[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.262626] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.975631] random: sshd: uninitialized urandom read (32 bytes read) [ 18.159674] random: sshd: uninitialized urandom read (32 bytes read) [ 19.155659] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. [ 24.632318] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/19 00:45:15 fuzzer started [ 26.246449] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/19 00:45:18 dialing manager at 10.128.0.26:37281 2018/07/19 00:45:23 syscalls: 1197 2018/07/19 00:45:23 code coverage: enabled 2018/07/19 00:45:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/19 00:45:23 setuid sandbox: enabled 2018/07/19 00:45:23 namespace sandbox: enabled 2018/07/19 00:45:23 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/07/19 00:45:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/19 00:45:23 net packed injection: enabled 2018/07/19 00:45:23 net device setup: enabled [ 33.267667] random: crng init done 00:46:29 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000022b000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000636000/0x1000)=nil) 00:46:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00005f7ffa), 0x80000, &(0x7f0000000280)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f00000e7000)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) 00:46:29 executing program 7: r0 = getpid() clone(0x200, &(0x7f0000000100), &(0x7f0000744000), &(0x7f0000000200), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') preadv(r1, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002800)=""/4096, 0x1000}], 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:46:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "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"}, 0x4a6) 00:46:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x61) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r1, 0x5452, &(0x7f00000000c0)={0xfff}) dup3(r2, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 00:46:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0x5f5e0ff, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) 00:46:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) 00:46:29 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000002c0)=""/94, 0x5e, 0x0) [ 98.457125] IPVS: Creating netns size=2536 id=1 [ 98.529153] IPVS: Creating netns size=2536 id=2 [ 98.592342] IPVS: Creating netns size=2536 id=3 [ 98.638973] IPVS: Creating netns size=2536 id=4 [ 98.704554] IPVS: Creating netns size=2536 id=5 [ 98.756474] IPVS: Creating netns size=2536 id=6 [ 98.821018] IPVS: Creating netns size=2536 id=7 [ 98.891235] IPVS: Creating netns size=2536 id=8 [ 99.391559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.437610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.579444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.588763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.609558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.630264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.647523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.659525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.768124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.785980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.805561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 99.821257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 99.835735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.851027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.863923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 99.890449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 99.952126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 99.970712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 100.016887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.039622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 100.053839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.073032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 100.096457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.142491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 100.175556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 100.194779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.211797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.227349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 100.293203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.304288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.324039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.336005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 100.354458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.366158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.382610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.394793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.408187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.415208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.424430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.444871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.458817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.466479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.478362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.485919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.504564] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.517956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 100.529732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.537260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.547511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.556723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.569833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.582747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.592409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.602681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.610381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.618799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.626341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 