0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20000, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffe5c) 00:33:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) [ 1353.679357][T19710] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1353.716718][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:27 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) readahead(r0, 0x4, 0x4253) keyctl$revoke(0x3, r1) 00:33:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x54000018, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000001c0)=""/172) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:27 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) timer_create(0x1000000000000b, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, &(0x7f0000000400)) dup2(r1, r1) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r3) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:27 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3f04) 00:33:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000340)={0x8, 0x0, [{0x0, 0x0, 0x2, 0xfffffffffffffffd, 0xc86, 0x8000, 0x7fffffff}, {0x6, 0x400, 0x1, 0x8cb3, 0xf74, 0x2, 0x1}, {0x1, 0x5, 0x4, 0x1, 0xbd0f, 0x8001, 0x20}, {0x80000000, 0x100000000, 0x4, 0x5, 0x35, 0x4, 0x80}, {0xb, 0x5, 0x3, 0x8, 0x0, 0x4, 0x7}, {0xb, 0x5, 0x6, 0x2, 0x802f00000000000, 0x804, 0x3}, {0x0, 0xdd, 0x2, 0x5, 0x401, 0x40, 0x8}, {0xf, 0x3, 0x0, 0x6, 0x400, 0x3d01, 0x200}]}) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x9) [ 1353.920530][T19865] binder: 19864:19865 got transaction to context manager from process owning it [ 1353.929616][T19865] binder: 19864:19865 transaction failed 29201/-22, size 0-29696 line 2985 00:33:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000000000)='\x00', 0x200) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 00:33:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3426) [ 1354.008314][T19865] binder: BINDER_SET_CONTEXT_MGR already set [ 1354.042242][T19865] binder: 19864:19865 ioctl 40046207 0 returned -16 00:33:27 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x2b1) 00:33:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:27 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x200, 0x6, 0x9, 0x8, 0x8000}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) keyctl$reject(0x13, r2, 0x7, 0x1, r2) r3 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r3) [ 1354.168271][T19869] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x600000, 0x0) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}, 0x100) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000010d, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) [ 1354.232381][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:33:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') sendmsg$nl_xfrm(r0, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@flushsa={0x1240, 0x1c, 0x300, 0x70bd2d, 0x25dfdbfc, {0x2b}, [@algo_aead={0x108, 0x12, {{'ccm-aes-ce\x00'}, 0x5d0, 0x2e0, "8c1650d979f386019aa4aa07b80472b5509d9e5fc3b19a3edc72747761313b5d5eb4d7f70d8cd72c6d8dd25c515ffb0b3e8e4489b08b87f843b5ba3da5c7d98e1ed422957e761e7154fb929bb6942980977fb04a5bf3bcd1b72ecb5c030336959532e1696cae77a47b1e8802bb8807f369623469a4919349cbe94781b58bac9b1cf14189c864ca6c6cbb62e0f1b45ff3e65b419dc66bcdf6a586188bcff2db2cd85a956e5b2581d0997e3d01247f5f435a2b6a694599408acdd1"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "69bf9a969467f3c97dfac4873fbc0b7e4fe1e7fb5b6fc0ee0ff25314d827a011489c125818a3e6fea7066cf38e5a95b8f94ebeca7de08588d05ec2338875e3acd2fe56ad2d152bd059e5ac3566145a718a8e56fbdf0c36b4350d0837a383e5847d342b748e224e7bff4222211b1bfb6a3803d33ad96f83edcec0482eece328a49b6508a8120ec70ae924bc95684886a31083f2ecac28cd4e8e1c9ab41a68aee70f8442db60d2110efda465c528ce276a39dd81f259a96104cacd52fffd4ee5dcb7d290af6f704839af07d5ac8a350aa0168f87769dbcdfd73247ac9d40ebe87d9b044bd46271fc036aaf90950a84c7f7e192a9f55e693701f11a620bbf5167d532fc1bd1d6ac27ee1a35de4702416c032d6f1f008ede537b35fe330795e36321af3cd00e9de372da09b6168e9c97e1e8332dbf1f4833d1029b68ab272c0475e6b01ae1d12fbed5eae342d66a0fa9f22aa4a1b1a18137ed00e40ea5b5fb2d1b7b12f29a450b0b9beb6184e86d02e3a311e0d053229f4cea233e56f08edad42b81ed135ebd55b6e480104621639d92b706c219af3d921944cdfdb6705aef6745f95e9c9a42c5251b534f28c045bcd36d209d6021e03a2484ab4dd917d93c89ff62c8989259ea66363831375a245c4faee1e8f660d53820fcd031f2bc90e92ffde42e3564a90b1c33fe4987433e39f77f11fd3283fc1ebe64b9d422dd5bf20d88fd8c77c48b5ecb18afa56d39eb0d7bd96fc89c5e4f3a7a3dba37e51e25c9b8cc189f4a60618956421de7a2b996e88697c314969711ac644e40d1af3c2f1a6c8abd150c88558ea35853d334e6e8295083d5290b464c3a74571575b114bd3e5e475ce93f37450974006afba995e47106ab6b5cf9eef6b5ccf9abdeb599c194a3f4ecadf2286bc6864a922aaa4a7ee96f8c25d0acdddb9edb3fb4ded37aa9d8803e890419c6dc53beea9eb2aaebd66f49d9cf88b598794ffcd95060586064c9a258ea55c8d4b00389a083ed6ffa33f438f438669cd36bc86d5304f97966460884f34946f09e73e3002ae6f4ee8825d970d30e68202110d1d86ac21ae43c5da7e7df8f963f0ee3ce2fcd615e3ae7062a1978c2db0e691e34c0d0e27df76c373af3579141594bcec083b4ecc20d91a85bd458e3a727c0fe1e692e7565933ff981d10433c7606afa82a967b9ef614446b4e1636c4fbf01e7bec6a54a6d3540a63a9126b6d144dc1cf96162714b53f917ffaa6275cb093fc6235df036682fb02ac8d5285ba72d078cd928a60361f5443659768c28196c12719f9788e6fad5d176835e553d40b27d0d9a73c522f7b43d8953caaae32bb6bb471340beceac585fe6048bc5ebc223fba485ebe83bd549c563476cb338baa8eb74fdedadded9defed50720bae24cc45a2922acee644b1adc03d9c08bb563f52e308c27cd279d6549778d1e6a32ab0263e735ed2bbaeadb29f83114077cefb720480853db1b3b7514248f297b405a6d6753846af9011ad71cc886e8d43f87a22e84eebd54e6df7f9e7bd859b887180bd0cc1a516777fda8d278f101e301664a5c89b9e6623bdbcdbc36543cdef0e3144a60b3d6764ab7a7214e211400ee5330941797361c9a576979c3cfccc201bf2c6ac91c667bd8d821c599b160983df13f3eb4f0286878b29d245ea2e333a134a2c1a015f7ea5c1ae1befbc707337f4886ffb782f1893bd40c727be89a26942263fcc4bc13aaba77413dd1edaff622e4b019b1707e96c7f16e0b5a063c59602be314b1fb477fd788245de74594468a8e299ff8046161cc37c5c3b48318498fcf29d181ef77c580d2893bb8c166eef2e7437bb2e30f3e8c124b40f39b89fe5c44c46824d2a8d6c88a35a9095c8462e1dd2ed930c1d76ff27a801e254d7a321a302515118419a449d567a577ebab6721a8391ba2a48513825b39067960d0917941742d2bb88648c176c3d3e64fccfebafe4d327f2083b9f34223de5b4179a542479ffe559a4b23dfa7e912d59728af6a28802a89334adce06c171b476ab5935f9d5c3ac15d57e158d9f7e4d93f064f8261368a8067ba4158925b87f88cedbd05c325a3f819e563d48fcd2372264a10f29d61292022ac4912e9286b05a7160b9e4fec3cf2d91781f7bc35a564d0926573cd3d55b349842d7aad5a9be0459bd1863c0b373a6cca845881754e167f2efb75468a71e5c1ae4572d9326f40448652b015e2e7019dcc4b13d6d7ae885f4ec2b905303965117f86b0a6880bb02a1666aea53858fbdcaf3cba0c5784f8e5d83095105e56a239524141ae1edf329655dd12230b215190d040fe5d8532378d674c813061bd357e93a183378ae76310cb0d592866a1b6ea1984d3cb5fec644315b82ce47623ed12ee32025f4564eb2e50afc775f94c45da9bc2d9893e900c494db7f9aafae5f3a8c093bd25962e39151ef63397ab963d57de04f9ffb3a9a90c8cdc1035583c3a2f367fba3e0990f33ee84cd01e082b46869d852234aec11d653f53fcde8ea02c1a428f3495e193474704349a158fde6aab34e0485b6b5562e8791a1a0c3cc3ba2bf5065865f4f136b1a6c21dd8424f2df96b68bdb316045def3aa836612f94587f34933c82e131b5c5b9afed9d1ae235ad91560fd4046f504470a1f4d845305c5d3e7c737fd00c08102f68ffbfe2e04519ffd313caead7a0988548c5559fbe0561ce5c524a9e78cdc18cc4914699868fde555c2cb9e09344e773adeb880196628e590cff54e98439df7630e952fa87a806b638076904bd4f9795715801919cf0cbee1d1d1390b8f0dddbc6f86dd8269e7af0810981f97d7e0514d8f580c92ab6c110d1471cdd0eeb22b1ce24af34add786521527a350de271ced53755049915f90637ef1394ff62bd2f99ff159184ffe84fc9a692b7abad24d978795d09f0f4524ed8c72a4e364e250a57ede3fb034dc9f8ec9962588661781c298607f016271da437e51e61f1bab73fad9f8239d216d6f012b5072274502482a2c7c2af2ce2bb9da0b036a6fe5b5ec16f6de000f7f9c27e297fde9cee78b360ca4ae8a30c7a1f35f71ac453a2a1b27ea355da83da05cd1ade2332af926d81b8445cac180fe970e640603b5c491bd5b4d215323e0fd7312ca131856d8e169110f0b4048a99cc1fb48f8e626493654a574a8946322e32cc10bed7ba245c84658295cf75a2a0ea4321c73b994695c8d49136d005b218015d045e49ca609425200dbdeb39ad321c0c6b854746d073c0c78ccb5c86f9c8f6cfa533c0730ca5c407989f249ec3e0cf8be17bac0ff59b3d0f044ca1e4166dd662329e68c254d8c706e2cb6b4367bea63121f48089fb67ba500ce92b768ab47e90f5f65b200a73c81ebc7f7b786c4ca3cafff36c032056f8d067dc4410b095c795f9923676fc0d2cd2f0630031ac3caab922d3afcf2db059831f92a7cf1d95ec00d5c1d25c349971a56d021978d3c95209065e964145baeeb91cb72e3e4a4b5ab296574da072515d62dfc42f999533c5ab18f3e93e962e0f2987a0eca2328efb6c0cf5bc2d0fee9ced9ed3afe34222745fb1d5e38191a128ad21cbaa290e0baecfa8f482d9927ad4401f7fef502f2840e6edc4539862a4222c931c431ad227c2877fec0be782b57d3a2e924b65a0b8c5a5b17704f98e8ba391b3f82602212dd86e83f213bb97cd8b9e4c9394ae76c1d9e77f571036a3438ae223d5066e8e45270b52847ec597dde97925343e200fa0ad84d8d519f02f6d30f7a8ab950d0d6c24e384a68623bedd8bd248d1294e11b4e8167ec0bc74ad3a22273aee470b34e9f69395cc3608458f2865aca59aa7e544b39048bad0344dff50b1530c84435aeaa0422bcb65c8c5a5ef615bd479cd5b2cf6e863569de4aecdb01ec24da420918f0633c498c2862d0ee17fe3d2998fbeacae316317ba1fcfa1a11b90f4be23bd57ef9f2dd5188313ff32e0e18e67c228f78c8500092fef12be50891224a21d5ff6696d982f59b1268945431d4720cdb4ae377706fe4e707af7ffd484a7e88d93e384d6649921395602e12637736dc8b30b610a25cf9b5a4160a21cc52c9956b6781eee45c92170cad87398a01f1eb3a0aa418290a9db5f4958a5664471cb27e8f66042b899581695f374c986dd4a58fdcce8066f30a68bbeebdc801eeab54fbbe8272ab4d793115d643114f29621beb9db2b2898264621700fdf354ed81c155c63e5a99693eadab8160e0d30ce84f09ffea5904587ce861fce76474dafe53a5322b2f07aa9cd89e1cba0a071d27f405d4c4829177457f036769201028b91a725aabd73f34573feb941570e2dba6d81fd0f50f5fdc4265e4e02b84fa80fbcb20d73aa12dc4db9a2307011305d31ce375125a18251816defef25a2dce3f9f9535ca01a446cc31b5e5f17d59ea8248b3aa0183336bc481ab2da8eb012f1e1ac7bc451cb19feb8992dc515a0c19cb47cb88ef76f0cb299518424fcf506b4e339f0eb6321b16e9c916e04b682c4088fe77be0beac11c9cd92d692499528c1acdf6b76d62b7c0872ec3e594a7a2913b3993c0195dfa671c50e3664e85664ea0904bff3e0e68dbd16fbde0f598904698cf82bb609e8be7ea0841a47f90db6b8c5db825cb4e23a36cbab7d539b90bf2866ee06ff4b3931c1371e6ab413f2db8ec8edb43a53dfede54d8cad7f6eec4ea69d3386fbe93af63ec389b1ee1a02aa1aa20db87c9d518cb1538cec042d74141411dd17df046c1d697a32587fe09ee37df1526fc66769761b24078afec0a596af7d89b80ffae17d6c26e2eb0ff0337693665838829fa7511bd4db2eb20d7f91a169b3d56350d6db132e97bbec25aeb2e63ed1dcaee864f72c1c5a781d7a30025dd5b0ee9f12ea38bfbd0d0c56048b077be10d7b5f659500aaeaf6f8e9837fccac3f758266e7d0514b93cd2d9f0b574f45bd0a5fa42074256f9345d91ee881067408bca55a4573773788663526b4bfcd8634b4d122265ca157c6b72a0dbcc28484031ed95f44bb516aed576a69302bafa9edb6a9ff2665ee0964587bdef528e561b077979f658c78143b7efcad5e943b16c2b28fead182c19a19ae41d7fc1743789fa29db7222d97048fd99cba7a74b1b4095c303a9204e6b736f41424108110c5fd41bfac0e9070ea63143e0180d1b8224124bf52bd6ed4c2d015ac2c570e512100f84547e3959515322319217a5d17a16e1bc1591d63b318ccc0c83bfd55fbf4b4763302506ac6789a0c49adb047240c57290d9eb967470bcb0b6c243ba3333bf72bad8382ac5158b5add17799a661be48ab39d431f1cf09e4c192434fccf403c2659957132d26ceb1276ac603ff35e9adf998188c06e213c8f67afbb978c84d6da0958fce38166efaad5963a2e58431537e95af8ac0c3c4572ba0a4e3593f534329c83fcecce7b3179acd64356a12ee76607b8875e3398f00098e463652fdb80eee7899d39001722e33f63ad5a2c00954220f42a96c6462b00d3d384b39ad28a2005b8b63c3d62dd5a1b82826ec1fd9a3a18c038bec75ce6710939cedcf784555c810989db3ada84c9203b63ef129032ec964d2996046f8a22e3746958e61397e75eac5b52add2d4b2530b8cae0d3fd57243c9a6bc685fa8014fb1a4356f6a1960f38f87036c37dfea60b6c57a236a9843fae4d3ae3b82623e46feee72b47db621e1e9abb0d04ed91a0adc7f1f2b322e5af1471bc0a5933192944d506164d1baa9c98baf2c4b69f10c54c8f76c0f4b95ae8f00b24dee30155e386ecd37f81c3a6e5d57d8fdc0c579184caac0c32aeec6d92d"}}, @algo_aead={0xdc, 0x12, {{'aegis256-aesni\x00'}, 0x470, 0x0, "0a9a5e53bde1bab2bbac0fbed1ac1e53530330603e9227ce0009ee674e7d8294841a30d6a36d3282d71440dfad751ba1a767d53ead39adf4c0f71f151cd3a765180bd510c5dc0514b40e19ff3f0a14d63cdf23118d64b07e5b2f22b6f5db7568e69ffcd7279b8a5cc7087003064d6c23ed8a1cb57327a85bea08cda9be214216f595139dba6d13f06c04b2aecb0f"}}]}, 0x1240}, 0x1, 0x0, 0x0, 0x800}, 0x4004001) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f00000014c0)='cifs.idmap\x00', &(0x7f0000001500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000001440)='id_legacy\x00', &(0x7f0000001480)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1354.348216][T20194] binder: 20193:20194 got transaction to context manager from process owning it 00:33:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) socketpair(0x0, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x5d3, 0xff}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x4953, @local, 0x7ce64561}}, 0x4, 0xfffffffffffffffa, 0x5, 0x101}, &(0x7f0000000280)=0x98) [ 1354.444987][T20194] binder: 20193:20194 transaction failed 29201/-22, size 0-31232 line 2985 [ 1354.539940][T20194] binder: BINDER_SET_CONTEXT_MGR already set [ 1354.581173][T20194] binder: 20193:20194 ioctl 40046207 0 returned -16 00:33:27 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4000) 00:33:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="c16ec07cf88df4835a96", 0xa, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x4000000) 00:33:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xb8ae7172f774f91e, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x3) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x101, 0x4) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x20, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1354.762997][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:33:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) keyctl$revoke(0x3, r0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) [ 1354.821100][T20517] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1354.841429][T20524] binder: 20521:20524 got transaction to context manager from process owning it 00:33:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) [ 1354.900855][T20524] binder: 20521:20524 transaction failed 29201/-22, size 0-16777216 line 2985 [ 1354.952879][T20524] binder: BINDER_SET_CONTEXT_MGR already set [ 1354.985626][T20524] binder: 20521:20524 ioctl 40046207 0 returned -16 00:33:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x208902, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) keyctl$revoke(0x3, r1) [ 1355.222145][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:28 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) perf_event_open(0x0, r1, 0x0, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="67151f", 0x3, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$revoke(0x3, r3) r4 = bpf$MAP_CREATE(0x2, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000180)) 00:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1000, 0x4000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @pic={0x4, 0x9, 0x401, 0x8, 0x9, 0x8, 0x10001000, 0x6, 0x2, 0xffffffff80000001, 0x0, 0x8001, 0xfffffffffffffff7, 0x80000000, 0x3, 0x2}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x200000, 0x0) recvfrom$unix(r0, &(0x7f0000000440)=""/233, 0xe9, 0x0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) 00:33:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 00:33:28 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4004) 00:33:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x600000, 0x0) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}, 0x100) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000010d, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) [ 1355.609444][T20741] binder: 20735:20741 got transaction to context manager from process owning it 00:33:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x8040) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0x1d8, 0x1d8, 0x420, 0x2e8, 0x420, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x400, 0x100}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x2f, 0x9}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0xfff, 0xa, 0x0, 0x1}}, @common=@inet=@tcpmss={0x28, 'tcpmss\x00', 0x0, {0xffffffffffffff01, 0x8, 0x7}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 'veth0_to_bond\x00', 'ifb0\x00', {0xff}, {0xff}, 0x2, 0x3, 0x5}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x0, 0xa81}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x7aee7e61a35386a2}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) [ 1355.682767][T20741] binder: 20735:20741 transaction failed 29201/-22, size 0-33554432 line 2985 00:33:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@broadcast, @loopback, @empty}, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000002b00)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000002c40)=0xe8) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) [ 1355.745364][T20741] binder: BINDER_SET_CONTEXT_MGR already set 00:33:29 executing program 1: add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/73) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1355.811292][T20741] binder: 20735:20741 ioctl 40046207 0 returned -16 [ 1355.824849][T20742] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x141000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x124, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x1ffc00000000000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @local, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7431}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 00:33:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4104) 00:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1356.053225][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 [ 1356.124234][T21121] binder: BINDER_SET_CONTEXT_MGR already set [ 1356.147292][T21150] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1356.156124][T21121] binder: 21115:21121 ioctl 40046207 0 returned -16 [ 1356.301305][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x600000, 0x0) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}, 0x100) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000010d, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) 00:33:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x59, 0x12002) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="8685949c57d7103e20c6b6f4ff10ce4c", 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x7, 0x4) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:29 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8, 0x400000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='$vmnet0%-selinuxem1keyringwlan1eth0\x00', 0x24, 0x3) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4204) 00:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) [ 1356.430624][T21276] binder: BINDER_SET_CONTEXT_MGR already set [ 1356.454117][T21276] binder: 21275:21276 ioctl 40046207 0 returned -16 [ 1356.467303][T21282] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:29 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) pipe(&(0x7f0000000000)) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x80, 0x800) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:29 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x2, 0x56}) 00:33:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8100, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x111880) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000540)=""/246) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='security.SMACK64MMAP\x00', &(0x7f00000002c0)='/dev/input/mice\x00', 0x10, 0x1) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000400)={0x3, 0x2, @raw_data=[0x5, 0x0, 0x100, 0x7, 0x5e7, 0x0, 0x400, 0x1f, 0x8000, 0x80000001, 0x5, 0x2, 0x0, 0x6, 0x80, 0x4]}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000200)={0x8, 0x2, 0x11dfb8c, {}, 0x400, 0x2}) 00:33:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4304) 00:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1356.676200][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 [ 1356.731142][T21628] binder_transaction: 2 callbacks suppressed [ 1356.731178][T21628] binder: 21627:21628 got transaction to context