protocol 88fb is buggy, dev hsr_slave_1 [ 2499.991660] protocol 88fb is buggy, dev hsr_slave_0 [ 2499.996837] protocol 88fb is buggy, dev hsr_slave_1 [ 2501.751690] protocol 88fb is buggy, dev hsr_slave_0 [ 2501.756826] protocol 88fb is buggy, dev hsr_slave_1 [ 2503.831650] net_ratelimit: 2 callbacks suppressed [ 2503.831658] protocol 88fb is buggy, dev hsr_slave_0 [ 2503.841716] protocol 88fb is buggy, dev hsr_slave_1 [ 2504.151665] protocol 88fb is buggy, dev hsr_slave_0 [ 2504.156819] protocol 88fb is buggy, dev hsr_slave_1 [ 2505.911648] protocol 88fb is buggy, dev hsr_slave_0 [ 2505.916748] protocol 88fb is buggy, dev hsr_slave_1 [ 2506.231863] protocol 88fb is buggy, dev hsr_slave_0 [ 2506.236943] protocol 88fb is buggy, dev hsr_slave_1 [ 2507.991649] protocol 88fb is buggy, dev hsr_slave_0 [ 2507.996758] protocol 88fb is buggy, dev hsr_slave_1 [ 2510.071907] net_ratelimit: 2 callbacks suppressed [ 2510.071915] protocol 88fb is buggy, dev hsr_slave_0 [ 2510.081983] protocol 88fb is buggy, dev hsr_slave_1 [ 2510.391728] protocol 88fb is buggy, dev hsr_slave_0 [ 2510.396840] protocol 88fb is buggy, dev hsr_slave_1 [ 2512.151694] protocol 88fb is buggy, dev hsr_slave_0 [ 2512.156862] protocol 88fb is buggy, dev hsr_slave_1 [ 2512.471696] protocol 88fb is buggy, dev hsr_slave_0 [ 2512.476797] protocol 88fb is buggy, dev hsr_slave_1 [ 2514.231659] protocol 88fb is buggy, dev hsr_slave_0 [ 2514.236752] protocol 88fb is buggy, dev hsr_slave_1 [ 2516.311672] net_ratelimit: 2 callbacks suppressed [ 2516.311679] protocol 88fb is buggy, dev hsr_slave_0 [ 2516.321715] protocol 88fb is buggy, dev hsr_slave_1 [ 2516.631663] protocol 88fb is buggy, dev hsr_slave_0 [ 2516.636827] protocol 88fb is buggy, dev hsr_slave_1 [ 2518.391928] protocol 88fb is buggy, dev hsr_slave_0 [ 2518.397024] protocol 88fb is buggy, dev hsr_slave_1 [ 2518.711667] protocol 88fb is buggy, dev hsr_slave_0 [ 2518.716818] protocol 88fb is buggy, dev hsr_slave_1 [ 2520.471646] protocol 88fb is buggy, dev hsr_slave_0 [ 2520.476755] protocol 88fb is buggy, dev hsr_slave_1 [ 2522.551707] net_ratelimit: 2 callbacks suppressed [ 2522.551716] protocol 88fb is buggy, dev hsr_slave_0 [ 2522.561694] protocol 88fb is buggy, dev hsr_slave_1 [ 2522.871708] protocol 88fb is buggy, dev hsr_slave_0 [ 2522.876879] protocol 88fb is buggy, dev hsr_slave_1 [ 2524.631660] protocol 88fb is buggy, dev hsr_slave_0 [ 2524.636742] protocol 88fb is buggy, dev hsr_slave_1 [ 2524.951668] protocol 88fb is buggy, dev hsr_slave_0 [ 2524.956839] protocol 88fb is buggy, dev hsr_slave_1 [ 2526.711646] protocol 88fb is buggy, dev hsr_slave_0 [ 2526.716739] protocol 88fb is buggy, dev hsr_slave_1 [ 2528.791649] net_ratelimit: 2 callbacks suppressed [ 2528.791656] protocol 88fb is buggy, dev hsr_slave_0 [ 2528.801615] protocol 88fb is buggy, dev hsr_slave_1 [ 2529.111661] protocol 88fb is buggy, dev hsr_slave_0 [ 2529.116812] protocol 88fb is buggy, dev hsr_slave_1 [ 2530.871699] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.876903] protocol 88fb is buggy, dev hsr_slave_1 [ 2531.191725] protocol 88fb is buggy, dev hsr_slave_0 [ 2531.196919] protocol 88fb is buggy, dev hsr_slave_1 [ 2532.951638] protocol 88fb is buggy, dev hsr_slave_0 [ 2532.956740] protocol 88fb is buggy, dev hsr_slave_1 [ 2535.031653] net_ratelimit: 2 callbacks suppressed [ 2535.031660] protocol 88fb is buggy, dev hsr_slave_0 [ 2535.041617] protocol 88fb is buggy, dev hsr_slave_1 [ 2535.351668] protocol 88fb is buggy, dev hsr_slave_0 [ 2535.356747] protocol 88fb is buggy, dev hsr_slave_1 [ 2537.111644] protocol 88fb is buggy, dev hsr_slave_0 [ 2537.116719] protocol 88fb is buggy, dev hsr_slave_1 [ 2537.431664] protocol 88fb is buggy, dev hsr_slave_0 [ 2537.436748] protocol 88fb is buggy, dev hsr_slave_1 [ 2539.191677] protocol 88fb is buggy, dev hsr_slave_0 [ 2539.196767] protocol 88fb is buggy, dev hsr_slave_1 [ 2541.271675] net_ratelimit: 2 callbacks suppressed [ 2541.271683] protocol 88fb is buggy, dev hsr_slave_0 [ 2541.281634] protocol 88fb is buggy, dev hsr_slave_1 [ 2541.591661] protocol 88fb is buggy, dev hsr_slave_0 [ 2541.596940] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.351678] protocol 88fb is buggy, dev hsr_slave_0 [ 2543.356764] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.671673] protocol 88fb is buggy, dev hsr_slave_0 [ 2543.676763] protocol 88fb is buggy, dev hsr_slave_1 [ 2545.431646] protocol 88fb is buggy, dev hsr_slave_0 [ 2545.436819] protocol 88fb is buggy, dev hsr_slave_1 [ 2547.511682] net_ratelimit: 2 callbacks suppressed [ 2547.511690] protocol 88fb is buggy, dev hsr_slave_0 [ 2547.521785] protocol 88fb is buggy, dev hsr_slave_1 [ 2547.831709] protocol 88fb is buggy, dev hsr_slave_0 [ 2547.836828] protocol 88fb is buggy, dev hsr_slave_1 [ 2549.591678] protocol 88fb is buggy, dev hsr_slave_0 [ 2549.596806] protocol 88fb is buggy, dev hsr_slave_1 [ 2549.911658] protocol 88fb is buggy, dev hsr_slave_0 [ 2549.916746] protocol 88fb is buggy, dev hsr_slave_1 [ 2551.671672] protocol 88fb is buggy, dev hsr_slave_0 [ 2551.676756] protocol 88fb is buggy, dev hsr_slave_1 [ 2553.751658] net_ratelimit: 2 callbacks suppressed [ 2553.751665] protocol 88fb is buggy, dev hsr_slave_0 [ 2553.761626] protocol 88fb is buggy, dev hsr_slave_1 [ 2554.071684] protocol 88fb is buggy, dev hsr_slave_0 [ 2554.076758] protocol 88fb is buggy, dev hsr_slave_1 [ 2555.831660] protocol 88fb is buggy, dev hsr_slave_0 [ 2555.836742] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.151674] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.156840] protocol 88fb is buggy, dev hsr_slave_1 [ 2557.721548] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2557.727716] rcu: 1-....: (10343 ticks this GP) idle=3f6/1/0x4000000000000002 softirq=360698/360698 fqs=5189 [ 2557.738072] rcu: (t=10502 jiffies g=436829 q=1195) [ 2557.743155] NMI backtrace for cpu 1 [ 2557.746762] CPU: 1 PID: 7781 Comm: syz-executor4 Not tainted 4.20.0+ #175 [ 2557.753660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2557.763002] Call Trace: [ 2557.765561] [ 2557.767697] dump_stack+0x1d3/0x2c6 [ 2557.771305] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2557.776485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.782004] ? do_raw_spin_lock+0x14f/0x350 [ 2557.786306] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 