100.634594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.645141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.654121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.667253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.678106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.690430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.697894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.705503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.713103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.729828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.739368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.746456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.759556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.767085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.789674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.809177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.846130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.855287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.862997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.871507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.883986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.897147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.908081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.915688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.923550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.934598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.945568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.962021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.974293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.991349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.999075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.011691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 101.072916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 101.143485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 101.156157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.169780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.189607] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 101.197512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.218660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.573485] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.663284] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.713174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.776926] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 104.794329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.802878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.815866] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.829017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.865053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.880449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 104.887310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.898516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.912508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.919501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 104.929233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.935980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.044671] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.056378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.063907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.075266] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.082838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.094534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.105878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.123264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.135633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.143650] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.156219] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 105.168164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.175154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.357218] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.378814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.385617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 00:46:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000580)={'erspan0\x00', 0x40000000000200}) 00:46:37 executing program 6: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000140)="1f00000056000d6dfcffff05bc0203030701ff2104173f8100000002030039", 0x1f) 00:46:37 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) listen(r0, 0x0) 00:46:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) close(r1) 00:46:37 executing program 1: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, &(0x7f0000664fc0)) mq_timedreceive(r0, &(0x7f0000000080)=""/40, 0x28, 0x0, &(0x7f0000000200)) 00:46:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 00:46:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x0, @empty, 0x0, 0x0, 'lblc\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 00:46:38 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000022b000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000636000/0x1000)=nil) 00:46:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000beb000)=@abs, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r1) 00:46:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SG_GET_NUM_WAITING(r0, 0x2283, &(0x7f00000001c0)) 00:46:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x200, 0x12) 00:46:38 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge_slave_0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="03c4deacaeac40b8fd487a71ea3b484f9732", 0x12, 0x800000000008000, &(0x7f00000001c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200)="0900d13a8e045acfa7bd", 0xa, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 00:46:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:38 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:38 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00000003c0)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) dup3(r1, r0, 0x0) 00:46:38 executing program 6: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002bc0)={'bridge0\x00', &(0x7f0000002c00)=@ethtool_cmd={0x12, 0x0, 0xa07000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) 00:46:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)}, 0x0) 00:46:38 executing program 2: 00:46:38 executing program 2: 00:46:38 executing program 2: 00:46:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x1) flock(r0, 0x2) r2 = dup2(r1, r0) flock(r2, 0xffffffffffeffffd) 00:46:38 executing program 7: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0xbb09, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000040)) 00:46:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 107.570796] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16563 [ 107.657027] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 00:46:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0x1f8) 