manager from process owning it [ 1356.770626][T21628] binder_transaction: 2 callbacks suppressed [ 1356.770643][T21628] binder: 21627:21628 transaction failed 29201/-22, size 0-83886080 line 2985 [ 1356.826335][T21661] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1356.852302][T21628] binder: BINDER_SET_CONTEXT_MGR already set [ 1356.896412][T21628] binder: 21627:21628 ioctl 40046207 0 returned -16 00:33:30 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) perf_event_open(0x0, r1, 0x0, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="67151f", 0x3, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$revoke(0x3, r3) r4 = bpf$MAP_CREATE(0x2, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000180)) 00:33:30 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00fbda071ff4fc09004ce6c1529c7e833f33f49195bdecc3be208cc0466d2277f6ccc9028ae90969de0369ab8e72981b74d55076a03e3c91e0b4dd53d6b4b26b9c25f9d60008000000000000fe14d177bd72822adfd09f29555f487b6ccb0308dc1ed596942ba7af8237adc05d953c079a3ec049496324c6f0d468538c6f20e15bf50180feca14866f93a22e7c274fe75bb00c41cd5a84c73bca87b9ad23524a3523e0de51ddd3dfc7630d09650a92112ae0dd0d4b8306cef7828f7739369706a662d83ec0135ae3063522a4095d678adc5c5116ba4d07cd837ecdb8e8dcdad0a55d5f30995702dcc5a6f4edf70000d4f271b312992729fed18f932c98e842363079f0e72b5270adb4b3527bcc983313dc78a57c911afd09c6beaa87267fadecda873c0ca0ba7a404f37247833a43115c8317d36c4373ae0fbcea9a32872177fb2aa1d49184556e374f7571a3c2822126ac5282202ddb28b55e372205ba1108b6d1ffdea7b8eb1ba945309e6aa438ff3e909b5b6c5bfd56d8d7fe67f930c076bb180de3b0d09ed5567ccbff11d2da5f20ef78f1d10fe249539b18ff4de82c3941b6707e4c1645c73a323208707fdc47e6b90457dae0c26694cfbe913ac5190ca5786cecfc6e2cbb2a9185f6baf0bbc339a43b97e29960e1285dec606010fe30013d31e1d95796dce9078db2cac84bc48f0f5fa461c55e79d39fb25a04a01f5020000001da878bf068d4db12244f569de2da6b9b43fb3d3c4355e3dc9280fe811f263536c99874afdde7cb75a9c6f006d34a0b13be714c7a1e56f6e67c418fec28d20f1e7af29cd23a9b929a9c2b662"], 0xda, 0x3) 00:33:30 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xb629, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0xffffffffffff7fff, r2}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200ac0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000001c0)="88083bb68ad284b1bd1e92c56db9b6106ff12a78bf1eb4e8be5b31d3b627d13083a7d1a5c12cba8a37da0ab78e5b7cf27a5f9411a6953713b833597765f9c5b9d1f16424bcb008fe87d7b7514743c8781c6ebca0d2c232c107678a5eb6f1ddc06f738bcc3e236c028adfe370b8e6d21a8f4efa7baa087ac2fc30d94bdca0e49b61c5f7f540a554270273b6cd8112950a33816db9c757fbbb982803fc25b640dd58ed99af1f58f95efeb9dcfa3ffab6845f") perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"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"}) 00:33:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4404) 00:33:30 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x410, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12402}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1357.051291][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1357.071245][T21823] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:30 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(0x0, r1, 0xe, r0, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x5, 0x8000) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000240)=0x1c) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e22, @broadcast}}) keyctl$revoke(0x3, r3) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000080)={0x96, 0x3, 0xbbc6}) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:30 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) [ 1357.114656][T21916] binder: 21888:21916 got transaction to context manager from process owning it 00:33:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3304) [ 1357.158503][T21916] binder: 21888:21916 transaction failed 29201/-22, size 0-100663296 line 2985 00:33:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x700, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x0, 0x1, 0x8, 'queue0\x00', 0x1}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4504) [ 1357.219316][T21916] binder: BINDER_SET_CONTEXT_MGR already set [ 1357.251872][T21916] binder: 21888:21916 ioctl 40046207 0 returned -16 00:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:30 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x280400, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x588, 0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x81}, &(0x7f00000000c0)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x140, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x20}}, [0x1ff, 0x0, 0x1, 0xfffffffffffffffb, 0x401, 0x3, 0x80000000, 0x100, 0x0, 0xa4, 0x736, 0x100000001, 0x8, 0x6, 0x8]}, &(0x7f0000000100)=0x100) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000940)) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000380)=0x3ff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) 00:33:30 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) r2 = fcntl$getown(r0, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r0, 0x0, 0x8, &(0x7f0000000000)='keyring\x00', r3}, 0x30) r5 = fcntl$dupfd(r0, 0x406, r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r5, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e24, 0xfffffe0000000000, @local}}}, 0x3a) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000280)) 00:33:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x30000, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000001c0)={'lo\x00', 0x4, 0x1}) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1357.420214][T22021] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:30 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) [ 1357.489828][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) [ 1357.536799][T22152] binder: 22151:22152 got transaction to context manager from process owning it 00:33:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4604) 00:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:30 executing program 1: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000003f00)='/dev/dsp#\x00', 0x0, 0x101400) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003f40), &(0x7f0000003f80)=0x4) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffe8d) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x180) [ 1357.611527][T22152] binder: 22151:22152 transaction failed 29201/-22, size 0-117440512 line 2985 [ 1357.632573][T22152] binder: BINDER_SET_CONTEXT_MGR already set [ 1357.641540][T22152] binder: 22151:22152 ioctl 40046207 0 returned -16 00:33:30 executing program 4: r0 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='md5sum\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) 00:33:30 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x400, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x8f, @empty, 0x5}, @in6={0xa, 0x4e23, 0xcb, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @empty}, 0x7fff}], 0x94) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 00:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x0, 0x0, 0x6, '\x00', 0x1}, 0x1, 0x10, 0x8000, r1, 0x2, 0x1f, 'syz0\x00', &(0x7f00000000c0)=['keyring\x00', 'keyring\x00'], 0x10, [], [0x3, 0xa2, 0x6, 0x80]}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x143) 00:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 00:33:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) [ 1357.891017][T22284] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1357.930646][T22499] binder: 22498:22499 got transaction to context manager from process owning it [ 1357.960890][T22499] binder: 22498:22499 transaction failed 29201/-22, size 0-167772160 line 2985 [ 1357.999590][T22499] binder: BINDER_SET_CONTEXT_MGR already set 00:33:31 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x256) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x80000001, 0x2}, 0xc) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1358.008515][T22499] binder: 22498:22499 ioctl 40046207 0 returned -16 00:33:31 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4704) 00:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 00:33:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x9) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc010004}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x53c, 0x24, 0x20, 0x70bd25, 0x25dfdbfb, {0x8}, [@nested={0x184, 0x73, [@generic="449f02f5bbabbf3afd9ca97ebb8b211a22801bec5cb0ffa7681d64cca7df4b354a451a2fd5033530346a3df434ed827bf8b9132426c1d1ad8f7b5201be079deaf3f47eb4d5b929d1d65522d478b32be63e327c90e8b0cf9f2a5ce53e7fcdb6d82dab214104b4241285e782adf33928b7dcca72122a6130b6595d87350f84087b61bb1610a92dcbcf986ac39222359570", @generic="24accbe2150818edc593862897a0a9106e037f907bd94ded3878950de2d585cd712b4ce4cc2cb0c045efcd8d4fed9a8887d08433348bca80557ced979cb367580fc0fd396e91b42aa2602ee9d2d256b778104041eb", @generic="d3fef6", @generic="d87ccb089d6d4a33eedf42eb637b5069bcac130d14f53ac203359d3f6942fe0a14a1ba00e98cc73e8bba7ef4e4472b8ddff35e5e4107c374d142224247eadf192e5bfa383297f41a21270ead6485136e305c01cd86e453aeaaa69ea4e4ff4203d503d9e2445f3fac854acb2bdf2b93a2bedff770cd0d30cf5cc00b0b8b81ede0d7a25e7033d9ab4f66475112d8b774fc707859b72a6cefc0"]}, @nested={0x208, 0x75, [@generic="9830022b75ed2f98a060fb07e6578555d10600d51c18f101c72c0000f4ac4f87c9edf58eec95ddd3f496ea8d580933768d4ff3a9df61f5840730a78b0b60d4b6e46b7cebbc35d8ed4908d2138a13fb242f47e56074a71fe3a74e1468397ea3d4e793047c84def34d272a42264c6e8d0dc548d1e4e873171423b60155df38224e56ec72e9115b2f1db4bc65b9b26c64377f13831f512154e65c58626b02c08e83d076186c7fd05777dede7c", @generic="06505d0624461a0cf2a544c309c1c882ef06ec3a667264f4427ff76d7444e205cbbe84a17e5cdc550406574cfa4e13bdaa3ca86f75764d342968ea56c1cc32fa077862a6630e158c5a7b3e9553af2e10959e1b88d8fc6a126ce49c2ac81609dc916a64c101d88198c1a84bcc473a3962e86d06a0a62a32015771ce7e052dac16ed533bedff7a756e43d10c1c4d", @generic="1c5dd7bd064c07669704090fac084621707de4af3a155680c7fa23df7827fde037a8f0115ced78616cb26ad0e5b41249eca654770fdeca72176be2350d18ab19e0b959a914fd94a9b906e2b105eff068bff3d38920fdb491b1ac0a4b5819200b7b2534b88114d47bc3b414452a35c1b9399ec412615f0782a3566da4e01507a2590eedca505834fa4fdd09bf13737d7496fc1ae2752875999281e83a6c7f5883c0cca81169bde797d3f9ea9f78872d061b097daf33e9478f566cafd436dbfa8ef440abf99a7e2f3d9a08"]}, @typed={0x8, 0x23, @uid=r2}, @generic="afc401ae5ecb63ec87775fe9f9195a583b14d07686f20d63fd506be5054f755e8715994ee0bdc055a9c4904937d124d38843adc6b72dfb24e22c2409e5dbcc09ade7dbb0028518685b1ee65f7e823609aff0e779066a6334df6ad0da6162d0b5944906fb73a8450b01ccc36522df8f6d084c53", @generic="2dc037893c1050c51ea45e4f75dd338c7ffbb4dd5ee32c1c30aa6c1a19f5bcf35f6b0329ae63b3648d2031c88ee63dfad0cb80b0ca2c8394af1e56beaf39cb4c0e72930b14f2aba0c3ede88dcb8784a4b7473d4ef31eebbdba3fdf2b31badf3c7d30514d0a7a48bb8aeb7f961cb2b99e07344a2b035c6800de5246cf40b58a21e2decbea867145cf90", @generic="71407ae890a97e3ee04fd0b6cb3a152e20dd0363d2bb3982c573a6a45502c8b08a1eaab05bf8babe1d9ee00cc7d705eb23afdb3b39ffebfd74be5acc6f3f5c604017d82312984eaa422de5764631cbafbf5c48c42e6434a25820c167f03ca9551a197b5edb31b2e5987df04eb60ca393c37c6ab67952274f931c303e3c672b0f995a5af68e37cfe4928231", @typed={0xc, 0x59, @u64=0xfff}]}, 0x53c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000840)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbb}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5fcbeaaf3ada9477}, 0x80) 00:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:31 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000180)=0x4) mq_open(&(0x7f0000000040)='/dev/ppp\x00', 0x0, 0xa1, &(0x7f0000000080)={0x100000000, 0x3, 0x5, 0x5, 0xcd16, 0x7fff, 0x14, 0x80000001}) 00:33:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x305400, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='}\x00', 0xfffffffffffffff8) r1 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f0000000480)="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", 0xfffffffffffffd88, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="907a66f1c8ff14043f890ad3110400f0001cdf53920a8e17f1", 0xffffffffffffffb7, r0) keyctl$unlink(0x9, r1, r2) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) ptrace$poke(0x5, r4, &(0x7f0000000200), 0x1) [ 1358.214620][T22747] binder: 22746:22747 got transaction to context manager from process owning it [ 1358.279280][T22747] binder: 22746:22747 transaction failed 29201/-22, size 0-301989888 line 2985 [ 1358.317338][T22743] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1358.324113][T22747] binder: BINDER_SET_CONTEXT_MGR already set 00:33:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2d04) 00:33:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10800, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, 0x4e21, 0x1, 'fo\x00', 0x2, 0x4, 0x12}, {@rand_addr=0x4, 0x4e23, 0x4, 0x3, 0x80000000, 0x3}}, 0x44) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r1) keyctl$revoke(0x3, r2) 00:33:31 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x7fd, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1358.385651][T22747] binder: 22746:22747 ioctl 40046207 0 returned -16 00:33:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) ioprio_get$uid(0x3, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x8000002, 0x200) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x26080, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) ioprio_get$uid(0x3, r0) flistxattr(r1, &(0x7f00000001c0)=""/207, 0xcf) bpf$MAP_CREATE(0x2, 0x0, 0xffffff73) 00:33:31 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4800) 00:33:31 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="5b8aadfe99d8252fad39f70396801c1c3dde0c229a68c578aef794950c8c4a21e8fec73e8bcfd0a38eed05462f41bba4ea6998e153b68bd3eb356abd70db67191bcb3acd47cfaf1bd8748a06e5b7010760e82b26c19537150f3eca1d64f57a8dd170da624338b93d10186915e2895c69568a1b624b150b82bd943aeb02a409341e9de42d81cd1f35c4ebfb311515c6fcf1add64631b980733d06adf9177e779acb5d59f7a4d0e047ca", 0xa9, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xf9, "c6745e6ec7439f4f94732847ab494201a034f58ce79b38179d2382f15a1116a6abd78d375e34380c64e49206a65d2e29c43a558ad903919d813386d95f41a0f21a214038057a2b1b88ad8aa001a23f90c9d505c969f2d16743294113f42ba3f7027e472dd99681647405abfdff8b6138c15fe3425d8645dd9f15ab34fc3432dd4fd33a2d87551032c7599e77ce4dbbf53dd77e458cf13ce025eb6c31c1a76886ba6109eb6d701cc66b202328248edda70af2a4f493f0ef75ebba840c5592bcb7126789392d6347e00bb12578316458f9025debabb4abf2c699c4eb33d17e0025bb11827907bfbd554f16bbece7804ee1e5903f20c4dd67c3aa"}, &(0x7f0000000500)=0x101) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000540)=@assoc_value={r4, 0x5}, 0x8) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xff, 0x80000) accept4(r5, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80, 0x80000) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000580)={0x1, 0x0, {0x5, 0x4dc5be40, 0x1001, 0x1, 0x9, 0x7, 0x1, 0x4}}) r6 = dup2(r0, r0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) keyctl$revoke(0x3, r2) 00:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:31 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x1) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x5) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0x11}, 'erspan0\x00'}}, 0x1e) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x10001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) [ 1358.619285][ T12] binder_release_work: 2 callbacks suppressed [ 1358.619293][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x2, 0x6}, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x25, 0x3, 0x4, 0xfffffffffffffff8}}) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) [ 1358.681812][T22969] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1358.692847][T23060] binder: 23037:23060 got transaction to context manager from process owning it [ 1358.720632][T23060] binder: 23037:23060 transaction failed 29201/-22, size 0-536870912 line 2985 00:33:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2040, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000001c0)={r1, 0x7fffffff, 0x3, r2}) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @rand_addr=0x6}}, 0x0, 0x200, 0x0, "d3369732a5df9f73c8eef88c3f69c5715708979d157b0080a14d200e00985c96678e902ba04934b98c36bca2eba1a58adfd76050d1a874aefde70355c7fb0f9eb91ae12485223d38e5d778a514599731"}, 0xd8) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r3) bpf$MAP_CREATE(0x2, 0x0, 0xa) 00:33:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 00:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x2, 0x6}, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x25, 0x3, 0x4, 0xfffffffffffffff8}}) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) 00:33:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1358.748724][T23060] binder: BINDER_SET_CONTEXT_MGR already set [ 1358.779369][T23060] binder: 23037:23060 ioctl 40046207 0 returned -16 00:33:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4804) 00:33:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, r0) keyctl$revoke(0x3, r0) [ 1358.909827][T23201] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x2, 0x6}, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x25, 0x3, 0x4, 0xfffffffffffffff8}}) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) 00:33:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffff7fffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0xffffbfffffffffff, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1358.951363][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:33:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x0}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x60f, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000003, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=@v2={0x3, 0x0, 0xc, 0xffffffff, 0x9a, "388a9254a7c7d609a9f78dd0629e7c39cb45f206ad09642d51af04ae2c6acead5371b5346636d04d02180a2793421254f473cf540e044a040623d96bcc20b07861cfb833b219150a45e405d5ff2416a96081fa67eb38a10833f58f1e88dbdb99755167807c979fbcaaab943db22844ecbddf7329f8208b77f3985c936e25ebf0ae739aef691ba621d3eda32e95a0aa8c912c80da98851ae24dea"}, 0xa4, 0x2) keyctl$revoke(0x3, r0) 00:33:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4c00) 00:33:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x1, 0x1, 0x81, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1359.086900][T23306] binder: 23305:23306 got transaction to context manager from process owning it [ 1359.119102][T23306] binder: 23305:23306 transaction failed 29201/-22, size 0-1207959552 line 2985 00:33:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000128bd7000fcdbdf2501000000080001004e230000080001004e22000008000400030000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:33:32 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/227, 0xe3}], 0x3, &(0x7f0000000440)=""/93, 0x5d}, 0x10000) connect$ax25(r3, &(0x7f0000000500)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1359.227080][T23306] binder: BINDER_SET_CONTEXT_MGR already set [ 1359.258080][T23306] binder: 23305:23306 ioctl 40046207 0 returned -16 00:33:32 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) keyctl$revoke(0x3, r2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400000, 0x0) sendmsg$xdp(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="c2dbb457a8cb51a31939e3f4315df80a02a482c9e0af8055d2a9b0d291d8b5ec63bb90c6c24abf253394687e52f54cdcceb38fbbeea7b1f47cb4bac0d9b3ab33f60d2396985e1d0431d298063a38fd5bae51a653386dfb45a782dd4a8fb035b558da2880cb22930ecf88dba814c6c2a58fc43d06fb1fa9072c3993765044402eface9572cb43f84f1f7d80341a2cda0ae5cffb656b92f4d836eb01289e8dd35573aa0e3664a2b56828fa583ee801dcbd00d716a3746c75cf6723b5507d231d1378df6a4c66e5a72fc21fda1aa9a7f6e0df6e634dd45739f66227450784bb31be0aca2a", 0xe3}, {&(0x7f00000000c0)="fa64ad29fcbfb9b5", 0x8}, {&(0x7f00000002c0)="b61c", 0x2}, {&(0x7f0000000300)="a05332c2b47a872ce876380bf52875cd3d5044ccfa160c3442e543982f78ca1631bda45a723ec2c2503574df67de19ee20359fda896195bb6953f76d57dcfc04527f37f51b57a5663f35d4a618a73b1f35cfd23074196358dd84a05a389bef2204f2431649129d225089afbbf37149d911357fd0ed", 