2557.791475] nmi_cpu_backtrace.cold.4+0x63/0xa2 [ 2557.796132] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 2557.801300] nmi_trigger_cpumask_backtrace+0x1c2/0x22c [ 2557.806557] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2557.811725] rcu_dump_cpu_stacks+0x16f/0x1bc [ 2557.816117] print_cpu_stall.cold.68+0x218/0x40a [ 2557.820846] ? trace_hardirqs_on+0x310/0x310 [ 2557.825234] ? rcu_dynticks_snap+0x30/0x30 [ 2557.829448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.834962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.840490] ? do_trace_rcu_torture_read+0x10/0x10 [ 2557.845399] ? __this_cpu_preempt_check+0x1c/0x20 [ 2557.850216] ? rcu_preempt_need_deferred_qs+0x71/0x190 [ 2557.855466] ? __lock_is_held+0xb5/0x140 [ 2557.859515] ? __rcu_read_lock+0x90/0x90 [ 2557.863554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.869071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.874586] ? check_preemption_disabled+0x48/0x280 [ 2557.879595] rcu_check_callbacks+0xac1/0x1410 [ 2557.884080] ? __lock_acquire+0x62f/0x4c20 [ 2557.888295] ? rcutree_dead_cpu+0x10/0x10 [ 2557.892437] ? mark_held_locks+0x130/0x130 [ 2557.896652] ? graph_lock+0x270/0x270 [ 2557.900428] ? mark_held_locks+0x130/0x130 [ 2557.904642] ? __lock_acquire+0x62f/0x4c20 [ 2557.908856] ? debug_smp_processor_id+0x1c/0x20 [ 2557.913594] ? nohz_balance_exit_idle+0x65/0x3e0 [ 2557.918326] ? print_usage_bug+0xc0/0xc0 [ 2557.922368] ? graph_lock+0x270/0x270 [ 2557.926143] ? find_held_lock+0x36/0x1c0 [ 2557.930186] ? cpuacct_account_field+0x219/0x3d0 [ 2557.934917] ? graph_lock+0x270/0x270 [ 2557.938698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2557.944215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.949726] ? check_preemption_disabled+0x48/0x280 [ 2557.954733] ? trace_hardirqs_off+0xb8/0x310 [ 2557.959117] ? __lock_is_held+0xb5/0x140 [ 2557.963154] ? trace_hardirqs_on+0x310/0x310 [ 2557.967539] ? check_preemption_disabled+0x48/0x280 [ 2557.972533] ? raise_softirq+0x199/0x420 [ 2557.976588] ? raise_softirq_irqoff+0x2e0/0x2e0 [ 2557.981232] ? account_system_index_time+0x333/0x5d0 [ 2557.986315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2557.991831] ? check_preemption_disabled+0x48/0x280 [ 2557.996829] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2558.002346] ? hrtimer_run_queues+0x9a/0x400 [ 2558.006738] ? run_local_timers+0x19b/0x230 [ 2558.011037] ? timer_clear_idle+0x90/0x90 [ 2558.015180] ? irqtime_account_process_tick.isra.6+0x35b/0x490 [ 2558.021132] ? account_process_tick+0x282/0x350 [ 2558.025788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.031302] update_process_times+0x2d/0x70 [ 2558.035603] tick_sched_handle+0x9f/0x180 [ 2558.039726] tick_sched_timer+0x45/0x130 [ 2558.043763] __hrtimer_run_queues+0x41c/0x10d0 [ 2558.048325] ? tick_sched_do_timer+0x1a0/0x1a0 [ 2558.052888] ? hrtimer_start_range_ns+0xe00/0xe00 [ 2558.057715] ? pvclock_read_flags+0x160/0x160 [ 2558.062188] ? trace_hardirqs_on+0x310/0x310 [ 2558.066584] ? kvm_clock_read+0x18/0x30 [ 2558.070535] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2558.075526] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 