00:46:39 executing program 0: 00:46:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 00:46:39 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:39 executing program 6: 00:46:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:39 executing program 2: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@broadcast}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/4096}, {&(0x7f0000000140)=""/225}, {&(0x7f0000000280)=""/111}, {&(0x7f0000000300)=""/207}, {&(0x7f0000000400)=""/41}], 0x10000000000001b3, 0x0) 00:46:39 executing program 6: 00:46:39 executing program 0: 00:46:39 executing program 2: 00:46:39 executing program 5: 00:46:39 executing program 6: 00:46:39 executing program 2: [ 108.433112] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16544 00:46:39 executing program 4: 00:46:39 executing program 5: 00:46:39 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:39 executing program 6: 00:46:39 executing program 0: 00:46:39 executing program 2: 00:46:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:39 executing program 7: 00:46:39 executing program 6: 00:46:39 executing program 0: 00:46:39 executing program 2: 00:46:39 executing program 7: 00:46:39 executing program 4: 00:46:39 executing program 6: 00:46:39 executing program 2: 00:46:39 executing program 4: 00:46:39 executing program 0: [ 108.632540] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16551 00:46:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 00:46:39 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:39 executing program 6: 00:46:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="8b2adf", 0x3}], 0x1, 0xa) 00:46:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x200000202) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:46:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xeffdffff00011000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x9, &(0x7f0000000080)=[{&(0x7f0000000480)=""/170, 0x2000078d}], 0x1, &(0x7f00000005c0)=""/112, 0x70}, 0x100000000000002) 00:46:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:39 executing program 6: 00:46:39 executing program 2: [ 108.762032] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 00:46:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) clone(0x0, &(0x7f0000000480), &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x1e8) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000140)) 00:46:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000640)) sysfs$2(0x2, 0x0, &(0x7f0000000240)=""/19) 00:46:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 00:46:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 00:46:40 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x2) [ 108.762222] binder: 7046:7055 transaction failed 29189/-22, size 0-0 line 3013 [ 108.794037] binder: undelivered TRANSACTION_ERROR: 29189 00:46:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x9, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) [ 108.815864] PF_BRIDGE: RTM_DELNEIGH with invalid ifindex [ 108.866999] PF_BRIDGE: RTM_DELNEIGH with invalid ifindex 00:46:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:40 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000013000/0x2000)=nil, 0x2000}) clone(0x0, &(0x7f00000001c0), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 00:46:40 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa55, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, 0x7573, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x8020000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) [ 108.916184] PF_BRIDGE: RTM_DELNEIGH with invalid ifindex [ 108.957812] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16557 00:46:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x7, &(0x7f0000000080)="2e3d1e20521344"}) 00:46:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="91266367726f7570656d31626465766574683176626f786e657431262e40253a00", 0xfffffffffffffffe) 00:46:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:40 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:40 executing program 7: mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x3, 0x0, &(0x7f0000664fc0)) 00:46:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x40000000000002, 0x0, "a77760f50381de6fdb1e69cd752dda0c63c2a66702000000000000007ba44947a79015f0fe57917c987a938fdedfce7bbba4fec2d8a09c41fba33245f2604b01040000000000003800"}, 0xfeeb) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 00:46:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000003, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0xbb09, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000040)) 00:46:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1268, 0x709000) 00:46:40 executing program 7: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)) 00:46:40 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x2) [ 109.667210] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 00:46:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:40 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08060006080006040001ffffffffffff03000000aaaaaaaaaa00ac1414aa96b15d02987798742669b9dcedad2f685280957cda5962d4933d29335faedacd9634398b3f9293783cd4d94997d3a0525a289cef9f934309073a3d31bed92f0fc41aefa5cec3b449c2e3991d6ef94cfda9d5f68c9beb8e67ddf37d6129d55e1e1f0897b843a64d11903edc7a216303ce1eae84c2904cb1d9db7a4454ad7490cce44703477ecad2bd98cf1c73c01494e6606fb36431118fe3ab6d61e023fbdf88395df8d4506f9323cadaadf71c6f220b1858cfb2980ecbe3dc73def0e1b058f1cb15262ea6409f65fa61858ceb513868224586e374c7f38fc756633520259000e14f73bd0ff267a5377281bc8aac7465cc3f7dd001"], &(0x7f0000000080)) [ 109.668283] PF_BRIDGE: RTM_DELNEIGH with invalid ifindex [ 109.769452] FAULT_FLAG_ALLOW_RETRY missing 30 [ 109.774125] CPU: 0 PID: 7106 Comm: syz-executor6 Not tainted 4.9.113-g47bbcd6 #10 [ 109.781780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.791222] ffff8801a06c7610 ffffffff81eb32a9 0000000000000002 0000000000000000 [ 109.799283] ffff8801bb950000 ffff8801a06c77e0 0000000000000000 ffff8801a06c7808 [ 109.807294] ffffffff81cb9adb 0000000000000adf ffff8801bcd9a130 ffff8801bb95010c [ 109.815316] Call Trace: [ 109.817884] [] dump_stack+0xc1/0x128 [ 109.823242] [] handle_userfault.cold.18+0x3e/0x51 [ 109.829713] [] ? debug_check_no_locks_freed+0x210/0x210 [ 109.836718] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 109.843101] [] ? handle_mm_fault+0x1267/0x28e0 [ 109.849320] [] ? handle_mm_fault+0x220f/0x28e0 [ 109.855528] [] handle_mm_fault+0x221d/0x28e0 [ 109.861563] [] ? vm_insert_mixed+0x200/0x200 [ 109.867599] [] ? __lock_is_held+0xa2/0xf0 [ 