0x75}, {&(0x7f0000000380)="8cfa7f9ae4a1092efecfe39e3e9166d32113eb141b52f1628050215b74a69761b9acf11aad39d8a8c9b61f598025d45aca287b2e908d52bb9ca7fcba60a28905", 0x40}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="5cf3f1160b5c703df0cec394da748674a8dd86bc94abf6e55148bfdffe8285cb45c006042f017d1217", 0x29}, {&(0x7f0000000440)="6bfd82ae8a0db9f474f6c425288fa569f2fba5c96fd39eb24e34fabe024a13edc6f65b12a1ae42bf7b0b8d83f3b0cecaccbd8204fc733004d7e3f55557b4c91d68880a58a0bca13c91d503d1b4f60f4510ca", 0x52}, {&(0x7f00000004c0)="f0632236a3c05870c6a804a451a0d213ca7fd30cbcebf9b8216ea32601d23f790158afad86a6beb6fe3ba05f55b1e16641c51d2c270a7b6f962d532e3285d421c92fe3de2fa27f05942cf0b61060a7ebc85331634c1d9087b3afefc77acf0af9a357fd05dc1c4e5a4294b0ba14b14698f6adfa88b860bb5dd2b5797a2281c8fa4e004429d905f053bebb6a60292c3a4cef", 0x91}, {&(0x7f0000000580)="e6058504b2735358177a829351e5b3f6272147299177b9ae94f4510f3e102581b035983ff1bb31226662ee417fe5efdf751f63b2fce419130131096b253cc7ada773e3bfdf0813c4dd99cf7e177eaae3315b0ba610c347aa360ae9eaa3a3f223b2fe9efd4e94a88ccbd5dfb0d9b20363d7dd878de5b41a0f3b0ca4fd8b55104c32627a0dac5eaabac1cabf47b31eb296c0367326a197a7ae1c29480db751", 0x9e}], 0xa, 0x0, 0x0, 0x10}, 0x8880) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1359.283079][T23414] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x880, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000000)) 00:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6000) 00:33:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = getegid() getgroups(0x1, &(0x7f0000000000)=[0xee01]) setgroups(0x2, &(0x7f0000000080)=[r1, r2]) 00:33:32 executing program 3: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x5}, &(0x7f0000000400)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffa, 0x200) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) fsetxattr$security_selinux(r3, &(0x7f00000000c0)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:vhost_device_t:s0\x00', 0x24, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000080)) 00:33:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8080) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1359.468791][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x20000) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:32 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0xf}}, 0x10) 00:33:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x802, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1359.561383][T23642] binder: 23638:23642 got transaction to context manager from process owning it [ 1359.562966][T23636] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1359.593523][T23642] binder: 23638:23642 transaction failed 29201/-22, size 0-1275068416 line 2985 00:33:32 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x10800, 0x0) fsetxattr$security_ima(r0, &(0x7f0000001ac0)='security.ima\x00', &(0x7f0000002480)=@v2={0x5, 0x0, 0xd, 0x401, 0xbd, "5334f6c18ec43b0fd64fc3a3bd399d76f4caf36221759a7d7ba1efa487e266499dc6d282bc007633d1714e99bf222f24a2eb0d9b6df04a5a6c05941e1627894f243c21d358040668e48ea14aa60ba21e6d5d7bbf15d0f674817b99cd198c3b5c834231b06fa78646b650e7c9adb23f4990b39883f20a2782e2044f042061fb7bbff0acc024c02723c4c7c00ce0e9199dff7da95bf8c27dbb63fa2cd3cbb58982f9e6747df269aae93784c87f2373655219523d72e95d7b9dc48fd8e302"}, 0xc7, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) fstat(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) r6 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000021c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000022c0)=0xe8) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000001b00)=0x40, &(0x7f0000002580)=0x2) fstat(r1, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000023c0)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc, &(0x7f0000002140)=[{&(0x7f0000000380)={0x138c, 0x22, 0xc00, 0x70bd26, 0x25dfdbfc, "", [@generic="78c3a83ad1150a896c9a2c02083f95288cc111ef83a87f50af730a910985bd630495769a91ee1bf559fe04ec75bbd5005d2d9cbb0ff012b14a4cbe3739dde7241ca72e65ea72c983e2937c7c56f58b34cb0f2737940c36cdcfc3815142fba9ffdfc37a3651c7997842ac8e1242d069d3afcab75bb33d24184d1791b6c5334e6c602d988b721740b4233eaad92e09e6cc30546c9a74e7e26707585ed32db2ede2b21a0c03d4f3e0afd79558f2e298af9d9a3fa68ac2ca9ba83eadaca1a6595f5e1c19a6de910a88da193a513b391291f85a061688afdd990629fb45c9", @nested={0x11ec, 0x1e, [@generic="b2138fd15ae215218d25083c4cc9acbc5e5fafe4b3b23468611c6c2cc9a80ea7b47f35453be0f5e7fb6bef7197a1a1442d9e77cedf4642587e9a103548664cab6ebaa69f7f776b2b8023b2b4a13ae8c321ab59de3469ed7ce85fb33afeb530718438b25865d3176ea777907d34d1bac4818b5e797dd998a9d49fa63a3984a20070bd24ab1f6dd120", @generic="eeb3d5746072130d2711d1aeffd0d0e4b1d95ea43647fd1c768f3ec7fc173ef64b64a06e67ca542fd085c06cc3cd9d6ab2e62962b1a043e2c9a89e904e22038dcb33eb2a613f81b9fdd7052871fbeb77ae92683bd469fe3942f56020c4b88b03673bad760d4275e46db932afb420fb66c899ea84ea511725467914048ff7ccca87c8300269c759b201bc7a467b181c7d5e7f6522f4a258dd3158ce80b8551c0d217fd7d6176059e84f92f74c48bec7313bad1b5b45aae8e628e331fd445f6099d31343506cb7f5c0b347f5dd6f", @generic="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", @typed={0x4, 0x52}, @generic="af458a70828b8a5fb7629d089b97a1306db4d30d1696da7d4e9e1be0ad56b9ab2a4c84c2983ab425b073ca08172fa31537483a2ae1e282859aed37855aea7c94d02f30fcf9147c46d42d0b2b611f167675a157de3269b78c62f6361db0ff9e24862678be41220e2752107b8f327b366665027f4f2e0bdbf882c9b2b97cc7", @typed={0x8, 0x7e, @fd=r0}, @typed={0x8, 0x41, @pid=r3}]}, @typed={0xc, 0x61, @u64=0x9}, @generic="62bbdf637cc82cbff1e49b9d83a602e7d3f8df2a89a8aa190dcb6f0ca850f12b3bb135eeb989d1bc62c785706ff21150e6a3a7b2e443dedb43c89775912823503b3b77b560af2a7766ae7a6707553b8cb3cbce37cde90f9536f901d4d09a26adcd7e749dbb503a26a465c5d3d74c01084fabcd030779a5d264a36c3fff5be6994f439eeb028eb71eebd6f0c703c300f1147d99acbe58814403fc780417415262292ec58947"]}, 0x138c}, {&(0x7f0000001740)={0x50, 0x1c, 0x8, 0x70bd27, 0x25dfdbff, "", [@typed={0xc, 0x7e, @u64=0x5}, @nested={0x4, 0x18}, @generic="c0a13289faf28d035d2c0cb618f3ca58625c2d1165083a6334a69376d3e65516cc6262c9ba38419260688df6d483"]}, 0x50}, {&(0x7f00000017c0)={0x2fc, 0x28, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x20, 0x5, [@typed={0x10, 0x34, @str='vboxnet0(*\x00'}, @typed={0xc, 0x7d, @u64=0x80}]}, @typed={0x8, 0x88, @fd=r0}, @nested={0x230, 0x62, [@generic="0b1164decdc5600164e1de54a2606bdb9a213d72c1fd694e84b76e822d1483c19e94051e2f26f4bd71c21f42395a4012e36c31dc377100bd295f1cf91020a6a2a5f407f6632fe99717976da64ba97844a4efcf150b4e99162ead20f2b386c15a5d1df7d885f3ee594e8d3d57cb58bed9591ecfbb18758dc811b1463b20c17f4d7880f1fc3be615edded5a8305b1d91695a79aa1c35ceb119bfcd59c45800d8e9413084efb46f92c4fa90c0733e744f73a86ba6a2cd66e42c9630eff503fe8e", @generic="b63a2694054a55e56b918546db4c12d0acaf846c005f7c9976dcb0752b78d02140d8b6b050ec029e9a3284a7a00a225c62dd11ddf9fa463787551e799d01a5cf85d25e3a3f3aef75fcfde05dc8f1adc59b369a2f8de672d3d3efa48903128e7e651c4d04c600c416df92d3", @generic="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", @typed={0x8, 0x13, @u32=0x4}]}, @generic="f42577fd272f9428503045f53f884f78afbd00f2686beb71f682b43d5136ad9eaf1c59629dab2ca43f11087d0af990494287cf1a77f067851d2a7251be77bdc5b1361c0fc468f44b7edbd4ea2f3ba141958a9889f2bac3b6f4aec200da9c65e92203b844ec9539dfb502c65fe88bba68740a5e1947cfcfd817dd74434c9531dd55964a675e63592cc7f0e709ced2f81bf7b3a7"]}, 0x2fc}, {&(0x7f0000001b40)={0x4a0, 0x16, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@generic="2cd598f0358482e485a2534070d2f8ee5d2862a73eff826245980b0840377e40f002f5af573bff80e0ad74d2b71aaae3a9de475a7b961c5124449a3cbf736cb58ff87b66072559923f61c7702bfd5843a58e06b81970537f87c579cd1707498bf705610e3eef85c0d7cdce379df30e3a704455bcf47740aba99b907a21534b70c7dada4195647ccd6439e710d22d056ecca26a2f3852828d9d58849e6c093c67387b1572a85954b4b89c6577bf983c6b19f7671c2c026d96", @generic="e0575f2df67d21d30a5b0e53799ed824a6b35e8f7b384dff4d6649a2c43be4e19914c7a4c306dabe61b2e8f025485941947d3f5f0f5f4ee871ca984bceb8cc11ce29b41bc3b0211a04c68b020af3098371c46801dc8a517fcd57b940e5c749485846ac07e7585143d72baadc234b94c10ba60b65ab7bd207aa446a2937e3589d6a5e49b3535b163261b8da43ce63a13b28bcfef42518b27ce6291d51378d7ff9b027e8d591f2dd3a4041ebf5784c1bb73da2ec52a9b3407770778ee03d32abf7ac6515e6b25c37baa1", @generic="f3bf9f7fb7d406369468c1e2a01f8e2c01e45f396b99f592bbbed56bee80193e1582c3cf81c69b9e64b769c00ab131a9", @generic="9c57e02b84ad619baca46d63b00c467d852b7e028bd2368f295014549f9dbc25a83f1da3c6159862c0510bdd0768757101f05e7cbcef41e2aea990ed8931bbd3f2ca87370216040e11e84c66fe34f1bb8555babfeefa79b2e779ed51456b7ffe679cb89337daf467c5c21aedeb1e3b5e94afb7aa0634", @typed={0x8, 0x54, @u32=0x95}, @generic="d02a9a28ea2f5caa68920cae625b3ef80f699b68f50f98b1d03bc42097b720fbb1a3b16aac01d6d9e1bf69831fd633ba5584793fc34e3b105723f775212c42aba8efceac770ec0eaa67dafc610f99091a3913638a0b2543859dc3f2a41bbc68de327e9c578206c62accf6469f1393849c48e855ed399c6dbfb90e7890f27956a1978fff937f2809a32ad3a4aee65f5f1b758a1", @nested={0x98, 0x17, [@generic="52ad10d1bfb5912203d6a3367a6c231293b70392f9a38e6ba5c0f90f6dfa9ae3f56b56545702e5a242ce204ab163c3a31c0d6b2a3eebb9fc5f61ba9cddb4e8b66b1c4cbd438841cbe343a3a41bfb480e7027f4b42c0cbcb126021cf7a8775c6d0c0e6da9eb369623eb505c93b9e844ae54b17b", @typed={0x4, 0x88}, @generic="142f266a0002a13541002c217441727a7ffb", @typed={0x8, 0x5e, @uid=r4}]}, @nested={0x134, 0x1b, [@generic="b3533439d5aff2188711dcf87a6354a6c3044a107c", @typed={0x4, 0x8f}, @typed={0x54, 0x7b, @binary="3f832b168305cf71544ce6e1923933d4dbb8dad6e289f08dd974242b92de134f31a1c12cac59dc024ca0cefa278eccadb55ddb138fb1f04ee29206630f0fcf70ffded16823f21212e1a4ed6890"}, @generic="99ff9b5f2b610688ac", @generic="6a772adce77104b7ba1097a19cc543dce6e51ae03fbaecfb469dd29827de8809ebe2c2bfc15ea7d2e845c00913252697040d5524334baeefbd173ad9c0c7debe43271af1eb5ab262c3648d5b32a8aaa3ae11f17bafc49fbf488c02806bd57f0109d1fa9363fb68a9373c99e856c9cc26b4d1f1b01dbfb677be4cd3aec51302980b7c4868f73e5f79404d7b1f68325a5aab94c03e54b95c640f5e6c40201520e63138a230f53f62851cba34fd08ed898fabc5e11623723e819b"]}]}, 0x4a0}, {&(0x7f0000002000)={0x84, 0x27, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@generic="bee2917cb4a1d928d666b90d687ceabf3b7877686e4ef5b3327378c1a9382896f7a950e5aca87fe9f87704e6302e69b5d72a5a3d7a2c4d3867a5c21942dc63bb105b2c45b0f66d1ad38d64e4539267fdcc055264ba2bb42c3f664fe5d25516ab64e1e84f74", @typed={0xc, 0x81, @u64=0x1}]}, 0x84}, {&(0x7f00000020c0)={0x74, 0x19, 0x20, 0x70bd28, 0x25dfdbfc, "", [@nested={0x5c, 0x5c, [@generic="997dcce91e5c484d1e2ace2421aa8269d2b1645f2cc4658d164befdabb3581efd84f5b159067558a6461196f793f84d74123b755283164c4a437b1dc041726e08fd10eabc9b2dc6c1c53f73cae4b20607a595e2ea1"]}, @typed={0x8, 0x2c, @pid=r5}]}, 0x74}], 0x6, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x20, 0x40000}, 0x800) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r9) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x2, 0xfffffffffffff800, 0x7, {0x6, @raw_data="7d77c0125f560d61fa20817286670ba79bde91c05373d6056ccf51b8087ce6015d42b4486bda2a114d0ef339f054e79e1c8e251573ee2a389f2398d99bcb7b83bf6b2e66fd34e62102f1f922e5ce5ffe8801c9c8d2961dcc14fb4f8a9f0c92dbe73ebae7d0395e798eedc9bddbda714aca639c3521dab027e8556d5fd2e2687e1246d94b4edc6eebdd790ace55fb9448bf7a6b582ce74d94cee503b99acb3268f776a28f020bc18261d40cb711fb4b344a7114092952585c82a0df3fa79e72eb1f6465f78f585642"}}) bpf$MAP_CREATE(0x2, 0x0, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@rose, @remote, @null, @bcast, @netrom, @rose, @bcast, @netrom]}, &(0x7f0000000000)=0x48) [ 1359.644230][T23642] binder: BINDER_SET_CONTEXT_MGR already set [ 1359.655018][T23642] binder: 23638:23642 ioctl 40046207 0 returned -16 00:33:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8080) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6800) 00:33:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x4900) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x9, 0x4) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1359.810248][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:33 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0xffffffffffffff60) 00:33:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) mq_unlink(&(0x7f0000000000)='\xe8!eth1\xc7\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffffffbe, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) [ 1359.852291][T23923] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x600) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/40) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) [ 1359.921462][T23964] binder: 23963:23964 got transaction to context manager from process owning it [ 1359.941222][T23964] binder: 23963:23964 transaction failed 29201/-22, size 0-1610612736 line 2985 [ 1359.981491][T23964] binder: BINDER_SET_CONTEXT_MGR already set [ 1359.998365][T23964] binder: 23963:23964 ioctl 40046207 0 returned -16 00:33:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6c00) 00:33:33 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@ipv4={[], [], @broadcast}, 0x20, r2}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) keyctl$revoke(0x3, r1) 00:33:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x101, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000001c0)) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000002c0)={0x0, 0x5, 0x18, [], &(0x7f0000000280)=0xfffffffffffffff7}) keyctl$revoke(0x3, r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/41) 00:33:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @rand_addr=0xa3ff}}, 0x9, 0xfffffffffffffffb, 0x8, 0x3, 0x4}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @empty}}}, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x60000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x40, 0x4) connect$bt_sco(r3, &(0x7f0000000080)={0x1f, {0x6, 0x0, 0x90a, 0x9, 0x3, 0x101}}, 0x8) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x10000, 0x0) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r4) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1360.170709][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:33:33 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0xffffffffffffff60) 00:33:33 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xc6000, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 00:33:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x4000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x8, 0x400, 0x1}) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7f, 0x119000) r3 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xffffffffffffffff, 0x400) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1360.260089][T24190] binder: 24189:24190 got transaction to context manager from process owning it [ 1360.296845][T24148] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1360.321453][T24190] binder: 24189:24190 transaction failed 29201/-22, size 0-1744830464 line 2985 00:33:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xfc00d599b2c56b98, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000001c0)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000080)=0xa378, 0x4) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x5, 0x0) 00:33:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/189) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1360.368832][T24190] binder: BINDER_SET_CONTEXT_MGR already set [ 1360.400008][T24190] binder: 24189:24190 ioctl 40046207 0 returned -16 00:33:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xa8c9, 0x800) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/105, 0x69, 0x2, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x100000000, @mcast2, 0xffffffff}}, 0x24) keyctl$revoke(0x3, r0) 00:33:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf22) 00:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7400) 00:33:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x41f54901, 0x802, 0x7153, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x5d90}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x9}, &(0x7f0000000200)=0x8) keyctl$revoke(0x3, r0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000002c0)=""/50) [ 1360.583122][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:33:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000180)={0x2}) 00:33:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x101, 0x80000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x2360bd85, @remote, 0xffffffff80000000}}, 0x1, 0x7}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e24, 0x800, @remote, 0x6}}, 0x6, 0x3ff, 0x5, 0x5, 0x10}, &(0x7f0000000340)=0x98) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xe00) [ 1360.696765][T24515] binder: BINDER_SET_CONTEXT_MGR already set [ 1360.730743][T24514] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x7e, 0x200) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x1, 0x2, "0f3b9c2cdbd34ea1a3ad4990ba50978c15cc5cfbfc1d7335e689537819aa6561732525c5eb1e42a55855be4d75843c786c0ecb08b92871b550096bfe"}, 0x4c) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)) [ 1360.746900][T24515] binder: 24511:24515 ioctl 40046207 0 returned -16 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8010743f, &(0x7f0000000000)) 00:33:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xfffffffffffffff9, 0x5, 0x7, 0xfffffffffffffffa, 0x14, 0xbf, 0x1, 0x7, 0x3, 0x3, 0x5}, 0xb) 00:33:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7a00) 00:33:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0x99, "db7594a4affca7d6772d11534df677c95a4b5a9b89febeb1d250b3b4cc6329514775524dcb32fbee8a2f03d749872eafb55125fd675b97ae251f1ba680b8df3abebbcdde74e34aebb309de9837a918f7d8618e7a91a0d63a54f9a19ece35f87730e08ca353772bde9798acbf41b5d5d7c81d038d2341c5877d0646a0a30d571bc34a214b208c3cd9e2f4831cb21026eef10e7a9a09c28f5c61"}, &(0x7f0000000280)=0xa1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r0, &(0x7f00000002c0)={0x18, 0x0, 0x3}, 0x18) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x88000, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x8001) 00:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8010743f, &(0x7f0000000000)) [ 1360.939421][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1360.996912][T24739] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.015239][T24734] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1361.031848][T24739] binder: 24738:24739 ioctl 40046207 0 returned -16 00:33:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x88000, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x8001) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8010743f, &(0x7f0000000000)) 00:33:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0x20, 0x1, 0x1}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r2, 0x21, "ce1f2ce3825331745586db5ae9e741c5b258b02ba190428d2dfd21f9f0faf0a6c7"}, &(0x7f0000000180)=0x29) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:34 executing program 1: socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8004745a, &(0x7f0000000000)) [ 1361.201686][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:33:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xa721) [ 1361.250324][T24983] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.263746][T24983] binder: 24965:24983 ioctl 40046207 0 returned -16 00:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8004745a, &(0x7f0000000000)) 00:33:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x241, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) r3 = getpgid(0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r3) 00:33:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0xa0000, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000300)={0x9, 0x0, [{0x80000007, 0x40, 0x7, 0xffffffff}, {0xc0000001, 0x3, 0x6, 0x9, 0xd8cf}, {0x8000000f, 0x80000001, 0x1, 0x0, 0x8000}, {0x4, 0x8, 0x3ff, 0x7, 0x1f}, {0xa, 0xbe7, 0x1, 0x7fffffff}, {0x0, 0x20, 0x2, 0x400, 0xffffffffffff9299}, {0xc000001f, 0x3, 