2558.080869] ? do_timer+0x50/0x50 [ 2558.084307] ? rwlock_bug.part.2+0x90/0x90 [ 2558.088522] ? trace_hardirqs_on+0x310/0x310 [ 2558.092908] ? rcu_softirq_qs+0x20/0x20 [ 2558.096869] hrtimer_interrupt+0x313/0x780 [ 2558.101091] smp_apic_timer_interrupt+0x1a1/0x760 [ 2558.105912] ? smp_reschedule_interrupt+0x109/0x650 [ 2558.110921] ? smp_call_function_single_interrupt+0x650/0x650 [ 2558.116787] ? interrupt_entry+0xb5/0xc0 [ 2558.120825] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2558.125815] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2558.130811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2558.135648] ? trace_hardirqs_on_caller+0x310/0x310 [ 2558.140640] ? trace_hardirqs_on_caller+0x310/0x310 [ 2558.145633] ? task_prio+0x50/0x50 [ 2558.149150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.154664] ? check_preemption_disabled+0x48/0x280 [ 2558.159663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2558.164492] apic_timer_interrupt+0xf/0x20 [ 2558.168701] [ 2558.170923] RIP: 0010:lock_acquire+0x268/0x520 [ 2558.175493] Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 44 02 00 00 48 83 3d a7 1a 0e 08 00 0f 84 c3 01 00 00 48 8b bd 20 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 [ 2558.194366] RSP: 0018:ffff88805b2ce4a8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 2558.202050] RAX: dffffc0000000000 RBX: 1ffff1100b659c9a RCX: 0000000000000000 [ 2558.209296] RDX: 1ffffffff12e495e RSI: 0000000000000000 RDI: 0000000000000286 [ 2558.216617] RBP: ffff88805b2ce598 R08: ffff888090726b18 R09: 0000000000000008 [ 2558.223865] R10: 0000000000000078 R11: ffff888090726200 R12: ffff888090726200 [ 2558.231110] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 2558.238383] ? lock_release+0xa00/0xa00 [ 2558.242350] ? graph_lock+0x270/0x270 [ 2558.246125] ? check_preemption_disabled+0x48/0x280 [ 2558.251126] find_get_entry+0x319/0x1120 [ 2558.255161] ? find_get_entry+0x2e3/0x1120 [ 2558.259381] ? find_held_lock+0x36/0x1c0 [ 2558.263417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.268933] ? mark_page_accessed+0xcaf/0x2040 [ 2558.273495] ? filemap_map_pages+0x1d20/0x1d20 [ 2558.278052] ? find_get_entry+0xa87/0x1120 [ 2558.282276] ? lock_downgrade+0x900/0x900 [ 2558.286398] ? check_preemption_disabled+0x48/0x280 [ 2558.291396] ? kasan_check_read+0x11/0x20 [ 2558.295523] ? rcu_read_unlock_special+0x370/0x370 [ 2558.300450] ? find_get_entry+0xaae/0x1120 [ 2558.304686] ? filemap_map_pages+0x1d20/0x1d20 [ 2558.309257] ? plist_add+0x7a0/0x7a0 [ 2558.312961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2558.317696] ? trace_hardirqs_off+0x310/0x310 [ 2558.322171] ? retint_kernel+0x1b/0x2d [ 2558.326036] ? trace_hardirqs_on+0x310/0x310 [ 2558.330420] ? _raw_spin_unlock_irq+0x27/0x80 [ 2558.334894] ? graph_lock+0x270/0x270 [ 2558.338673] ? print_usage_bug+0xc0/0xc0 [ 2558.342716] pagecache_get_page+0x12f/0xf00 [ 2558.347019] ? find_get_pages_contig+0x18d0/0x18d0 [ 2558.351930] ? ___might_sleep+0x1ed/0x300 [ 2558.356059] ? print_usage_bug+0xc0/0xc0 [ 2558.360097] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2558.364656] ? trace_hardirqs_on+0xbd/0x310 [ 