109.873374] [] __do_page_fault+0x5af/0xd50 [ 109.879237] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 109.885793] [] ? mm_fault_error+0x2c0/0x2c0 [ 109.891752] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 109.898394] [] do_page_fault+0x27/0x30 [ 109.903924] [] page_fault+0x28/0x30 [ 109.909192] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 109.916028] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 109.922499] [] ? str_to_user+0xa0/0xa0 [ 109.928012] [] ? __lock_acquire+0x654/0x4070 [ 109.934081] [] ? exit_robust_list+0x220/0x220 [ 109.940214] [] evdev_ioctl+0x27/0x30 [ 109.945557] [] ? evdev_ioctl_compat+0x30/0x30 [ 109.951681] [] do_vfs_ioctl+0x1ac/0x11a0 [ 109.957455] [] ? ioctl_preallocate+0x220/0x220 [ 109.963669] [] ? selinux_capable+0x40/0x40 [ 109.969531] [] ? __fget+0x20a/0x3b0 [ 109.974785] [] ? __fget+0x231/0x3b0 [ 109.980081] [] ? __fget+0x47/0x3b0 [ 109.985248] [] ? security_file_ioctl+0x8f/0xc0 [ 109.991458] [] SyS_ioctl+0x8f/0xc0 [ 109.996623] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 110.002573] [] do_syscall_64+0x1a6/0x490 [ 110.008284] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 00:46:41 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 00:46:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000140)}, 0x0) 00:46:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="89b9564f7f0ee027430d"], 0xa) 00:46:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000013000)) 00:46:41 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000080)=""/40, 0x28, 0x0, &(0x7f0000000200)) 00:46:41 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:41 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xa879, &(0x7f0000000380)="028dc80000000000762070") socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x27}) 00:46:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7}}, 0x1c}, 0x1}, 0x0) 00:46:41 executing program 7: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/40, 0xfffffffffffffcdc, 0x0, &(0x7f0000b6bff0)={0x0, 0x1c9c380}) 00:46:41 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:41 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}}, 0x14}, 0x1}, 0x0) 00:46:41 executing program 0: 00:46:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:41 executing program 4: 00:46:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1}, 0x1c}, 0x1}, 0x0) 00:46:41 executing program 2: 00:46:41 executing program 0: 00:46:41 executing program 4: 00:46:41 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x20002000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000001ec0)=@rc, 0x80, &(0x7f0000003040)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000003080)=""/180, 0xb4}}], 0x1, 0x0, &(0x7f0000005040)) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 00:46:41 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1}, 0x1c}, 0x1}, 0x0) 00:46:42 executing program 7: 00:46:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 00:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:42 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x4) 00:46:42 executing program 2: 00:46:42 executing program 2: 00:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x1}, 0x1c}, 0x1}, 0x0) 00:46:42 executing program 0: 00:46:42 executing program 7: 00:46:42 executing program 4: 00:46:42 executing program 0: 00:46:42 executing program 2: 00:46:42 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:42 executing program 4: 00:46:42 executing program 7: 00:46:42 executing program 2: 00:46:42 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:42 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl(r0, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 0: 00:46:42 executing program 5: 00:46:42 executing program 7: 00:46:42 executing program 4: 00:46:42 executing program 0: 00:46:42 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:42 executing program 5: 00:46:42 executing program 2: 00:46:42 executing program 4: 00:46:42 executing program 7: 00:46:42 executing program 0: 00:46:42 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:42 executing program 7: 00:46:42 executing program 5: 00:46:42 executing program 2: [ 111.467634] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16535 00:46:42 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl(r0, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 0: 00:46:42 executing program 4: 00:46:42 executing program 7: 00:46:42 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:42 executing program 5: 00:46:42 executing program 2: 00:46:42 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:42 executing program 4: 00:46:42 executing program 0: 00:46:42 executing program 7: 00:46:42 executing program 5: 00:46:42 executing program 2: 00:46:42 executing program 4: 00:46:42 executing program 0: 00:46:42 executing program 6: r0 = socket(0x0, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) [ 111.615106] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16527 00:46:42 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl(r0, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000), 0x4) 00:46:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) read(r0, &(0x7f0000000480)=""/184, 0xb8) write(r0, &(0x7f0000000100)="8d", 0x1) 00:46:42 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:42 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:42 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl(r0, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 111.727852] [ 111.729537] ====================================================== [ 111.734850] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 [ 111.738747] devpts: called with bogus options [ 111.744518] devpts: called with bogus options [ 111.754444] [ INFO: possible circular locking dependency detected ] [ 111.760531] binder: 7371:7375 transaction failed 29201/-28, size 0-0 line 3136 [ 111.760748] binder: BINDER_SET_CONTEXT_MGR already set 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 111.760756] binder: 7371:7383 ioctl 40046207 0 returned -16 [ 111.761954] binder_alloc: 7371: binder_alloc_buf, no vma [ 111.761967] binder: 7371:7383 transaction failed 29189/-3, size 0-0 line 3136 [ 111.763177] binder: undelivered TRANSACTION_ERROR: 29189 [ 111.763213] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.774711] binder: 7385:7386 transaction failed 29201/-28, size 0-0 line 3136 [ 111.774908] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.784693] binder: 7387:7388 transaction failed 29201/-28, size 0-0 line 3136 [ 111.784887] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.794647] binder: 7389:7390 transaction failed 