0x7, 0x99}, {0xd, 0x4, 0x100, 0x8, 0x2}, {0x40000007, 0x1, 0x8001, 0x7, 0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}}, 0x1) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r4) r5 = bpf$MAP_CREATE(0x2, 0x0, 0x0) tee(r1, r5, 0x200, 0x8) [ 1361.430372][T25167] binder: BINDER_SET_CONTEXT_MGR already set 00:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8004745a, &(0x7f0000000000)) [ 1361.484186][T25167] binder: 25166:25167 ioctl 40046207 0 returned -16 [ 1361.484205][T25174] binder_alloc: 24965: binder_alloc_buf, no vma [ 1361.500433][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1361.507601][T25058] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1361.537423][T25197] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.545379][T25197] binder: 25196:25197 ioctl 40046207 0 returned -16 00:33:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xdf21) 00:33:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0xea35eb70d945330d) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4010744d, &(0x7f0000000000)) 00:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1361.658184][ T9936] binder: undelivered TRANSACTION_ERROR: 29189 00:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x2801, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x525103) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0xd4, 0x9, 0x3, 0x6}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4010744d, &(0x7f0000000000)) [ 1361.763374][T25389] binder_transaction: 4 callbacks suppressed [ 1361.763383][T25389] binder: 25388:25389 got transaction to context manager from process owning it [ 1361.785143][T25383] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1361.789227][T25392] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.820852][T25392] binder: 25390:25392 ioctl 40046207 0 returned -16 [ 1361.840309][T25427] binder_alloc: 25388: binder_alloc_buf, no vma [ 1361.860903][T25389] binder_transaction: 5 callbacks suppressed [ 1361.860920][T25389] binder: 25388:25389 transaction failed 29201/-22, size 0-4294966781 line 2985 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4010744d, &(0x7f0000000000)) [ 1361.906991][T25427] binder: 25390:25427 transaction failed 29189/-3, size 6917529027641081856-0 line 3147 [ 1361.927961][T25389] binder: BINDER_SET_CONTEXT_MGR already set 00:33:35 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) times(&(0x7f0000000000)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 00:33:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000080)) [ 1361.967882][T25389] binder: 25388:25389 ioctl 40046207 0 returned -16 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107447, &(0x7f0000000000)) 00:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:35 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xedc0) 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107447, &(0x7f0000000000)) [ 1362.137541][T25619] binder: BINDER_SET_CONTEXT_MGR already set [ 1362.164698][T25619] binder: 25589:25619 ioctl 40046207 0 returned -16 00:33:35 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x400000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)='/dev/ppp\x00', 0x9, 0x2) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/2, 0x2a000, 0x1000, 0xfffffffffffffffe}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x8, 0x8) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4010002", @ANYRES16=r2, @ANYBLOB="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"], 0x1a4}}, 0x24008041) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1362.242812][T25619] binder_alloc: 25388: binder_alloc_buf, no vma [ 1362.270993][T25619] binder: 25589:25619 transaction failed 29189/-3, size 6917529027641081856-0 line 3147 00:33:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffc32) [ 1362.289417][T25712] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1362.309141][T25720] binder: 25719:25720 got transaction to context manager from process owning it [ 1362.323750][T25720] binder: 25719:25720 transaction failed 29201/-22, size 0-72057594037927936 line 2985 [ 1362.335632][T25720] binder: BINDER_SET_CONTEXT_MGR already set 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107447, &(0x7f0000000000)) [ 1362.351209][T25720] binder: 25719:25720 ioctl 40046207 0 returned -16 00:33:35 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) init_module(&(0x7f0000000040)='ppp0em1\x00', 0x8, &(0x7f0000000080)='/dev/ppp\x00') ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 00:33:35 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4008744b, &(0x7f0000000000)) 00:33:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x80000, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0)=0x6, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x7, 0x3, 0x5, 0x2, 0x3, 0x6}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4008744b, &(0x7f0000000000)) 00:33:35 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xff0f) 00:33:35 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 00:33:35 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x11, 0x7, 0x1, {0x8, 'keyring\x00'}}, 0x11) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4008744b, &(0x7f0000000000)) [ 1362.728921][T26044] binder: 26043:26044 got transaction to context manager from process owning it [ 1362.740763][T26044] binder: 26043:26044 transaction failed 29201/-22, size 0-144115188075855872 line 2985 00:33:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xff, 0x1) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/80) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1362.810597][T26044] binder: BINDER_SET_CONTEXT_MGR already set [ 1362.838940][T26044] binder: 26043:26044 ioctl 40046207 0 returned -16 00:33:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1362.860834][T26047] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xedc0) 00:33:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x641, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 00:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0xf, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x800, 0x80) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000540)=""/246) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="1cea2aaf2f8bb527d4f81009e29611ac0a0bec0faf945d1c0305811cecc061b83b29d3e20dd7c0b67f1f5980a8e16f2f6869c808", 0x34, 0xff}], 0x0, &(0x7f0000000240)='ppp1({,wlan0{em0keyring(\x00') ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 00:33:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x20000) [ 1363.076829][T26365] binder: 26364:26365 got transaction to context manager from process owning it [ 1363.116674][T26365] binder: 26364:26365 transaction failed 29201/-22, size 0-216172782113783808 line 2985 00:33:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x7) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x149) 00:33:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047451, &(0x7f0000000000)) [ 1363.131236][T26373] ceph: device name is missing path (no : separator in /dev/loop0) [ 1363.156498][T26365] binder: BINDER_SET_CONTEXT_MGR already set 00:33:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1363.204804][T26365] binder: 26364:26365 ioctl 40046207 0 returned -16 [ 1363.235651][T26376] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047451, &(0x7f0000000000)) 00:33:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x1, 0x4d07, 0x7, 0x7cff, 0x7, 0x9}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x682100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x240000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40080}, 0x40001) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000005c0)={0x6, 0x9f92}) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @local}, 0x100, 0x0, 0x0, 0x0, 0xdd0e, &(0x7f0000000200)='nlmon0\x00', 0x8001, 0x7, 0x1f20000000000000}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0xb10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4004801) 00:33:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x407ff) 00:33:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047451, &(0x7f0000000000)) 00:33:36 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) [ 1363.413958][T26630] binder: 26629:26630 got transaction to context manager from process owning it [ 1363.462906][T26630] binder: 26629:26630 transaction failed 29201/-22, size 0-288230376151711744 line 2985 00:33:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/117) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:36 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x0, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000000)) [ 1363.504780][T26630] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.524102][T26630] binder: 26629:26630 ioctl 40046207 0 returned -16 00:33:36 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) 00:33:36 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x10, r0) [ 1363.624115][T26681] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:36 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) 00:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1363.698876][ T7771] binder_release_work: 7 callbacks suppressed [ 1363.698882][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4004743c, &(0x7f0000000000)) 00:33:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x40800) 00:33:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x303, 0x8003, 0xfff, 0x2, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r2, 0x8d}, 0x8) 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1363.810373][T26917] binder: 26872:26917 got transaction to context manager from process owning it 00:33:37 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @dev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0), 0x0, 0x7f}, {&(0x7f00000001c0)="3b25a6e807f05fddd3f49d31957d56ef226bb3e211560289518bd4059c58a7944067a270e4", 0x25, 0x9}, {&(0x7f0000000200)="390532d5092892ccfb4630a0851163cc23f7f8b1f72f5462ff14cbe0e032536e66378b751de2f63f2b573a8db09aaa82bb380518c93a3009dfea019397e5d09ede38808260517d9bf53842e39a3c964f45ba1e9691d36978ed13b62e08365f11a192561119da3232b8703cb2f80a9645a1ec27c554a42baf45d21047327c1fbd9710e965a4480fdb3d21aedc9bbf4de594a700c5c9a2469d196b7792460906ec1caee194721ccf290ada7632bd1824defced3045bcaec043895e75fb5d826e1b3cdb53d49c5a0212daf9f4da05b4a9b0cc", 0xd1, 0x2}], 0x8, &(0x7f0000000700)={[{@uid={'uid', 0x3d, r1}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@quiet='quiet'}], [{@uid_lt={'uid<', r2}}, {@fowner_gt={'fowner>', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x7a2b}}, {@fsname={'fsname', 0x3d, '/.mime_typemd5sum*-eth0@em1'}}, {@euid_gt={'euid>', r4}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r5) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4004743c, &(0x7f0000000000)) [ 1363.851611][T26917] binder: 26872:26917 transaction failed 29201/-22, size 0-360287970189639680 line 2985 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1363.899056][T26917] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.923758][T26917] binder: 26872:26917 ioctl 40046207 0 returned -16 00:33:37 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000000)) 00:33:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4004743c, &(0x7f0000000000)) [ 1363.941408][T26927] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x80400) 00:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000200)) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x3c, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) keyctl$revoke(0x3, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$evdev(r3, &(0x7f00000000c0)=[{{0x0, 0x7530}, 0x11, 0x8, 0x6}, {{}, 0x5, 0x1, 0x6}], 0x30) bpf$MAP_CREATE(0x2, 0x0, 0xffffffffffffff1c) 00:33:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x434) 00:33:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/165) [ 1364.105958][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1364.181285][T27152] binder: 27151:27152 got transaction to context manager from process owning it [ 1364.192808][T27150] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:37 executing program 3 (fault-call:9 fault-nth:0): bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1364.228031][T27152] binder: 27151:27152 transaction failed 29201/-22, size 0-432345564227567616 line 2985 [ 1364.263380][T27152] binder: BINDER_SET_CONTEXT_MGR already set 00:33:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000020000000000, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffd27) 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xe0000) [ 1364.289431][T27152] binder: 27151:27152 ioctl 40046207 0 returned -16 00:33:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x400000) fcntl$dupfd(r0, 0x406, r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000240)={0x0, 0x5, 0x1, 0xb6, 0x7, 0x6}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1364.419898][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 [ 1364.479568][T27461] binder: 27440:27461 got transaction to context manager from process owning it 00:33:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1d, 0x1, @thr={&(0x7f0000000000)="a0a52d67c5ad8592f7900a0b18add571dea75fda0dc31ffb32bcfdc33c8c11c401bdd4490e95a1b3bf3203a82c18cd3ca00504f14f5fa6b56f5a0f05299e6bd48933cbfdf31a", &(0x7f0000000080)="6afa58592c4b3292dab466fb70de7e03330493a5a2bd2d836856689921ae169cd6b05ae133e0308198c7a1fd7cf9f902cd6590b4599bcb558998382b37780ada91fae3ed56f6da2b2274b7fe352f0d0f8b594f2d81"}}, &(0x7f0000000180)) [ 1364.521996][T27461] binder: 27440:27461 transaction failed 29201/-22, size 0-504403158265495552 line 2985 [ 1364.530603][T27383] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0xae2c606254df0610) [ 1364.569527][T27461] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.600650][T27461] binder: 27440:27461 ioctl 40046207 0 returned -16 00:33:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x400000) 00:33:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syslog(0x9, &(0x7f00000002c0)=""/207, 0xcf) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x1, 0x18202) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$TIOCSTI(r3, 0x5412, 0x4052d29) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r4 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000200)=""/147) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sched_yield() keyctl$revoke(0x3, r5) bpf$MAP_CREATE(0x2, 0x0, 0x1000001b4) 00:33:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$usb(&(0x7f0000001780)='/dev/bus/usb/00#/00#\x00', 0x5, 0x2000) sendmsg$nl_netfilter(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x18, 0x1, 0x3, 0x0, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@typed={0x4, 0x62}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1364.977132][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1f, 0x80000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) getsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000080)=""/8, &(0x7f00000000c0)=0x8) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) [ 1365.032222][T27677] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1365.053173][T27784] binder: 27782:27784 got transaction to context manager from process owning it 00:33:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) 00:33:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(0x0, r0, 0x400000000000006, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0x49, &(0x7f0000000080)="2714db32da71d2cd9fc11ba137136564467ae880c576ea43f1e08d845134c290b0717fd76bb099febf2080809d7090f0daa2022e4b18d2fe13524068ca864acc08abf0cb87132a00ea"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1365.098558][T27784] binder: BINDER_SET_CONTEXT_MGR already set [ 1365.128247][T27784] binder: 27782:27784 ioctl 40046207 0 returned -16 00:33:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1000000) 00:33:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) sync_file_range(r1, 0x7a, 0xcc72, 0x2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) 00:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1365.372161][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2000000) 00:33:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) [ 1365.434704][T28120] binder: 28101:28120 got transaction to context manager from process owning it 00:33:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair(0x10, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) accept4(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80, 0x800) [ 1365.529403][T28120] binder: BINDER_SET_CONTEXT_MGR already set [ 1365.583115][T28120] binder: 28101:28120 ioctl 40046207 0 returned -16 00:33:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3000000) 00:33:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x2040, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) getrlimit(0x9, &(0x7f0000000100)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000000)={0x57f, 0x20303159, 0x53a0, 0x3, 0x2, @stepwise={{0x7fff, 0x1}, {0x400, 0x2}, {0x1, 0x5}}}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 00:33:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1365.862728][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:39 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x7fd, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x100010, r1, 0x80000000) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) bpf$MAP_CREATE(0x2, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x19, 0x7, 0x2, {{0xc, ',bdev{md5sum'}, 0x9a1}}, 0x19) 00:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80000) r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x46}, &(0x7f0000000340)=0x8) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) [ 1365.987901][T28241] binder: BINDER_SET_CONTEXT_MGR already set [ 1366.026389][T28241] binder: 28240:28241 ioctl 40046207 0 returned -16 00:33:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) inotify_init() 00:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:39 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\\\x00', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1366.259785][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:39 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4000000) 00:33:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1366.385813][T28556] binder: BINDER_SET_CONTEXT_MGR already set [ 1366.423740][T28556] binder: 28555:28556 ioctl 40046207 0 returned -16 00:33:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x5, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1366.761846][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:40 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x5000000) [ 1366.852408][T28771] binder_transaction: 2 callbacks suppressed [ 1366.852417][T28771] binder: 28766:28771 got transaction to context manager from process owning it [ 1366.876456][T28774] binder: BINDER_SET_CONTEXT_MGR already set [ 1366.910918][T28774] binder: 28768:28774 ioctl 40046207 0 returned -16 [ 1366.917784][T28771] binder_transaction: 4 callbacks suppressed [ 1366.917801][T28771] binder: 28766:28771 transaction failed 29201/-22, size 0-720575940379279360 line 2985 [ 1366.947390][T28774] binder_alloc: 28766: binder_alloc_buf, no vma [ 1366.947420][T28774] binder: 28768:28774 transaction failed 29189/-3, size 0-5476377146882523136 line 3147 00:33:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) 00:33:40 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x400000) 00:33:40 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6000000) [ 1366.987728][T28774] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.007956][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1367.014792][T28774] binder: 28768:28774 ioctl 40046207 0 returned -16 00:33:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x6, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1367.165418][T22443] binder: undelivered TRANSACTION_ERROR: 29189 [ 1367.241899][T29153] binder: 29147:29153 