2558.368954] ? kasan_check_read+0x11/0x20 [ 2558.373083] ? __might_sleep+0x95/0x190 [ 2558.377035] ? pagecache_get_page+0x2d8/0xf00 [ 2558.381541] ? mark_held_locks+0xc7/0x130 [ 2558.385671] ? lock_downgrade+0x900/0x900 [ 2558.389797] ? __find_get_block+0x2f7/0xf20 [ 2558.394096] ? __find_get_block+0x2f7/0xf20 [ 2558.398394] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2558.402953] ? trace_hardirqs_on+0xbd/0x310 [ 2558.407250] ? __getblk_gfp+0x2b3/0xd50 [ 2558.411228] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2558.416652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.422171] ? check_preemption_disabled+0x48/0x280 [ 2558.427167] __find_get_block+0x63a/0xf20 [ 2558.431299] ? try_to_free_buffers+0xc80/0xc80 [ 2558.435863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2558.441375] ? unlock_page+0x2c2/0x4c0 [ 2558.445238] ? wake_up_page_bit+0x6f0/0x6f0 [ 2558.449546] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.455059] ? init_page_buffers+0x433/0x570 [ 2558.459447] ? mark_buffer_dirty+0x8e0/0x8e0 [ 2558.463835] ? __getblk_gfp+0x905/0xd50 [ 2558.467792] __getblk_gfp+0x2b3/0xd50 [ 2558.471580] ? __find_get_block+0xf20/0xf20 [ 2558.475886] ? check_preemption_disabled+0x48/0x280 [ 2558.480884] ? __d_alloc+0xc8/0xb90 [ 2558.484491] ? graph_lock+0x270/0x270 [ 2558.488269] ? graph_lock+0x270/0x270 [ 2558.492059] __bread_gfp+0x2d/0x300 [ 2558.495664] fat__get_entry+0x5a6/0xa40 [ 2558.499619] ? arch_local_save_flags+0x40/0x40 [ 2558.504177] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.509689] ? __d_lookup_rcu+0x556/0xaa0 [ 2558.513820] ? copy_overflow+0x30/0x30 [ 2558.517685] ? __mutex_lock+0x85e/0x1700 [ 2558.521724] ? vfat_lookup+0xf1/0x640 [ 2558.525517] ? d_alloc_parallel+0x8e8/0x1f40 [ 2558.529913] fat_search_long+0x33b/0x1570 [ 2558.534053] ? kasan_check_read+0x11/0x20 [ 2558.538178] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2558.543459] ? rcu_read_unlock_special+0x370/0x370 [ 2558.548367] ? smk_access+0x53b/0x700 [ 2558.552148] ? fat_parse_short+0x2cc0/0x2cc0 [ 2558.556541] ? check_preemption_disabled+0x48/0x280 [ 2558.561543] ? smk_tskacc+0x3dd/0x520 [ 2558.565457] ? __d_lookup_rcu+0xaa0/0xaa0 [ 2558.569591] ? __d_lookup+0x5b8/0x9e0 [ 2558.573382] vfat_find+0x16d/0x1a0 [ 2558.576901] vfat_lookup+0x107/0x640 [ 2558.580683] ? vfat_find_form+0x120/0x120 [ 2558.584813] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2558.589824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.595339] ? security_inode_permission+0xd2/0x100 [ 2558.600335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.605847] ? security_inode_create+0xe8/0x120 [ 2558.610492] ? vfat_find_form+0x120/0x120 [ 2558.614619] lookup_open+0x72e/0x1b90 [ 2558.618402] ? vfs_link+0xb70/0xb70 [ 2558.622024] path_openat+0x15e4/0x5160 [ 2558.625890] ? rcu_read_unlock_special+0x370/0x370 [ 2558.630798] ? rcu_softirq_qs+0x20/0x20 [ 2558.634748] ? unwind_dump+0x190/0x190 [ 2558.638637] ? path_lookupat.isra.43+0xc00/0xc00 [ 2558.643368] ? unwind_get_return_address+0x61/0xa0 [ 2558.648272] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2558.653268] ? expand_files.part.8+0x571/0x9a0 [ 2558.657845] ? find_held_lock+0x36/0x1c0 [ 2558.661890] ? __alloc_fd+0x347/0x6e0 [ 2558.665669] ? lock_downgrade+0x900/0x900 [ 2558.669797] ? getname+0x19/0x20 [ 2558.673158] ? kasan_check_read+0x11/0x20 [ 2558.677294] ? do_raw_spin_unlock+0xa7/0x330 [ 2558.681683] ? do_raw_spin_trylock+0x270/0x270 [ 2558.686243] ? __lock_is_held+0xb5/0x140 [ 2558.690287] ? __check_object_size+0xb1/0x782 [ 2558.694765] ? _raw_spin_unlock+0x2c/0x50 [ 2558.698892] ? __alloc_fd+0x347/0x6e0 [ 2558.702679] do_filp_open+0x255/0x380 [ 2558.706458] ? may_open_dev+0x100/0x100 [ 2558.710524] ? strncpy_from_user+0x3be/0x510 [ 2558.714916] ? digsig_verify+0x1530/0x1530 [ 2558.719130] ? get_unused_fd_flags+0x122/0x1a0 [ 2558.723691] ? getname_flags+0x26e/0x590 [ 2558.727731] ? put_timespec64+0x10f/0x1b0 [ 2558.731865] do_sys_open+0x568/0x780 [ 2558.735559] ? filp_open+0x80/0x80 [ 2558.739095] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2558.744437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.749955] __x64_sys_creat+0x61/0x80 [ 2558.753820] do_syscall_64+0x1b9/0x820 [ 2558.758220] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2558.763566] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2558.768485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2558.773305] ? trace_hardirqs_on_caller+0x310/0x310 [ 2558.778299] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2558.783295] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2558.788390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2558.793219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2558.798382] RIP: 0033:0x457ec9 [ 2558.801551] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2558.820428] RSP: 002b:00007ff4fefb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 2558.828112] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457ec9 [ 2558.835371] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000180 [ 2558.842631] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2558.849889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4fefb86d4 [ 2558.857134] R13: 00000000004be411 R14: 00000000004ce608 R15: 00000000ffffffff [ 2558.864805] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.869854] protocol 88fb is buggy, dev hsr_slave_1 [ 2558.875016] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.880044] protocol 88fb is buggy, dev hsr_slave_1 [ 2560.951744] protocol 88fb is buggy, dev hsr_slave_0 [ 2560.956842] protocol 88fb is buggy, dev hsr_slave_1 [ 2560.961988] protocol 88fb is buggy, dev hsr_slave_0 [ 2560.967036] protocol 88fb is buggy, dev hsr_slave_1 [ 2563.031709] protocol 88fb is buggy, dev hsr_slave_0 [ 2563.036784] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.111745] net_ratelimit: 2 callbacks suppressed [ 2565.111753] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.121693] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.126801] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.131875] protocol 88fb is buggy, dev hsr_slave_1 [ 2567.191732] protocol 88fb is buggy, dev hsr_slave_0 [ 2567.196832] protocol 88fb is buggy, dev hsr_slave_1 [ 2567.201977] protocol 88fb is buggy, dev hsr_slave_0 [ 2567.210858] protocol 88fb is buggy, dev hsr_slave_1