29201/-28, size 0-0 line 3136 [ 111.794835] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.803777] binder_alloc: 7391: binder_alloc_buf, no vma [ 111.803790] binder: 7391:7392 transaction failed 29189/-3, size 0-0 line 3136 [ 111.803941] binder: undelivered TRANSACTION_ERROR: 29189 [ 111.812056] binder: 7393:7394 transaction failed 29189/-22, size 0-0 line 3013 [ 111.812196] binder: undelivered TRANSACTION_ERROR: 29189 [ 111.820675] binder: 7395:7396 transaction failed 29189/-22, size 0-0 line 3013 [ 111.820815] binder: undelivered TRANSACTION_ERROR: 29189 [ 111.828439] binder: 7397:7398 transaction failed 29189/-22, size 0-0 line 3013 [ 111.828577] binder: undelivered TRANSACTION_ERROR: 29189 [ 111.897581] 4.9.113-g47bbcd6 #10 Not tainted [ 111.901963] ------------------------------------------------------- [ 111.908339] syz-executor0/7373 is trying to acquire lock: [ 111.913847] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 111.921648] but task is already holding lock: [ 111.926296] (sk_lock-AF_INET){+.+.+.}, at: [] do_ip_setsockopt.isra.13+0x269/0x2b10 [ 111.936091] which lock already depends on the new lock. [ 111.936091] [ 111.943091] [ 111.943091] the existing dependency chain (in reverse order) is: [ 111.950683] -> #1 (sk_lock-AF_INET){+.+.+.}: [ 111.955731] lock_acquire+0x130/0x3e0 [ 111.960028] lock_sock_nested+0xc6/0x120 [ 111.964590] do_ip_setsockopt.isra.13+0x12a/0x2b10 [ 111.970016] ip_setsockopt+0x3a/0xb0 [ 111.974228] tcp_setsockopt+0x88/0xe0 [ 111.978565] sock_common_setsockopt+0x9a/0xe0 [ 111.983578] SyS_setsockopt+0x166/0x260 [ 111.988049] do_syscall_64+0x1a6/0x490 [ 111.992430] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 111.998023] -> #0 (rtnl_mutex){+.+.+.}: [ 112.002636] __lock_acquire+0x3019/0x4070 [ 112.007284] lock_acquire+0x130/0x3e0 [ 112.011581] mutex_lock_nested+0xc0/0x870 [ 112.016224] rtnl_lock+0x17/0x20 [ 112.020086] mrtsock_destruct+0x3b/0x1e0 [ 112.024642] ip_ra_control+0x2c2/0x420 [ 112.029036] do_ip_setsockopt.isra.13+0x15ff/0x2b10 [ 112.034557] ip_setsockopt+0x3a/0xb0 [ 112.038765] raw_setsockopt+0xb7/0xd0 [ 112.043059] sock_common_setsockopt+0x9a/0xe0 [ 112.048053] SyS_setsockopt+0x166/0x260 [ 112.052527] do_syscall_64+0x1a6/0x490 [ 112.056914] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 112.062536] [ 112.062536] other info that might help us debug this: [ 112.062536] [ 112.070750] Possible unsafe locking scenario: [ 112.070750] [ 112.076781] CPU0 CPU1 [ 112.081423] ---- ---- [ 112.086067] lock(sk_lock-AF_INET); [ 112.089999] lock(rtnl_mutex); [ 112.096113] lock(sk_lock-AF_INET); [ 112.102562] lock(rtnl_mutex); [ 112.106074] [ 112.106074] *** DEADLOCK *** [ 112.106074] [ 112.112107] 1 lock held by syz-executor0/7373: [ 112.116660] #0: (sk_lock-AF_INET){+.+.+.}, at: [] do_ip_setsockopt.isra.13+0x269/0x2b10 [ 112.127003] [ 112.127003] stack backtrace: [ 112.131476] CPU: 1 PID: 7373 Comm: syz-executor0 Not tainted 4.9.113-g47bbcd6 #10 [ 112.139069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.148401] ffff88019ebdf5f8 ffffffff81eb32a9 ffffffff8559d0a0 ffffffff855e7d10 [ 112.156432] ffffffff8559d0a0 ffff88019f2b68e8 ffff88019f2b6000 ffff88019ebdf640 [ 112.164438] ffffffff81426404 0000000000000001 000000009f2b6000 0000000000000001 [ 112.172451] Call Trace: [ 112.175017] [] dump_stack+0xc1/0x128 [ 112.180377] [] print_circular_bug.cold.51+0x1bd/0x27d [ 112.187196] [] __lock_acquire+0x3019/0x4070 [ 112.193145] [] ? debug_check_no_locks_freed+0x210/0x210 [ 112.200143] [] ? add_lock_to_list.isra.27.constprop.41+0x140/0x1c0 [ 112.208101] [] ? __lock_is_held+0xa2/0xf0 [ 112.213874] [] lock_acquire+0x130/0x3e0 [ 112.219481] [] ? rtnl_lock+0x17/0x20 [ 112.224819] [] ? rtnl_lock+0x17/0x20 [ 112.230162] [] mutex_lock_nested+0xc0/0x870 [ 112.236110] [] ? rtnl_lock+0x17/0x20 [ 112.241450] [] ? mutex_trylock+0x3e0/0x3e0 [ 112.247312] [] ? mark_held_locks+0xc7/0x130 [ 112.253285] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 112.259584] [] rtnl_lock+0x17/0x20 [ 112.264770] [] mrtsock_destruct+0x3b/0x1e0 [ 112.270631] [] ? mroute_clean_tables+0x500/0x500 [ 112.277014] [] ip_ra_control+0x2c2/0x420 [ 112.282704] [] do_ip_setsockopt.isra.13+0x15ff/0x2b10 [ 112.289568] [] ? ip_ra_control+0x420/0x420 [ 112.295456] [] ? drop_futex_key_refs.isra.12+0x56/0xd0 [ 112.302395] [] ? futex_wake+0x146/0x450 [ 112.308014] [] ? do_syscall_64+0x1a6/0x490 [ 112.313895] [] ? debug_check_no_locks_freed+0x210/0x210 [ 112.320905] [] ? debug_check_no_locks_freed+0x210/0x210 [ 112.327901] [] ? debug_check_no_locks_freed+0x210/0x210 [ 112.334903] [] ? check_preemption_disabled+0x3b/0x170 [ 112.341743] [] ? sock_has_perm+0x1c2/0x3e0 [ 112.347619] [] ? sock_has_perm+0x292/0x3e0 [ 112.353502] [] ? sock_has_perm+0x9f/0x3e0 [ 112.359277] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 112.366393] [] ? __fget+0x20a/0x3b0 [ 112.371671] [] ? selinux_netlbl_socket_setsockopt+0x8c/0x340 [ 112.379110] [] ? selinux_netlbl_sock_rcv_skb+0x480/0x480 [ 112.386207] [] ip_setsockopt+0x3a/0xb0 [ 112.391745] [] raw_setsockopt+0xb7/0xd0 [ 112.397354] [] sock_common_setsockopt+0x9a/0xe0 [ 112.403671] [] SyS_setsockopt+0x166/0x260 [ 112.409457] [] ? SyS_recv+0x40/0x40 [ 112.414718] [] ? move_addr_to_kernel+0x50/0x50 [ 112.420944] [] ? do_syscall_64+0x48/0x490 00:46:43 executing program 6: r0 = socket(0x0, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) [ 112.426740] [] ? SyS_recv+0x40/0x40 [ 112.431997] [] do_syscall_64+0x1a6/0x490 [ 112.437700] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 00:46:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000), 0x4) [ 112.480247] binder: 7405:7412 transaction failed 29189/-22, size 0-0 line 3013 [ 112.488595] binder: undelivered TRANSACTION_ERROR: 29189 INIT: Id "2" respawning too fast: disabled for 5 minutes 00:46:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:43 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:43 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl(r0, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:43 executing program 6: r0 = socket(0x0, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:43 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 00:46:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:43 executing program 6: r0 = socket(0xa, 0x0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:43 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:43 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 112.691565] EXT4-fs warning: 1 callbacks suppressed [ 112.691575] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16544 [ 112.704569] binder: 7433:7437 transaction failed 