got transaction to context manager from process owning it [ 1367.274540][T29153] binder: 29147:29153 transaction failed 29201/-22, size 0-6917529027641081856 line 2985 00:33:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400442, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x1}, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r3) r4 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={r5, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0xdc}, 0xc) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1367.310167][T29048] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) [ 1367.333834][T29153] binder: BINDER_SET_CONTEXT_MGR already set 00:33:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1367.379073][T29153] binder: 29147:29153 ioctl 40046207 0 returned -16 00:33:40 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0x408) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0)="26425fa78893a24090ec274694997ed3655654523197c842f5c5fe50c50eb2faa9e21dbd09e0831267fcbbe44dd564e42194c1340ff7063698a88f86b8105f768db8872400fa17c188799c18775685c5a54b49ea9a9ea1fc9711aab03a625d527af82c4db9a1584c34db50a4171e80389e9784f8f0a359000434983e0e08614e2a21485bdc32dad9bd9185739582c2d1b23ea0cdec71df3080b1f59146927c792c90aefdf771c809a9133fd71c279c6233a520c17b41162a20423ef793d9855463d1c660790cfd7a2e731d4103a09c21f0fcaee0327596ee01c2f3f40e85ce04bcb778af786b", &(0x7f0000000080)="0470236e03882b339438655531d252d396dfbd33f8", 0x2}, 0x20) keyctl$revoke(0x3, r3) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:40 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7000000) 00:33:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1367.692568][T29501] binder: 29500:29501 got transaction to context manager from process owning it 00:33:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1367.734767][T29501] binder: 29500:29501 transaction failed 29201/-22, size 0-7493989779944505344 line 2985 [ 1367.811837][T29501] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.829210][T29505] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:41 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) [ 1367.872721][T29501] binder: 29500:29501 ioctl 40046207 0 returned -16 00:33:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x7, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x8000000) 00:33:41 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) 00:33:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @rand_addr=0x182d}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x70, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 'bridge_slave_0\x00'}) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x2, &(0x7f0000000000)) 00:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:41 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) [ 1368.141585][T29716] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1368.158980][T29726] binder: 29720:29726 got transaction to context manager from process owning it [ 1368.190301][T29726] binder: 29720:29726 transaction failed 29201/-22, size 0-7782220156096217088 line 2985 00:33:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x5421, &(0x7f0000000000)) 00:33:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x9000000) 00:33:41 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x5450, &(0x7f0000000000)) [ 1368.322298][T29726] binder: BINDER_SET_CONTEXT_MGR already set [ 1368.350689][T29726] binder: 29720:29726 ioctl 40046207 0 returned -16 [ 1368.528684][T29898] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xa000000) 00:33:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x8, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x5451, &(0x7f0000000000)) 00:33:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1369.077326][T30154] binder: 30147:30154 got transaction to context manager from process owning it [ 1369.118125][T30149] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1369.130687][T30154] binder: 30147:30154 transaction failed 29201/-22, size 0-8358680908399640576 line 2985 00:33:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x5452, &(0x7f0000000000)) 00:33:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1369.207719][T30154] binder: BINDER_SET_CONTEXT_MGR already set 00:33:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x800c1) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x5, 0x0, 0x3e, 0x0, 0x4, 0x6, 0x7, 0x8, 0x6, 0x6, 0x3, 0x6d2a, 0x0, 0x4, 0xffffffff, 0x204, 0x800, 0xfffffffffffffffc, 0x7}) 00:33:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x10000000) [ 1369.257567][T30154] binder: 30147:30154 ioctl 40046207 0 returned -16 00:33:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1369.417982][T30453] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:33:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x5460, &(0x7f0000000000)) [ 1369.463357][ T12] binder_release_work: 3 callbacks suppressed [ 1369.463363][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:42 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x151000, 0x40) bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000340)=[0xee01]) r7 = getegid() getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) getgroups(0x7, &(0x7f00000003c0)=[r1, r3, r4, r5, r6, r7, r8]) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r9) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1369.526424][T30572] binder: 30565:30572 got transaction to context manager from process owning it [ 1369.593072][T30572] binder: 30565:30572 transaction failed 29201/-22, size 0-8791026472627208192 line 2985 [ 1369.629017][T30572] binder: BINDER_SET_CONTEXT_MGR already set [ 1369.691147][T30572] binder: 30565:30572 ioctl 40046207 0 returned -16 00:33:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x9, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x14000000) 00:33:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4004743b, &(0x7f0000000000)) 00:33:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0x8000, 0x6, 0x2c, 0x1, 0x1ff}, 0x2c) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x91cddde3d0df8319) r1 = socket$netlink(0x10, 0x3, 0x1f) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @remote}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x7c}}, 0x4) 00:33:43 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1370.010047][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1370.017607][T30705] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4004743c, &(0x7f0000000000)) 00:33:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x400000) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x9}}, 0x18) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='mime_type$]$\x00', 0xd) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1370.119720][T30974] binder: 30921:30974 got transaction to context manager from process owning it 00:33:43 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:33:43 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1badface) [ 1370.176074][T30974] binder: 30921:30974 transaction failed 29201/-22, size 0--144678142324244480 line 2985 00:33:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047440, &(0x7f0000000000)) [ 1370.232108][T30974] binder: BINDER_SET_CONTEXT_MGR already set [ 1370.264292][T30974] binder: 30921:30974 ioctl 40046207 0 returned -16 [ 1370.330972][T31036] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1370.556834][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xa, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:43 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) 00:33:43 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1f000000) 00:33:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101040, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x6, 0x0, [{0x0, 0xcd, 0x2, 0x3, 0x1000, 0x3ff, 0xffff}, {0xc0000001, 0x7ff, 0x5, 0x101, 0x4c57, 0x3, 0x101}, {0x80000001, 0x1, 0x6, 0x7, 0x7f, 0x6dcb, 0x7}, {0x7, 0x74, 0x2, 0x3, 0x1f}, {0xc0000000, 0x100000001, 0x7, 0x0, 0x8, 0x2}, {0x80000008, 0x66f443f7, 0x4, 0x5, 0x7, 0xc2, 0xffffffff}]}) memfd_create(&(0x7f0000000000)='\xa1vboxnet1system\x00', 0x1) 00:33:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047451, &(0x7f0000000000)) 00:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0}) [ 1370.687192][T31223] binder: 31218:31223 got transaction to context manager from process owning it [ 1370.762156][T31223] binder: 31218:31223 transaction failed 29201/-22, size 0-0 line 2985 00:33:44 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) 00:33:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047452, &(0x7f0000000000)) 00:33:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$KVM_NMI(r0, 0xae9a) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1370.876844][T31223] binder: 31218:31223 ioctl c0306201 200000c0 returned -14 [ 1370.893752][T31222] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1370.954201][T31223] binder: BINDER_SET_CONTEXT_MGR already set [ 1370.978657][T31223] binder: 31218:31223 ioctl 40046207 0 returned -16 00:33:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x20000000) 00:33:44 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) 00:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0}) [ 1371.172065][T31613] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1371.190306][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1371.381444][T31647] binder: 31645:31647 got transaction to context manager from process owning it [ 1371.426718][T31647] binder: 31645:31647 transaction failed 29201/-22, size 0-0 line 2985 [ 1371.472511][T31647] binder: 31645:31647 ioctl c0306201 200000c0 returned -14 [ 1371.501861][T31647] binder: BINDER_SET_CONTEXT_MGR already set [ 1371.516288][T31647] binder: 31645:31647 ioctl 40046207 0 returned -16 00:33:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xb, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40047459, &(0x7f0000000000)) 00:33:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x20100000) 00:33:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x311, 0x210400) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'netdevsim0\x00', 0x4000}) r4 = syz_open_procfs(r2, &(0x7f0000000240)='children\x00') ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r5) bpf$MAP_CREATE(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') 00:33:44 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x3ffffe, 0x2000000000000014) 00:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0}) [ 1371.625192][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:33:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}], 0x1, 0x24008085) [ 1371.717335][T31755] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1371.744919][T31797] binder: 31761:31797 got transaction to context manager from process owning it [ 1371.793606][T31756] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1371.799399][T31797] binder: 31761:31797 ioctl c0306201 200000c0 returned -14 00:33:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40049409, &(0x7f0000000000)) [ 1371.960380][T31797] binder: BINDER_SET_CONTEXT_MGR already set [ 1372.025414][T31797] binder: 31761:31797 ioctl 40046207 0 returned -16 00:33:45 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:auditd_log_t:s0\x00', 0x22, 0x1) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4008744b, &(0x7f0000000000)) 00:33:45 executing program 0: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 00:33:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x220f0000) [ 1372.354898][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:33:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0}) 00:33:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107447, &(0x7f0000000000)) 00:33:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x401, 0x10000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xd57, 0x5}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x880) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r4) bpf$MAP_CREATE(0x2, 0x0, 0x0) getpeername$netlink(r2, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000280)=0x4) 00:33:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) [ 1372.601142][T32185] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x23000000) [ 1372.681145][T32193] binder: 32189:32193 got transaction to context manager from process owning it [ 1372.702775][T32193] binder_transaction: 1 callbacks suppressed [ 1372.702793][T32193] binder: 32189:32193 transaction failed 29201/-22, size 0-0 line 2985 00:33:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe8b) unlink(&(0x7f00000001c0)='./file0\x00') [ 1372.783905][T32193] binder: 32189:32193 ioctl c0306201 200000c0 returned -14 [ 1372.820051][T32193] binder: BINDER_SET_CONTEXT_MGR already set 00:33:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4010744d, &(0x7f0000000000)) [ 1372.851649][T32193] binder: 32189:32193 ioctl 40046207 0 returned -16 00:33:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) 00:33:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0}) [ 1373.051965][T32367] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1373.068521][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:33:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4020940d, &(0x7f0000000000)) 00:33:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x27040000) [ 1373.155890][T32592] binder: 32576:32592 got transaction to context manager from process owning it [ 1373.228081][T32592] binder: 32576:32592 transaction failed 29201/-22, size 0-0 line 2985 [ 1373.288252][T32592] binder: 32576:32592 ioctl c0306201 200000c0 returned -14 [ 1373.357036][T32592] binder: BINDER_SET_CONTEXT_MGR already set 00:33:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xd, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7) bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:33:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047441, &(0x7f0000000000)) [ 1373.434256][T32592] binder: 32576:32592 ioctl 40046207 0 returned -16 [ 1373.559976][T32619] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 00:33:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0}) 00:33:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1373.706854][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1373.785780][ T471] binder: 444:471 got transaction to context manager from process owning it [ 1373.813320][ T471] binder: 444:471 transaction failed 29201/-22, size 0-0 line 2985 [ 1373.841050][ T471] binder: 444:471 ioctl c0306201 200000c0 returned -14 [ 1373.870079][ T471] binder: BINDER_SET_CONTEXT_MGR already set [ 1373.885828][ T471] binder: 444:471 ioctl 40046207 0 returned -16 [ 1373.967888][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:47 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x10001, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x7) 00:33:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x29040000) 00:33:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8004745a, &(0x7f0000000000)) 00:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa, 0x0, 0x0}) 00:33:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) [ 1374.175565][ T684] binder: 678:684 got transaction to context manager from process owning it [ 1374.191026][ T680] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:47 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="ae"], 0x1) fsync(r1) fallocate(r1, 0x0, 0x40000, 0xfff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x100000000001400, r1, 0x0, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) [ 1374.222036][ T684] binder: 678:684 transaction failed 29201/-22, size 0-0 line 2985 [ 1374.250657][ T684] binder: 678:684 ioctl c0306201 200000c0 returned -14 00:33:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xe, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x8010743f, &(0x7f0000000000)) 00:33:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2a040000) [ 1374.283259][ T684] binder: BINDER_SET_CONTEXT_MGR already set [ 1374.306241][ T684] binder: 678:684 ioctl 40046207 0 returned -16 [ 1374.405729][ T735] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12, 0x0, 0x0}) 00:33:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0xc0045878, &(0x7f0000000000)) [ 1374.449480][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2b040000) [ 1374.538959][ T964] binder: 934:964 got transaction to context manager from process owning it [ 1374.615920][ T964] binder: 934:964 transaction failed 29201/-22, size 0-0 line 2985 [ 1374.682323][ T1006] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1374.687355][ T964] binder: 934:964 ioctl c0306201 200000c0 returned -14 [ 1374.720633][ T964] binder: BINDER_SET_CONTEXT_MGR already set [ 1374.760042][ T964] binder: 934:964 ioctl 40046207 0 returned -16 [ 1374.891867][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:33:48 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) 00:33:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6t\x00', 'bridge_slave_0\x00', 'bata\x81\x000\x00', '\x00', @empty, [], @link_local, [], 0xe0, 0xe0, 0x110, [@rateest={'rateest\x00', 0x48, {{'ip6erspan0\x00', 'veth0_to_bond\x00'}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x218) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 00:33:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0xc0045878, &(0x7f0000000000)) 00:33:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2c040000) 00:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, 0x0}) 00:33:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xf, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1375.038459][ T1125] binder: 1123:1125 got transaction to context manager from process owning it [ 1375.064969][ T1124] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1375.078239][ T1125] binder: 1123:1125 transaction failed 29201/-22, size 0-0 line 2985 00:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x4) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = dup(r0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)) fcntl$getflags(0xffffffffffffffff, 0x1) [ 1375.113843][ T1125] binder: 1123:1125 ioctl c0306201 200000c0 returned -14 [ 1375.152889][ T1125] binder: BINDER_SET_CONTEXT_MGR already set 00:33:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2d040000) [ 1375.178489][ T1125] binder: 1123:1125 ioctl 40046207 0 returned -16 00:33:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0xc008744c, &(0x7f0000000000)) 00:33:48 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x800000000000055, 0x0, 0x0, [{}]}) 00:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c, 0x0, 0x0}) [ 1375.331912][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1375.346262][ T1324] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1375.387805][ T1362] binder: 1361:1362 got transaction to context manager from process owning it [ 1375.410919][ T1362] binder: 1361:1362 transaction failed 29201/-22, size 0-0 line 2985 00:33:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0xc0189436, &(0x7f0000000000)) 00:33:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1375.460772][ T1362] binder: 1361:1362 ioctl c0306201 200000c0 returned -14 [ 1375.495327][ T1362] binder: BINDER_SET_CONTEXT_MGR already set [ 1375.528881][ T1362] binder: 1361:1362 ioctl 40046207 0 returned -16 [ 1375.704235][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0) 00:33:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2e040000) 00:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60, 0x0, 0x0}) 00:33:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0xc020660b, &(0x7f0000000000)) 00:33:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x10, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1376.001041][ T1596] binder: 1585:1596 got transaction to context manager from process owning it 00:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1376.050987][ T1596] binder: 1585:1596 transaction