29189/-22, size 0-0 line 3013 00:46:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:43 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:43 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) [ 112.704700] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.704974] devpts: called with bogus options [ 112.734936] devpts: called with bogus options [ 112.738664] binder: 7446:7448 transaction failed 29189/-22, size 0-0 line 3013 [ 112.738774] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.765611] devpts: called with bogus options [ 112.766237] devpts: called with bogus options [ 112.799596] devpts: called with bogus options 00:46:44 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) ioctl(r0, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:44 executing program 6: r0 = socket(0xa, 0x0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:44 executing program 1: mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:44 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) [ 112.800046] devpts: called with bogus options [ 112.801137] binder: 7465:7469 transaction failed 29189/-22, size 0-0 line 3013 [ 112.801257] binder: undelivered TRANSACTION_ERROR: 29189 INIT: Id "5" respawning too fast: disabled for 5 minutes [ 112.890426] binder: 7488:7491 transaction failed 29189/-22, size 0-0 line 3013 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 4: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:44 executing program 6: r0 = socket(0xa, 0x0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 112.898382] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 [ 112.898424] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.929637] devpts: called with bogus options 00:46:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) [ 112.929856] devpts: called with bogus options 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 4: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xb8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 112.935450] binder: 7497:7500 transaction failed 29189/-22, size 0-0 line 3013 [ 112.935577] binder: undelivered TRANSACTION_ERROR: 29189 [ 113.007883] devpts: called with bogus options 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 00:46:44 executing program 4: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) [ 113.041205] binder: 7536:7544 unknown command 536870976 [ 113.059514] binder: 7536:7544 ioctl c0306201 20000180 returned -22 00:46:44 executing program 7: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, &(0x7f0000000040)) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:44 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) [ 113.070423] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16538 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce74008"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 7: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, &(0x7f0000000040)) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 113.109568] devpts: called with bogus options 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xb8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 7: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, &(0x7f0000000040)) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce74008400000"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) [ 113.147353] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16551 [ 113.174851] devpts: called with bogus options 00:46:44 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce7400840000000"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xd2, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000001100", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) [ 113.215237] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16547 [ 113.223833] binder: 7602:7611 transaction failed 29201/-28, size 0-0 line 3136 00:46:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 113.223977] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.226686] binder: BINDER_SET_CONTEXT_MGR already set [ 113.226695] binder: 7599:7608 ioctl 40046207 0 returned -16 [ 113.227431] binder: 7599:7608 transaction failed 29201/-28, size 0-0 line 3136 [ 113.227571] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.227885] devpts: called with bogus options [ 113.254030] binder: 7600:7610 unknown command 536870976 [ 113.254038] binder: 7600:7610 ioctl c0306201 20000180 returned -22 [ 113.270568] binder: 7614:7623 transaction failed 29201/-28, size 0-0 line 3136 [ 113.270723] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.272226] binder: BINDER_SET_CONTEXT_MGR already set [ 113.272233] binder: 7618:7624 ioctl 40046207 0 returned -16 [ 113.273964] binder: 7618:7624 transaction failed 29201/-28, size 0-0 line 3136 [ 113.274123] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.275018] binder: BINDER_SET_CONTEXT_MGR already set [ 113.275026] binder: 7617:7625 ioctl 40046207 0 returned -16 [ 113.277207] binder: 7617:7625 transaction failed 29201/-28, size 0-0 line 3136 [ 113.277380] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.292117] binder_alloc: 7626: binder_alloc_buf, no vma 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xb8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010a000000000000000007000000", @ANYBLOB="000000000000d70783002e0000400000"], 0x2}, 0x1}, 0x0) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x0, &(0x7f0000000000)) ioctl(r0, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc5, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 113.292131] binder: 7626:7630 transaction failed 29189/-3, size 7138486884358946816-16456 line 3136 [ 113.292213] binder: undelivered TRANSACTION_ERROR: 29189 [ 113.321781] binder: 7635:7641 transaction failed 29201/-28, size 0-0 line 3136 [ 113.321921] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.481554] binder: 7646:7651 transaction failed 29201/-28, size 0-0 line 3136 00:46:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000d70783002e0000400000"], 0x1}, 0x1}, 0x0) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 113.490435] binder: BINDER_SET_CONTEXT_MGR already set [ 113.490443] binder: 7649:7659 ioctl 40046207 0 returned -16 [ 113.490506] binder: 7649:7659 unknown command 536870976 [ 113.490512] binder: 7649:7659 ioctl c0306201 20000180 returned -22 [ 113.494091] binder: BINDER_SET_CONTEXT_MGR already set [ 113.494099] binder: 7647:7660 ioctl 40046207 0 returned -16 [ 113.494809] binder: 7647:7660 transaction failed 29201/-28, size 0-0 line 3136 [ 113.494956] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.506661] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16563 [ 113.520335] binder: BINDER_SET_CONTEXT_MGR already set [ 113.520344] binder: 7653:7667 ioctl 40046207 0 returned -16 [ 113.534134] binder: BINDER_SET_CONTEXT_MGR already set [ 113.534142] binder: 7674:7677 ioctl 40046207 0 returned -16 [ 113.535859] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16529 [ 113.537578] binder: BINDER_SET_CONTEXT_MGR already set [ 113.537587] binder: 7670:7675 ioctl 40046207 0 returned -16 [ 113.537685] binder: 7670:7675 unknown command 0 [ 113.537692] binder: 7670:7675 ioctl c0306201 20000180 returned -22 [ 113.537833] binder: release 7670:7675 transaction 40 out, still active [ 113.537835] binder: undelivered TRANSACTION_COMPLETE [ 113.598025] binder: BINDER_SET_CONTEXT_MGR already set [ 113.598032] binder: 7689:7696 ioctl 40046207 0 returned -16 [ 113.598108] binder: 7689:7696 transaction failed 29201/-28, size 0-0 line 3136 00:46:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[]}, 0x1}, 0x0) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xcc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:44 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) [ 113.598255] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.601165] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16519 [ 113.755773] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.763168] binder: send failed reply for transaction 40, target dead 00:46:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) [ 113.781716] binder: 7710:7712 transaction failed 29189/-22, size 0-0 line 3013 00:46:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) 00:46:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xcc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:44 executing program 7: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) 00:46:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x0, &(0x7f0000000000)) 00:46:44 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 113.789693] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16526 [ 113.809998] binder_alloc: 7703: binder_alloc_buf, no vma 00:46:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x0, r0, 0x0) 00:46:45 executing program 7: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) [ 113.810014] binder: 7703:7717 transaction failed 29189/-3, size 1078485777-0 line 3136 [ 113.810109] binder: undelivered TRANSACTION_ERROR: 29189 [ 113.815554] binder: 7715:7724 transaction failed 29201/-28, size 0-0 line 3136 [ 113.815695] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.818302] EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16540 [ 113.882464] binder: BINDER_SET_CONTEXT_MGR already set [ 113.882471] binder: 7735:7745 ioctl 40046207 0 returned -16 [ 113.882524] binder_alloc: 7737: binder_alloc_buf, no vma 00:46:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 00:46:45 executing program 7: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 00:46:45 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 5: syz_emit_ethernet(0x151, &(0x7f0000000000)={@random="4300b5f88082", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xf5ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 00:46:45 executing program 7: syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 113.882537] binder: 7735:7745 transaction failed 29189/-3, size 1078485777-0 line 3136 [ 113.882620] binder: undelivered TRANSACTION_ERROR: 29189 [ 113.990292] binder: undelivered TRANSACTION_ERROR: 29189 00:46:45 executing program 5: syz_emit_ethernet(0x151, &(0x7f0000000000)={@random="4300b5f88082", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xf5ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 7: syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 00:46:45 executing program 5: syz_emit_ethernet(0x151, &(0x7f0000000000)={@random="4300b5f88082", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xf5ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 114.032222] binder_alloc: 7769: binder_alloc_buf, no vma [ 114.035378] binder: BINDER_SET_CONTEXT_MGR already set 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 114.035385] binder: 7783:7789 ioctl 40046207 0 returned -16 [ 114.113645] binder_alloc: 7769: binder_alloc_buf, no vma [ 114.124315] binder: 7802:7805 transaction failed 29189/-3, size 0-0 line 3136 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 7: syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 5: syz_emit_ethernet(0x151, &(0x7f0000000000)={@random="4300b5f88082", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xf5ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 00:46:45 executing program 5: syz_emit_ethernet(0x151, &(0x7f0000000000)={@random="4300b5f88082", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xf5ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xba, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.131785] binder: 7769:7786 transaction failed 29189/-3, size 0-0 line 3136 [ 114.133628] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.161223] binder_alloc: 7821: binder_alloc_buf, no vma 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.161238] binder: 7821:7824 transaction failed 29189/-3, size 0-0 line 3136 [ 114.161423] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.216949] binder: 7840:7848 unknown command 4219665 00:46:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 5: syz_emit_ethernet(0x151, &(0x7f0000000000)={@random="4300b5f88082", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xf5ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000400)='./file0\x00', 0x0) 00:46:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") [ 114.216956] binder: 7840:7848 ioctl c0306201 20000180 returned -22 [ 114.226532] binder_alloc: 7846: binder_alloc_buf, no vma [ 114.226546] binder: 7846:7850 transaction failed 29189/-3, size 0-0 line 3136 [ 114.232012] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.270467] binder: undelivered TRANSACTION_ERROR: 29189 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) [ 114.307774] binder_alloc: 7867: binder_alloc_buf, no vma [ 114.312127] binder: BINDER_SET_CONTEXT_MGR already set [ 114.312134] binder: 7859:7874 ioctl 40046207 0 returned -16 [ 114.312170] binder: 7859:7874 got transaction to invalid handle 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.312177] binder: 7859:7874 transaction failed 29201/-22, size 0-0 line 3013 [ 114.312256] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.313944] binder: BINDER_SET_CONTEXT_MGR already set [ 114.313952] binder: 7870:7872 ioctl 40046207 0 returned -16 [ 114.353452] binder: BINDER_SET_CONTEXT_MGR already set [ 114.353459] binder: 