failed 29201/-22, size 0-0 line 2985 [ 1376.100763][ T1596] binder: 1585:1596 ioctl c0306201 200000c0 returned -14 00:33:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:33:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4a0000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000340)={0x10000, 0x0, [0xffffffffffffff00, 0x0, 0x50d5fabf, 0x80000000, 0x5, 0xffffffffffffffff, 0xa9, 0xfff]}) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000200)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x7ff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000480)={0xfffffffffffffffe, r3}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x52) prctl$PR_GET_SECCOMP(0x15) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1376.176429][ T1592] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1376.189079][ T1596] binder: BINDER_SET_CONTEXT_MGR already set [ 1376.201988][ T1596] binder: 1585:1596 ioctl 40046207 0 returned -16 00:33:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2f040000) 00:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68, 0x0, 0x0}) [ 1376.376961][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:49 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000084000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0xe, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 00:33:49 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x801, 0x0) r1 = accept(r0, &(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000015c0)=0xfffffffffffffd29) sendmsg$inet_sctp(r1, &(0x7f0000001440)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="ebc40ea1c66010a55b97354fca84e48b779726ef900f5df079dd1347d6a79282bf6426fc6dd45776f1d1b9b3cdc6c5", 0x2f}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="18d7f3a057e6831b22ca3c518b80fb04770ef0442863e9437f82e655573bfef93f9f3843cd29b0f982f86da2e7", 0x2d}], 0x4, 0x0, 0x0, 0x40080}, 0x11) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) [ 1376.490599][ T2014] binder: 2013:2014 got transaction to context manager from process owning it [ 1376.568602][ T2014] binder: 2013:2014 transaction failed 29201/-22, size 0-0 line 2985 [ 1376.654081][ T2014] binder: 2013:2014 ioctl c0306201 200000c0 returned -14 [ 1376.671863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1376.678371][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:33:49 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) waitid(0x1, r2, &(0x7f0000000080), 0x20000009, &(0x7f0000000180)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x90280, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000340)={0xd65, 0x7, 0x1}) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) 00:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x11, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1376.779181][ T2014] binder: BINDER_SET_CONTEXT_MGR already set [ 1376.792040][ T2016] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1376.833995][ T2014] binder: 2013:2014 ioctl 40046207 0 returned -16 00:33:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x30040000) [ 1376.937943][ T2023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c, 0x0, 0x0}) [ 1376.980497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1376.986326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1376.992185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1376.997953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.003800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.008798][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1377.009555][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.106916][ T2281] binder: 2251:2281 got transaction to context manager from process owning it [ 1377.131575][ T2023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:33:50 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) [ 1377.151926][ T2281] binder: 2251:2281 transaction failed 29201/-22, size 0-0 line 2985 [ 1377.165256][ T2252] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1377.167303][ T2281] binder: 2251:2281 ioctl c0306201 200000c0 returned -14 [ 1377.225227][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.270022][ T2281] binder: BINDER_SET_CONTEXT_MGR already set 00:33:50 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x1000000220000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)) [ 1377.319984][ T2281] binder: 2251:2281 ioctl 40046207 0 returned -16 00:33:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x31040000) 00:33:50 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) [ 1377.553728][ T2438] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1377.576436][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:33:50 executing program 1: recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 00:33:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x74, 0x0, 0x0}) 00:33:50 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) [ 1377.710524][ T2458] binder: 2454:2458 got transaction to context manager from process owning it [ 1377.719408][ T2458] binder: 2454:2458 transaction failed 29201/-22, size 0-0 line 2985 [ 1377.719436][ T2458] binder: 2454:2458 ioctl c0306201 200000c0 returned -14 00:33:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x12, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:51 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x32040000) 00:33:51 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') close(r0) 00:33:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x105042) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x4, 0x107200) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x3f) accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x1) [ 1377.878420][ T2458] binder: BINDER_SET_CONTEXT_MGR already set [ 1377.902307][ T2458] binder: 2454:2458 ioctl 40046207 0 returned -16 00:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGDEBUG(r0, 0x80047441, 0x0) 00:33:51 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a, 0x0, 0x0}) [ 1378.107117][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:51 executing program 1: 00:33:51 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x0, 0x2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x800, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x10000, @remote}}, 0x9000000000000000, 0x5, 0xfffffffffffffff8, 0x0, 0x80}, &(0x7f0000000100)=0x98) [ 1378.200049][ T2595] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1378.224807][ T2882] binder: 2823:2882 got transaction to context manager from process owning it 00:33:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1378.334251][ T2882] binder: 2823:2882 transaction failed 29201/-22, size 0-0 line 2985 [ 1378.410826][ T2882] binder: 2823:2882 ioctl c0306201 200000c0 returned -14 [ 1378.461164][ T2882] binder: BINDER_SET_CONTEXT_MGR already set [ 1378.480751][ T2882] binder: 2823:2882 ioctl 40046207 0 returned -16 [ 1378.628417][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x13, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) 00:33:51 executing program 1: 00:33:51 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x33040000) 00:33:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0}) 00:33:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:52 executing program 1: [ 1378.780590][ T3020] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1378.792289][ T3024] binder: 3017:3024 got transaction to context manager from process owning it 00:33:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) recvmsg(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1, &(0x7f00000003c0)=""/126, 0x7e}, 0x10020) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x8, 0x4) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1378.872723][ T3024] binder: 3017:3024 transaction failed 29201/-22, size 0-0 line 2985 [ 1378.891428][ T3024] binder: 3017:3024 ioctl c0306201 200000c0 returned -14 00:33:52 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x34040000) 00:33:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1378.918686][ T3024] binder: BINDER_SET_CONTEXT_MGR already set 00:33:52 executing program 1: [ 1378.950806][ T3024] binder: 3017:3024 ioctl 40046207 0 returned -16 [ 1379.050289][ T3208] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1379.118435][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x14, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0}) 00:33:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x81, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r2, 0x76, "151394", "904ca3ba644cd05d93e7e1c2782ea2ab6b3ef31d4641de475d82be11792bd668729744d3f5168da4c5543a1a025e1ed15648a595806087c25e057c5ce9838b03eb6d318b5f8341c7614868466535714142d803e2b83130fe664b911cb4bcb61fdf1276fe0237577815db6c52e1a42b38f38a709ec6e03820f4ad1f0956265177edd222e1e0afe1779987fff4d3b78acda27a2a084407f60703a319f185bf319a1a4a0d53f1190f3eb949332c41eac88fa50b9c2f7d6aaf280b308401948385b18d3238cf88ddac5747598a0f00b99df7d423c6cff402476af11540eb1d25a9d3db70059d44b4bf0d91e64b0ff9dd3ce1d346a3d311f43dd50835ff47d76037fa"}}, 0x110) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:52 executing program 1: 00:33:52 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x34260000) 00:33:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1379.471864][ T3296] binder: 3289:3296 got transaction to context manager from process owning it 00:33:52 executing program 1: [ 1379.513877][ T3299] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1379.527041][ T3296] binder: 3289:3296 transaction failed 29201/-22, size 0-0 line 2985 [ 1379.545768][ T3296] binder: 3289:3296 ioctl c0306201 200000c0 returned -14 00:33:52 executing program 1: [ 1379.578845][ T3296] binder: BINDER_SET_CONTEXT_MGR already set 00:33:52 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x35040000) 00:33:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) [ 1379.650859][ T3296] binder: 3289:3296 ioctl 40046207 0 returned -16 00:33:52 executing program 1: [ 1379.758647][ T3360] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1379.833847][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:33:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x15, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) 00:33:53 executing program 1: 00:33:53 executing program 4: r0 = gettid() ioprio_get$pid(0x1, r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) 00:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600, 0x0, 0x0}) 00:33:53 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x35260000) 00:33:53 executing program 1: 00:33:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) 00:33:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, 0x0, 0x0) [ 1380.719987][ T3640] binder: 3638:3640 got transaction to context manager from process owning it 00:33:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x201, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:53 executing program 1: [ 1380.767865][ T3640] binder: 3638:3640 transaction failed 29201/-22, size 0-0 line 2985 [ 1380.794419][ T3640] binder: 3638:3640 ioctl c0306201 200000c0 returned -14 [ 1380.808472][ T3640] binder: BINDER_SET_CONTEXT_MGR already set [ 1380.822710][ T3640] binder: 3638:3640 ioctl 40046207 0 returned -16 00:33:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=@expire={0x368, 0x18, 0x10, 0x70bd28, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x1000, 0x4e22, 0x5, 0x4e24, 0xfff, 0xa, 0x80, 0xa0, 0x2c, 0x0, r2}, {@in6=@ipv4={[], [], @local}, 0x4d3, 0x6c}, @in6=@empty, {0x839, 0xfffffffffffffff7, 0x9, 0x3ff, 0xffffffffffffffff, 0x200, 0x3, 0x1}, {0x7, 0x4, 0x3ff, 0x9}, {0xffffffffffffffff, 0x200, 0x1000}, 0x70bd25, 0x3502, 0x2, 0x1, 0x93, 0x1}, 0x1cf8000}, [@algo_crypt={0xfc, 0x2, {{'ecb(arc4)\x00'}, 0x5a0, "ce68c4ba53ab72299313e04809b384593296593c1532836bb716e6a53339b931048f346f5a1ac8a388a338ba60f635966457903386a357c2e69602e961574d6f743ba06c4f6a8876c749878d22e8c65437e37a0ec7fa6fce7a08c1fda1134f55fdae824146120fa86e0280f92072892986ecacbeeb2037ce4f14d3e72cf24aaaaffb385c70d0fc6943ce1570280ad373c6f1cf9e6c588991f8b7a4f9d8138d4eb3649ebd069b72826f1121942f9ffc3c2b3136c9"}}, @ipv4_hthresh={0x8, 0x3, {0x8, 0x5}}, @tfcpad={0x8, 0x16, 0x9}, @lifetime_val={0x24, 0x9, {0x9a, 0x702, 0x1, 0x449}}, @lifetime_val={0x24, 0x9, {0x0, 0x9, 0x10000, 0x40}}, @extra_flags={0x8, 0x18, 0x400}, @algo_comp={0x114, 0x3, {{'deflate\x00'}, 0x650, "1a1f576baa3414a9331957a27ab8f728b3a828dbea407f0304759a3169ec23ea4f503fc7be771b1207472ffcfd273f844c412c77bf47f25cc8103b88cfd731ba8233031404f349d65619b65ef6f46f2ed0a39d50542da13ebe2f29e9a7ba95d69c7220cf2ac226877423262038407603baf069fac0ccc277e3c474789408b82b48bc570d9ec2c20422b25505bcfe1f915d2bee71d22cdf339c206d743006ae3656366871ccb45dc0dfaf71716ae86b66a12d9d33c052db80220531b9ec599a2ac7c8cb6bb08c0ed690b3"}}]}, 0x368}, 0x1, 0x0, 0x0, 0x20008881}, 0x40810) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000080)) 00:33:54 executing program 1: 00:33:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, 0x0, 0x0) [ 1380.956041][ T3641] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0}) [ 1381.037676][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:33:54 executing program 1: 00:33:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, 0x0, 0x0) [ 1381.171094][ T3867] binder: 3866:3867 got transaction to context manager from process owning it [ 1381.256306][ T3867] binder: 3866:3867 transaction failed 29201/-22, size 0-0 line 2985 [ 1381.350637][ T3867] binder: 3866:3867 ioctl c0306201 200000c0 returned -14 00:33:54 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x36040000) 00:33:54 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs(r0, &(0x7f0000000100)='net/icmp\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x3) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f00000000c0)) 00:33:54 executing program 1: [ 1381.426691][ T3867] binder: BINDER_SET_CONTEXT_MGR already set 00:33:54 executing program 0: [ 1381.496928][ T3867] binder: 3866:3867 ioctl 40046207 0 returned -16 00:33:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x301, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:54 executing program 1: 00:33:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000040)) 00:33:54 executing program 1: 00:33:54 executing program 0: 00:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa00, 0x0, 0x0}) [ 1381.770644][ T3878] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1381.774759][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:55 executing program 1: 00:33:55 executing program 0: [ 1381.874733][ T4079] binder: 4052:4079 got transaction to context manager from process owning it 00:33:55 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3f000000) 00:33:55 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x940, 0x0) bind$netrom(r0, &(0x7f0000000080)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000180)) [ 1381.928972][ T4079] binder: 4052:4079 transaction failed 29201/-22, size 0-0 line 2985 [ 1381.947389][ T4079] binder: 4052:4079 ioctl c0306201 200000c0 returned -14 00:33:55 executing program 1: [ 1381.997888][ T4079] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.026396][ T4079] binder: 4052:4079 ioctl 40046207 0 returned -16 00:33:55 executing program 0: [ 1382.219113][ T4098] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x501, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x17, 0x10, 0x4}, {{0x0, 0x2710}, 0x2, 0xfc3}, {{}, 0x11, 0x7ff, 0x6}], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x82000, 0x41) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:55 executing program 1: 00:33:55 executing program 0: 00:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200, 0x0, 0x0}) [ 1382.300166][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:33:55 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3f040000) 00:33:55 executing program 1: 00:33:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @speck128}) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:55 executing program 0: [ 1382.415633][ T4211] binder: 4208:4211 got transaction to context manager from process owning it [ 1382.453222][ T4211] binder: 4208:4211 transaction failed 29201/-22, size 0-0 line 2985 [ 1382.494823][ T4211] binder: 4208:4211 ioctl c0306201 200000c0 returned -14 00:33:55 executing program 0: 00:33:55 executing program 1: [ 1382.535816][ T4211] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.561089][ T4211] binder: 4208:4211 ioctl 40046207 0 returned -16 00:33:55 executing program 0: 00:33:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x601, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:55 executing program 4: r0 = inotify_init() r1 = fcntl$dupfd(r0, 0x0, r0) tee(r0, r0, 0x20, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) exit_group(0x9) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5ee, 0x400000) mincore(&(0x7f0000fea000/0x14000)=nil, 0x14000, &(0x7f00000000c0)=""/74) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x0}) r5 = mmap$binder(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0xf8, 0x0, &(0x7f0000000540)=[@exit_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x58, 0x40, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x1, 0x3, 0x17}, @fd={0x66642a85, 0x0, r2, 0x0, 0x4}, @flat={0x73622a85, 0x1, r4, 0x4}], &(0x7f0000000200)=[0x48, 0x0, 0x20, 0x38, 0x28, 0x18, 0x68, 0x0]}, 0x8c}}, @request_death={0x400c630e, 0x4, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x30, 0x18, &(0x7f00000003c0)=[@flat={0x0, 0x2c842f8a0a946cf4, r5, 0x3}, @fd={0x66642a85, 0x0, r3}], &(0x7f0000000400)=[0x78, 0x68, 0x40]}}, @register_looper, @free_buffer={0x40086303, r6}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x38, 0x8, &(0x7f00000004c0)=[@flat={0x77682a85, 0x101, r7, 0x1}, @fda={0x66646185, 0x1, 0x3, 0x22}], &(0x7f0000000500)=[0x48]}}], 0x82, 0x0, &(0x7f0000000640)="d57b3f9e34b8cc5d6c6d4ee026568da21f27f31f7c2bd4a1b23b517d51b8a41b2536337fc4d0b7bddf20514aafd045a00a4e9d369f8380cfaf8dc3c95064fd86d87d63ca00075459c20ec4b6f006e9fcb22ef540417a7623665a4b6c699f18e05ec3afc1ad2180fba86766ced7dfbe635f3b77f270285d0016f5c8b7cad820a4a5ca"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x3, 0x3, 0xffffffff, 0x3, 0x40}) ioctl$PPPIOCGUNIT(r2, 0x40107446, &(0x7f0000000000)) [ 1382.659770][ T4249] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:55 executing program 1: 00:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000, 0x0, 0x0}) 00:33:55 executing program 0: [ 1382.750107][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 1382.825453][ T4430] binder: 4428:4430 got transaction to context manager from process owning it 00:33:56 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x40000000) 00:33:56 executing program 1: [ 1382.870085][ T4430] binder: 4428:4430 transaction failed 29201/-22, size 0-0 line 2985 00:33:56 executing program 0: 00:33:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:56 executing program 1: [ 1382.915002][ T4430] binder: 4428:4430 ioctl c0306201 200000c0 returned -14 [ 1382.953300][ T4430] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.981439][ T4430] binder: 4428:4430 ioctl 40046207 0 returned -16 00:33:56 executing program 1: 00:33:56 executing program 0: [ 1383.172671][ T4521] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1383.243887][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:33:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x701, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x181800, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000001c0)="a2e426886b62fde6caa52d10cd9a920d62aba638eb9f9629341a5b3f36e72eb15203658e39efaec03100aa76c082e53639fa5d51ed4f812ddfb699b1214d294a45e33f678ca10e2a18f1f7f5f41ec8c090dfb67267a5ddafd184a7056c0f9430261e6f1c79e0dcffa6387ab393d4f130c9004b81258ca5f4f84125ca16044f78bc07f0d59fbec01f3d1a258e55d1c6633c5868cc50548131fa089574b41ff5b1a7ba13c058ae707b3ebd417fd22f6142fe7b1abe983d44a45dd9d8768231902929aec5c403ebedb36bb3aa0b5d0f172e6e0b16896137957c7fbb957f50") 00:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4800, 0x0, 0x0}) 00:33:56 executing program 0: 00:33:56 executing program 1: 00:33:56 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x40040000) [ 1383.461613][ T4647] binder: 4646:4647 got transaction to context manager from process owning it [ 1383.496676][ T4652] QAT: Invalid ioctl 00:33:56 executing program 0: 00:33:56 executing program 1: [ 1383.514928][ T4647] binder: 4646:4647 transaction failed 29201/-22, size 0-0 line 2985 [ 1383.526708][ T4657] QAT: Invalid ioctl 00:33:56 executing program 0: 00:33:56 executing program 1: [ 1383.556017][ T4653] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1383.566320][ T4647] binder: 4646:4647 ioctl c0306201 200000c0 returned -14 [ 1383.613267][ T4647] binder: BINDER_SET_CONTEXT_MGR already set [ 1383.640561][ T4647] binder: 4646:4647 ioctl 40046207 0 returned -16 00:33:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:56 executing program 1: 00:33:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x801, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:56 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x41040000) 00:33:57 executing program 0: 00:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c00, 0x0, 0x0}) 00:33:57 executing program 1: [ 1383.811248][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:57 executing program 0: 00:33:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0xfe45e90ddc6469c1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0x7aea3245, 0x20000) dup(r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/cachefiles\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000a00)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000900)=""/246) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000340)="9f7a864bae8b1d06f76d975d5c03424d39b3cf8861df2a6e59e25dd7ddb9cd749669d3a93df312cdaa32665c9cbab283fb283c0e415d43bf4e4d586c690532503c440e81822805e639f5d658c82d201c29753bfa130e60640faeef37cc5781692500cc47cab9a685b69d4d457c71d75d8672ac6f29274deb808f17f1c0bd320b2b0f006471b23075f8b983b8833d6d0290d2af4cc03990da5628306c8aca7e37cec2c6ed8e871fdd7eff789eff9b8e47cb086eae3ed5fd5aaef4f329b61a1ec6f9b26a5cb99407103d0c6eb0868dadc792e0e9e85bad60affb6183ba20dff0d258ccb319bd31e74efd391b5ca2fec67a4a2e97cb0de58c6d66fd9345588e2a", 0xff, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000180)=""/131, 0x83) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1383.921780][ T4871] binder: 4870:4871 got transaction to context manager from process owning it [ 1383.936732][ T4866] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:57 executing program 1: 00:33:57 executing program 0: 00:33:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x65ad, "5965d1f9358999392aeae34bb1625756512d49240a7c47a08804ab5b3775fa40", 0x2, 0x9, 0xac45, 0xb700, 0x2}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1383.986110][ T4871] binder: 4870:4871 transaction failed 29201/-22, size 0-0 line 2985 [ 1384.015381][ T4871] binder: 4870:4871 ioctl c0306201 200000c0 returned -14 00:33:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x901, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1384.069828][ T4871] binder: BINDER_SET_CONTEXT_MGR already set [ 1384.090564][ T4871] binder: 4870:4871 ioctl 40046207 0 returned -16 00:33:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000240), 0x4) 00:33:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:33:57 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x42040000) 00:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000, 0x0, 0x0}) [ 1384.262675][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) 00:33:57 executing program 1: [ 1384.312526][ T5132] JFS: discard option not supported on device [ 1384.380737][ T5195] binder: 5155:5195 got transaction to context manager from process owning it [ 1384.406547][ T5196] JFS: discard option not supported on device 00:33:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xa01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:57 executing program 1: [ 1384.429128][ T5195] binder: 5155:5195 transaction failed 29201/-22, size 0-0 line 2985 [ 1384.429345][ T5147] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1384.482543][ T5195] binder: 5155:5195 ioctl c0306201 200000c0 returned -14 [ 1384.506347][ T5195] binder: BINDER_SET_CONTEXT_MGR already set 00:33:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:33:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1384.527270][ T5195] binder: 5155:5195 ioctl 40046207 0 returned -16 00:33:57 executing program 1: [ 1384.695088][ T5322] JFS: discard option not supported on device 00:33:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6800, 0x0, 0x0}) [ 1384.796066][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:33:58 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x43040000) 00:33:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:33:58 executing program 1: [ 1384.890155][ T5414] binder: 5410:5414 got transaction to context manager from process owning it [ 1384.986191][ T5414] binder: 5410:5414 transaction failed 29201/-22, size 0-0 line 2985 [ 1385.005558][ T5421] JFS: discard option not supported on device 00:33:58 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$binfmt_aout(r1, &(0x7f0000000040), 0x20) write(r1, &(0x7f0000000100), 0x34000) close(r0) [ 1385.055648][ T5414] binder: 5410:5414 ioctl c0306201 200000c0 returned -14 00:33:58 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x3) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) r2 = getuid() r3 = geteuid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000340), &(0x7f0000000380)) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() getresgid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) getgroups(0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) socket$pppoe(0x18, 0x1, 0x0) write$nbd(r1, &(0x7f0000000940)={0x67446698, 0x1, 0x2, 0x1, 0x4, "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"}, 0x1010) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000001980), 0x4) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x5, r4}], {0x4, 0x1}, [{0x8, 0x5, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}, {0x8, 0x3, r8}, {0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x2, r13}, {0x8, 0x4, r14}], {0x10, 0x2}, {0x20, 0x2}}, 0x8c, 0x2) [ 1385.102875][ T5418] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1385.142015][ T5414] binder: BINDER_SET_CONTEXT_MGR already set [ 1385.148014][ T5414] binder: 5410:5414 ioctl 40046207 0 returned -16 00:33:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xb01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:33:58 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x44040000) 00:33:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) 00:33:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 00:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c00, 0x0, 0x0}) 00:33:58 executing program 1: fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x0, r1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000a00)={0x0, 'veth1\x00'}, 0x18) [ 1385.466394][ T5632] JFS: discard option not supported on device [ 1385.473065][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1385.500860][ T5644] binder: 5642:5644 got transaction to context manager from process owning it [ 1385.550713][ T5644] binder: 5642:5644 transaction failed 29201/-22, size 0-0 line 2985 00:33:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1385.611618][ T5644] binder: 5642:5644 ioctl c0306201 200000c0 returned -14 00:33:58 executing program 4: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x2000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40042, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1385.659306][ T5644] binder: BINDER_SET_CONTEXT_MGR already set [ 1385.711497][ T5644] binder: 5642:5644 ioctl 40046207 0 returned -16 [ 1385.744055][ T5637] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:59 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x5bd, 0x0}}], 0x214, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) [ 1385.793003][ T5846] JFS: discard option not supported on device 00:33:59 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x45040000) 00:33:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1385.928236][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1386.079621][ T5962] JFS: discard option not supported on device [ 1386.274388][ T5959] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:33:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7400, 0x0, 0x0}) 00:33:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:33:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:33:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="cb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1386.379593][ T6070] binder: 6063:6070 got transaction to context manager from process owning it [ 1386.404310][ T6066] JFS: discard option not supported on device [ 1386.417140][ T6070] binder: 6063:6070 transaction failed 29201/-22, size 0-0 line 2985 00:33:59 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x46040000) 00:33:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000440)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x44}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1386.430093][ T6070] binder: 6063:6070 ioctl c0306201 200000c0 returned -14 [ 1386.449120][ T6070] binder: BINDER_SET_CONTEXT_MGR already set [ 1386.462202][ T6070] binder: 6063:6070 ioctl 40046207 0 returned -16 00:33:59 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:33:59 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 00:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00, 0x0, 0x0}) [ 1386.595084][ T6264] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1386.613176][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1386.656585][ T6324] JFS: discard option not supported on device [ 1386.682427][ T6361] binder: 6340:6361 got transaction to context manager from process owning it 00:33:59 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x47040000) [ 1386.713157][ T6361] binder: 6340:6361 transaction failed 29201/-22, size 0-0 line 2985 [ 1386.733110][ T6361] binder: 6340:6361 ioctl c0306201 200000c0 returned -14 00:33:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000019c0)="0adc1f123c123f3188b070") setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 1386.762589][ T6361] binder: BINDER_SET_CONTEXT_MGR already set [ 1386.778151][ T6361] binder: 6340:6361 ioctl 40046207 0 returned -16 [ 1386.817190][ T6393] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1386.916621][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xd01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x4, 0x40040) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:00 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1000000, 0x0, 0x0}) 00:34:00 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x48000000) 00:34:00 executing program 1: r0 = socket$inet6(0xa, 0x80000000001, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) syz_emit_ethernet(0x140, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 1387.171555][ T6600] JFS: discard option not supported on device [ 1387.200135][ T6599] binder: 6598:6599 got transaction to context manager from process owning it 00:34:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4200, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:00 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1387.283743][ T6599] binder: 6598:6599 transaction failed 29201/-22, size 0-0 line 2985 [ 1387.301202][ T6599] binder: 6598:6599 ioctl c0306201 200000c0 returned -14 [ 1387.322557][ T6599] binder: BINDER_SET_CONTEXT_MGR already set 00:34:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a06012c000cd30fe8bd6efb120009000e0001000000000006000500fe2e", 0x2e}], 0x1}, 0x0) [ 1387.365087][ T6599] binder: 6598:6599 ioctl 40046207 0 returned -16 [ 1387.400233][ T6796] JFS: discard option not supported on device 00:34:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x45d, 0x40) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x72, @loopback, 0x800}}, [0x0, 0xff, 0x7f, 0x7fff, 0x451e5ab6, 0x1, 0x7, 0x2, 0x0, 0x8, 0x2505e20c, 0xb1, 0x81, 0x9e, 0x2]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x1000}, &(0x7f0000000200)=0xfffffffffffffe30) 00:34:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xe01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1387.452852][ T6609] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000009080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x36e, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) pipe(0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x9005, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x811e}, 0x100) 00:34:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) 00:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000, 0x0, 0x0}) 00:34:00 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x48040000) [ 1387.625302][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 1387.661760][ T6928] JFS: discard option not supported on device [ 1387.681447][ T6995] binder: 6993:6995 got transaction to context manager from process owning it [ 1387.716376][ T6995] binder: 6993:6995 transaction failed 29201/-22, size 0-0 line 2985 00:34:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='ip6erspan0\x00'}) 00:34:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1387.793294][ T6995] binder: 6993:6995 ioctl c0306201 200000c0 returned -14 [ 1387.868108][ T6995] binder: BINDER_SET_CONTEXT_MGR already set [ 1387.904311][ T6995] binder: 6993:6995 ioctl 40046207 0 returned -16 [ 1387.966784][ T7145] JFS: discard option not supported on device [ 1387.994807][ T7074] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x6, 0x7) 00:34:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000003e40)={@rand_addr="103cdca5c948df339b1c37580744e316"}, 0x14) 00:34:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3000000, 0x0, 0x0}) [ 1388.228294][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 1388.245682][ T7356] JFS: discard option not supported on device 00:34:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xf01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:01 executing program 4: r0 = accept4$tipc(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) fdatasync(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000080)='net/netstat\x00') ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) 00:34:01 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4c000000) 00:34:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) [ 1388.296462][ T7361] binder: 7360:7361 got transaction to context manager from process owning it [ 1388.317679][ T7361] binder: 7360:7361 transaction failed 29201/-22, size 0-0 line 2985 [ 1388.334066][ T7361] binder: 7360:7361 ioctl c0306201 200000c0 returned -14 [ 1388.375482][ T7361] binder: BINDER_SET_CONTEXT_MGR already set [ 1388.402970][ T7361] binder: 7360:7361 ioctl 40046207 0 returned -16 00:34:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:01 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x40a00, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={@null=' \x00', 0x6, 'ip6gretap0\x00'}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000100)) getsockopt$inet_mreqn(r0, 0x0, 0x200000000000024, &(0x7f0000000140)={@remote, @broadcast, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000440)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2d, r2}) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9) [ 1388.427771][ T7368] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4000000, 0x0, 0x0}) 00:34:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:01 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', 0x0, 0x0) [ 1388.537620][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 1388.593917][ T7642] JFS: discard option not supported on device [ 1388.651578][ T7689] binder: 7687:7689 got transaction to context manager from process owning it 00:34:01 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x60000000) 00:34:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:01 executing program 4: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x1000, 0x81}, {0x7000000000000000, 0x7ff}], r0}, 0x18, 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x800) fsetxattr$system_posix_acl(r2, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [{0x2, 0x2, r0}, {0x2, 0x7, r0}], {0x4, 0x3}, [{0x8, 0x0, r1}, {0x8, 0x4, r1}, {0x8, 0x5, r1}, {0x8, 0x1, r1}, {0x8, 0x4, r1}], {0x10, 0x2}, {0x20, 0x5}}, 0x5c, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r3, 0x40107446, &(0x7f0000000000)) [ 1388.719269][ T7689] binder: 7687:7689 transaction failed 29201/-22, size 0-0 line 2985 [ 1388.754640][ T7689] binder: 7687:7689 ioctl c0306201 200000c0 returned -14 [ 1388.832930][ T7689] binder: BINDER_SET_CONTEXT_MGR already set [ 1388.849942][ T7752] JFS: discard option not supported on device [ 1388.867830][ T7689] binder: 7687:7689 ioctl 40046207 0 returned -16 00:34:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1001, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1388.895551][ T7788] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:02 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMAC\xf5\xb24IPOUT\x00', 0x0, 0xffffffffffffff83, 0x0) 00:34:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5000000, 0x0, 0x0}) 00:34:02 executing program 1: inotify_init1(0x7fe) [ 1389.079847][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1389.114087][ T7993] JFS: discard option not supported on device 00:34:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x100, 0x100, 0x7ff, 0x9}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r2 = dup(r0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x17) mount(&(0x7f0000000100)=@md0='/dev/md0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ocfs2\x00', 0xa54801, 0x0) fsetxattr$security_ima(r2, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x0, 0x1, 0x80, 0x7e, "2c8e3a09669dc30b57762ab6ff2099f4e41e781656c3feb039ea645d38c45ade88b28a18572aff0035466303df845e2250c0a29013cff1ccdc3eb84f7a3b318b476a604189111b072e93c3bd5a0028da0ee2109581af1ff341c5a4ed1051a8908d57873a8c2f977ec78c3854bf8d28fea201957ab4e06871e6ca0d22e7a3"}, 0x88, 0x2) 00:34:02 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x68000000) 00:34:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1101, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1389.192741][ T8072] binder: 8018:8072 got transaction to context manager from process owning it [ 1389.230387][ T8072] binder: 8018:8072 transaction failed 29201/-22, size 0-0 line 2985 00:34:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000340)="59000000140019232b834b80043f679a10ff6400940005002a925aaa000000000100008400f0fffeff2c707f8f00ff050000000010000100090a1000410400000000fcff00000000000000000000000000000000000000000f", 0x59}], 0x1) [ 1389.262463][ T8072] binder: 8018:8072 ioctl c0306201 200000c0 returned -14 [ 1389.269692][ T8075] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1389.300063][ T8072] binder: BINDER_SET_CONTEXT_MGR already set [ 1389.325592][ T8072] binder: 8018:8072 ioctl 40046207 0 returned -16 00:34:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000040)=""/246) r1 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x1f, 0x200290) ioctl$sock_netdev_private(r1, 0x25ef, &(0x7f00000001c0)="c9d0956fee2c5282e24f15111ccd5feeeb571dc54f8d7f093435c6942a10f4e1268145c807df913dc67fad3216ab98606d3edfc19ab56cdc0db9517e5a4a279a7465659f0a72cbaba79223590e273e20805407fab3e5a28926a8cf") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x20000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/88, 0x58, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x10, &(0x7f00000004c0)={&(0x7f0000000400)=""/143, 