7885:7889 ioctl 40046207 0 returned -16 [ 114.353498] binder: 7885:7889 got transaction to invalid handle [ 114.353505] binder: 7885:7889 transaction failed 29201/-22, size 0-0 line 3013 [ 114.353586] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.376861] binder: BINDER_SET_CONTEXT_MGR already set [ 114.376868] binder: 7893:7896 ioctl 40046207 0 returned -16 [ 114.376906] binder: 7893:7896 got transaction to invalid handle 00:46:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbf, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) [ 114.376913] binder: 7893:7896 transaction failed 29201/-22, size 0-0 line 3013 [ 114.376992] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.469609] binder: 7867:7871 transaction failed 29189/-3, size 0-0 line 3136 [ 114.469618] binder_alloc: 7867: binder_alloc_buf, no vma [ 114.469634] binder: 7870:7872 transaction failed 29189/-3, size 0-0 line 3136 [ 114.470275] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.488664] binder: BINDER_SET_CONTEXT_MGR already set [ 114.488671] binder: 7911:7916 ioctl 40046207 0 returned -16 [ 114.488763] binder_alloc: 7867: binder_alloc_buf, no vma [ 114.488778] binder: 7911:7916 transaction failed 29189/-3, size 0-0 line 3136 [ 114.488869] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.492574] binder: BINDER_SET_CONTEXT_MGR already set [ 114.492581] binder: 7906:7915 ioctl 40046207 0 returned -16 00:46:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbf, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) [ 114.492618] binder: 7906:7915 got transaction to invalid handle [ 114.492625] binder: 7906:7915 transaction failed 29201/-22, size 0-0 line 3013 [ 114.492767] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.582915] binder: undelivered TRANSACTION_ERROR: 29189 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 6: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:45 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xb8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) [ 114.605682] binder: BINDER_SET_CONTEXT_MGR already set [ 114.623246] binder: BINDER_SET_CONTEXT_MGR already set [ 114.629928] binder: 7927:7931 ioctl 40046207 0 returned -16 00:46:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x200000000008936, &(0x7f0000000000)) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xb0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) [ 114.658182] binder: 7927:7931 transaction failed 29189/-22, size 0-0 line 3013 [ 114.666150] binder: 7926:7938 ioctl 40046207 0 returned -16 [ 114.677154] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.715343] binder: 7966:7971 transaction failed 29189/-22, size 0-0 line 3013 [ 114.715445] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.749417] binder: 7926:7938 got transaction to invalid handle [ 114.755973] binder: 7926:7938 transaction failed 29201/-22, size 0-0 line 3013 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbf, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x74, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:45 executing program 4: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xb8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000", @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:45 executing program 4: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:45 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x6c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.764506] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.786839] binder: 7986:7991 transaction failed 29189/-22, size 0-0 line 3013 [ 114.788341] binder: 7984:7989 got transaction to invalid handle 00:46:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080), 0x4) 00:46:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x7c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 00:46:46 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.788349] binder: 7984:7989 transaction failed 29201/-22, size 0-0 line 3013 [ 114.788429] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.847442] binder_alloc: 8005: binder_alloc_buf, no vma [ 114.847457] binder: 8005:8016 transaction failed 29189/-3, size 0-0 line 3136 [ 114.847549] binder: undelivered TRANSACTION_ERROR: 29189 00:46:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbf, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:46 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 00:46:46 executing program 4: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 00:46:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x74, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000", @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.885836] binder_alloc: 8026: binder_alloc_buf, no vma [ 114.885854] binder: 8026:8033 transaction failed 29189/-3, size -1948312624093961985--438815126531816715 line 3136 [ 114.885950] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.959653] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.980289] binder: 8043:8052 got transaction to invalid handle 00:46:46 executing program 4: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 00:46:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:46 executing program 5: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 00:46:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) 00:46:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xc6, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) [ 114.982816] binder: BINDER_SET_CONTEXT_MGR already set [ 114.982823] binder: 8050:8056 ioctl 40046207 0 returned -16 [ 114.982868] binder_alloc: 8043: binder_alloc_buf, no vma [ 114.982883] binder: 8050:8056 transaction failed 29189/-3, size -438815126531816715-8113379701840671150 line 3136 [ 114.982965] binder: undelivered TRANSACTION_ERROR: 29189 [ 115.029843] binder: BINDER_SET_CONTEXT_MGR already set 00:46:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xb8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYBLOB="4c00001f000000005c5e57b0355da093ab3db557ff6078b1fd33f6e4f5c200a5f703e9f9aef11330da8398704934a73f704b15cbf583a071e29e3729ec2010e23dd3ae41dc6fc1bc5e139d01d4b1259267903b76c7d5fcf3d7030f3a53272aa45b611e1ec066525ac7510e69"], 0x0, 0xfdfd, &(0x7f0000000800)}) 00:46:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000240)=ANY=[]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) ioctl(r1, 0x1, &(0x7f0000000000)="a0040ad8") 00:46:46 executing program 5: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00004d00001400000180f9ac8ce740084000000001"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 00:46:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0