0x8f, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x10, &(0x7f0000000540)={&(0x7f0000000240)=""/25, 0x1d2, r2}}, 0xfffffea2) ioctl$KDSETMODE(r1, 0x4b3a, 0x2) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'ah\x00'}, &(0x7f00000005c0)=0x1e) 00:34:02 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6c000000) [ 1389.366498][ T8087] JFS: discard option not supported on device 00:34:02 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@remote={[], 0xffffffffffffffff, 0xf}, 0x0, 'ifb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe5\xff\x00'}) 00:34:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000, 0x0, 0x0}) [ 1389.529022][ T8292] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1389.551242][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/66) 00:34:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400202, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000180)=0x6) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x18, "b02e02a9e35ef9953a0bc363407a8d56d4f20ed22e670490"}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b80)={r2, @in={{0x2, 0x4e24, @broadcast}}, 0x5, 0x2}, 0x90) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) [ 1389.585755][ T8308] binder: 8307:8308 got transaction to context manager from process owning it [ 1389.591128][ T8305] JFS: discard option not supported on device [ 1389.627625][ T8308] binder: 8307:8308 transaction failed 29201/-22, size 0-0 line 2985 [ 1389.678172][ T8308] binder: 8307:8308 ioctl c0306201 200000c0 returned -14 00:34:02 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x74000000) 00:34:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) [ 1389.733713][ T8308] binder: BINDER_SET_CONTEXT_MGR already set [ 1389.770292][ T8308] binder: 8307:8308 ioctl 40046207 0 returned -16 00:34:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1201, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) uselib(&(0x7f00000000c0)='./file0\x00') ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'veth0_to_team\x00', 0xfffffffffffffff9}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="2706c9a5838df3f2beffa4a22ff645e268fba7c8123eb0c6a31fd49eff336969c7fd7795b421c826af69b9f2392a990ff667fabba85e1dec516ea82d3f53ec74bfd21ee2eca52ab19f8ee0773e84d04b3bbb8a32209f628b91a9f217628586683fd8277fd4c95866a8a9c5553a33a864", 0x70}, {&(0x7f0000000540)="e978abc9265db8e020fb14f2b81eff3d0bf3a616c69e2a09c28118aaa99a629614dc1dc6af13f1ce65aaf100894dd02a749431523c31b5bdb6c200c70ed2d3dde294e5ed219b3dddcd94b4dca6ae6c12877bb2b8bdcf25b453f67eb63362aa75e1b4315a6ba024b7880294483ee7b85fd3bde583780becaccd8df0479a69fa5db964d4a47055466feef22a9561b09b0623ed151c61fb3b007d1be5aefb28cb082a7815a45b1d8254bdf82ded3c1a8e3627eafb89b985f3b2ae9683051cb722621186ab75", 0xc4}], 0x2) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x0, 0x3, 0x10001, 0x1ff}, 0x2, 0x0, 0x0, 0x0, "ce2261a9b8f3b351"}, 0x10}, 0x1, 0x0, 0x0, 0x4040011}, 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x3726, 0x0) ioctl$PPPIOCGUNIT(r3, 0x40107446, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 00:34:03 executing program 1: dup(0xffffffffffffffff) clone(0x200000200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, 0x0, 0x5f, 0x0, 0x0, 0x1e1) r3 = gettid() fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) kcmp$KCMP_EPOLL_TFD(r3, r0, 0x2, 0xffffffffffffffff, 0x0) exit(0x0) open(&(0x7f0000000140)='./file0\x00', 0x401, 0x0) [ 1389.888359][ T8364] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7000000, 0x0, 0x0}) 00:34:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) 00:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7a000000) [ 1389.962455][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1390.001974][ T8426] JFS: discard option not supported on device [ 1390.061207][ T8448] binder: 8436:8448 got transaction to context manager from process owning it 00:34:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f00000000c0)) [ 1390.120912][ T8448] binder: 8436:8448 transaction failed 29201/-22, size 0-0 line 2985 [ 1390.148186][ T8448] binder: 8436:8448 ioctl c0306201 200000c0 returned -14 [ 1390.177542][ T8448] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.194068][ T8512] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1390.216486][ T8611] JFS: discard option not supported on device 00:34:03 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80000000) [ 1390.222422][ T8448] binder: 8436:8448 ioctl 40046207 0 returned -16 00:34:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x8cffffff) [ 1390.397781][ T8757] JFS: discard option not supported on device [ 1390.430849][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1390.466889][ T8760] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1301, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x18240, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x26) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 00:34:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa000000, 0x0, 0x0}) 00:34:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xa7210000) 00:34:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x349, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) [ 1390.747946][ T8775] binder: 8764:8775 got transaction to context manager from process owning it [ 1390.750502][ T8768] JFS: discard option not supported on device [ 1390.775278][ T8775] binder: 8764:8775 transaction failed 29201/-22, size 0-0 line 2985 [ 1390.804546][ T8775] binder: 8764:8775 ioctl c0306201 200000c0 returned -14 [ 1390.857815][ T8775] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.894602][ T8775] binder: 8764:8775 ioctl 40046207 0 returned -16 00:34:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1401, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1390.985268][ T8776] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12000000, 0x0, 0x0}) [ 1391.074745][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:34:04 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x12002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x1}) 00:34:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:04 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xc0ed0000) [ 1391.216572][ T9007] binder: 8988:9007 got transaction to context manager from process owning it [ 1391.264431][ T9007] binder: 8988:9007 transaction failed 29201/-22, size 0-0 line 2985 [ 1391.318733][ T9007] binder: 8988:9007 ioctl c0306201 200000c0 returned -14 [ 1391.348684][ T9060] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:04 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x2100) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000180)={0x7, 0x1, 0x3, 0xfffffffffffffffa, 0x0, 0x40}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) r2 = msgget(0x2, 0x0) msgsnd(r2, &(0x7f0000000040)={0x0, "9b3111af6cdf049d11b9f1ba184176c1275123c369dd5638479d11ba4755f7bb1c143b046768c9334602ccf088727b8e527848d4464fbed555af8dc4da31de5dd04dadea4de55d27a05700fb54a8750bcdc61ad7471656a06eebd568e19c2e16f087d2cfa529876ba9d1427046f2fa6959a19aba579902e2b66e70b02413aa112e4928b9ec506cbaff4850900524257df0bb0520fe63d807ea823fd92cfc6dbcf9e13df1faa2e0b13c6c1a73afe2"}, 0xb6, 0x0) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) [ 1391.368051][ T9007] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.394038][ T9007] binder: 8988:9007 ioctl 40046207 0 returned -16 00:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="d8"], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r3, &(0x7f0000000200)=""/4096, 0x1000, 0x0) 00:34:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:04 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xcefaad1b) 00:34:04 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xffffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000000340)="b95c19615f4f27ffc04ce648dc06e13938471d113246edcd338f178fe01f9bab19cbc49152c5b8f4bb1a87ee0553d4bb0e64ca8ffaf6d0ea558a647024cf60a4641929fa64ffc386ff0c8efb0a02834390654108462f611ba751fe4c57df028f9de65dc42d9ad8bccb8e618c1ab96358293798104e4037a44a9adcb218bf359adb53aa045fc488cf74fafd1db6ec8c95d30ed2dc3673a1cf91ac893d530648bdf3613f0b27e3f01b871c5dfa9c30d55d321825df5cf3c39d7097c856c222bb5eaabd2b2034cba517df63d995fa405f8d31aa5602a2fd2921675060", 0xdb, 0x3ff}, {&(0x7f0000000440)="108e95c655bfdef31247fba873c9d47b673e839c01b8f9b696f691a5e0c00de728ef51fb3b3f31da25a60cc49c53dc031c247533151b761ec7319fe48b808ccea583d8938fc2eb69d1d9669e406b08eda0885398da6ec67a148e0e0e5b5685bb409bf9d0c1ae5bbad7eb96049fc63a6d2fbeaa49ce1ddfd15a2b9021c63f01721af59c41204462b73d11f843065e0dafe8f003b61204d6ff9ed500b94fe453ac4c53a8a06d7de1de7e0847a8156aa6224c340bd78e4a50acaa7bc6bd7431df208920c0862cb84ce03d4e", 0xca, 0x9}, {&(0x7f00000000c0)="fe2b0672288a49d00412728b4809acb22b98ed24db409a983268ad581317ccbaee233e19c119", 0x26, 0x1}, {&(0x7f0000000180)="d89f2a5bea7a8d214fa9b3d91fb4266b4e20d0318cf89f5ca96133ec73f71530c2b6b85938267cb2f566d10aa574f9fa85769e4b57e6b87c21e6ad7aee8f9b1bc07b", 0x42, 0x2}, {&(0x7f0000000100)="81ce84", 0x3, 0xa8}], 0x2, &(0x7f0000000740)={[{@uid={'uid', 0x3d, r1}}, {@cruft='cruft'}, {@block={'block', 0x3d, 0xe00}}, {@session={'session', 0x3d, 0x5}}, {@dmode={'dmode', 0x3d, 0x1}}, {@gid={'gid', 0x3d, r2}}, {@session={'session', 0x3d, 0x7}}, {@map_off='map=off'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\''}}, {@appraise_type='appraise_type=imasig'}, {@subj_role={'subj_role', 0x3d, '/dev/ppp\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x20000000, 0x0, 0x0}) [ 1391.625688][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1391.755061][ T9309] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1391.773869][ T9315] binder: 9312:9315 got transaction to context manager from process owning it 00:34:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1501, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1391.810912][ T9315] binder: 9312:9315 transaction failed 29201/-22, size 0-0 line 2985 [ 1391.818009][ T27] audit: type=1804 audit(1551227644.993:69): pid=9318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir090442989/syzkaller.rNz2nZ/2571/bus" dev="sda1" ino=17735 res=1 [ 1391.845166][ T9315] binder: 9312:9315 ioctl c0306201 200000c0 returned -14 [ 1391.872820][ T9315] binder: BINDER_SET_CONTEXT_MGR already set 00:34:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1391.921030][ T9315] binder: 9312:9315 ioctl 40046207 0 returned -16 00:34:05 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:05 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xdf210000) 00:34:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1601, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48000000, 0x0, 0x0}) 00:34:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x8000}, 0x1c) [ 1392.107243][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1392.123455][ T9622] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:05 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'yam0\x00', 0x0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={r2, 0x7fffffff, 0x80c, 0xfffffffffffffff8, 0x9, 0x7, 0x23}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @multicast2}}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000000c0)) [ 1392.186824][ T9638] binder: 9637:9638 got transaction to context manager from process owning it [ 1392.227836][ T9638] binder: 9637:9638 transaction failed 29201/-22, size 0-0 line 2985 00:34:05 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf4ffffff) 00:34:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:05 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xc200, 0x0) r1 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x208000, 0x60) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000600)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a80)) getpid() getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000ac0)) getpgid(0xffffffffffffffff) gettid() sendmsg$netlink(r0, &(0x7f0000009080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000008b40)=ANY=[@ANYBLOB="10000000396d00fb"], 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x800) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) ioctl$sock_proto_private(r2, 0x89ea, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x456) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 1392.270741][ T9638] binder: 9637:9638 ioctl c0306201 200000c0 returned -14 [ 1392.296088][ T9638] binder: BINDER_SET_CONTEXT_MGR already set 00:34:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1701, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1392.341483][ T9638] binder: 9637:9638 ioctl 40046207 0 returned -16 [ 1392.399488][ T9749] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c000000, 0x0, 0x0}) [ 1392.509760][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:34:05 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf5ffffff) 00:34:05 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xc200, 0x0) r1 = openat(r0, 0x0, 0x208000, 0x60) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000600)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a80)) getpid() getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000ac0)) getpgid(0xffffffffffffffff) gettid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x3b7) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 1392.571547][T10050] binder: 10044:10050 got transaction to context manager from process owning it 00:34:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1801, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1392.612049][T10050] binder: 10044:10050 transaction failed 29201/-22, size 0-0 line 2985 [ 1392.651973][T10050] binder: 10044:10050 ioctl c0306201 200000c0 returned -14 [ 1392.673541][T10064] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1392.685060][T10050] binder: BINDER_SET_CONTEXT_MGR already set [ 1392.699670][T10050] binder: 10044:10050 ioctl 40046207 0 returned -16 00:34:05 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0xc200, 0x0) r1 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x208000, 0x60) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000600)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a80)) getpid() getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000ac0)) getpgid(0xffffffffffffffff) gettid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2321202e2f66696c65300aea205486396972100d97c042b2cd925268e43cc84ee8a5606e6635ddee806b5f917ba77a9d73c005f1d65ab06dcefc57551c9d41fbc241e44552829a60768e93d001671f3effb1f1ef21e12e108339e01432fb49132d56cd027b2e1c17a9f416e5f982e0e6a5627c7c8622d30435d28ff9ac41074a89eb0a605441116a309995c5280c53b4ba8527106e72752b7b1b7dfc2e916adc640c7a441cb0d319c93a8c46bf6b74171178be3dc9d4069c5000000000000000a6524126f1fdaf7dd82c4e83ec0d0ebe5be42ed339023388576a9a57c7b628ccf45e9602e1d2ea4470ece86713678f239e277019b6c7620b36940af961f0ccc0989b5d907ae86b75c3b9f26fcd4e9cdf9a941f3d3a5335b5cfa5697cbd85e5092ccf5a054450daf8a436f2ad8a00076381db30872f54d3d8be1c803cd3f0a3134ec8b4977cdb1f95e90d0294f2d9d53b70c425e0a68fd4767a62598fa3c0b175ffdb8a43ee659f31793971ee7b56b27a1f1ea0da7f7bebc0a221234c5cf78bf9edae73082e8c2d16d443d7b0b515d7015bf19b844c202cb510ffff2158bc5e7a51432573c5d5842504bd6ac17200535a53ff3b2c8f6d88eca4a2644a5cea8a413ecc5580361a19e9606bdaa3892320d499b2a82743d51374c501d8d0cbfa078883e070404db9f62b570ccce8c97b4734affa8da72fe3927026094ddaa41ee7b840ea941c99f795cef5e0b1d1168c2fa632a4105eaf445d0e0cd5248bad0bf5b73a8e2d53df88e5494f982d8fe9ccba0ea6b54d397195ba248b5c4090b82857dc1f69d92a7714dc0383e2bb157d0e31cff09c2b98f55761c08cf6d32c9cdb98494d7c56187514597f7bbc438ce3b55fb08d6437746343ebd89aec4a7f8664513b07b27008bfbc4439a8478292b291ef7979590e0583d607cb899548c98610c645cf5848f1a1ea61277852e44473db56bff0dfd6f6e0505e8ab69b19fa7067c68a06a1eb32e23a79b9fa008fc3e75729acf724096b42a1d484dc5efdb00c39240c0b71b81c7636695a0caae6dd34dc573cf173afcb7889d5c14e6ed5338492f654f201817a77dadb046bace06e9eee9bea92cb87abcd83c41b2db3b45f174a7daaba729067ddb040ed96a4a533c600c8eb0042651150a50028bd8618e9f243728b129c4c0b52403edfa4ffa2aa53d4cc45703c0585a625f9e5242159275364a684460d0c076ec6e5c3b0381a10dc81c637eb157f32cdb4318f10f26f12a53cfbd616910918a51e93bfc3a7bb847709c20765c73895d94ad8747a1a1a5249e045622f5b2edd5adde47abf9d973c77c5042550559b7b23c55b145d6ffd96a42ab095684e827e675fcb4a4b58bd3d46"], 0x3cd) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 00:34:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 00:34:06 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf6ffffff) 00:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60000000, 0x0, 0x0}) 00:34:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1392.969495][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000060c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x40000000102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r0, 0x0, r1) r3 = dup3(r1, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)) write$UHID_INPUT(r3, &(0x7f0000000100)={0x8, "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", 0x1000}, 0xfd7f) [ 1393.021858][T10456] binder: 10454:10456 ioctl c0306201 200000c0 returned -14 00:34:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000040)=""/246) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000200)={0xf, {0xfffffdffffff0004, 0x405, 0xe5bc, 0x8}}) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000140)={0x79, 0x5, 0xc, 0x4, 0xfffffffffffffff7, 0x81}) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1393.121266][T10456] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.144108][T10456] binder: 10454:10456 ioctl 40046207 0 returned -16 [ 1393.230538][T10461] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x200, 0x80000000, 0xfffffffffffffffb}) munlockall() 00:34:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1901, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) 00:34:06 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf9fdffff) 00:34:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 00:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68000000, 0x0, 0x0}) [ 1393.441300][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) prctl$PR_SET_FPEMU(0xa, 0x3) [ 1393.542660][T10708] binder_transaction: 1 callbacks suppressed [ 1393.542670][T10708] binder: 10702:10708 got transaction to context manager from process owning it [ 1393.570567][T10708] binder_transaction: 1 callbacks suppressed [ 1393.570585][T10708] binder: 10702:10708 transaction failed 29201/-22, size 0-0 line 2985 00:34:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x20000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000180)=0xe8) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r1, r2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) read(r0, &(0x7f0000000340)=""/143, 0xfffffc68) [ 1393.649003][T10708] binder: 10702:10708 ioctl c0306201 200000c0 returned -14 00:34:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) [ 1393.708315][T10708] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.717404][T10704] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1393.729368][T10708] binder: 10702:10708 ioctl 40046207 0 returned -16 00:34:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x100ffc, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x90, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)=[0x1, 0x5]) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfbffffff) 00:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c000000, 0x0, 0x0}) [ 1393.928161][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 [ 1393.979796][T11128] binder: 11127:11128 got transaction to context manager from process owning it [ 1394.006950][T11130] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1394.019208][T11128] binder: 11127:11128 transaction failed 29201/-22, size 0-0 line 2985 [ 1394.034498][T11128] binder: 11127:11128 ioctl c0306201 200000c0 returned -14 [ 1394.059496][T11128] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.094221][T11128] binder: 11127:11128 ioctl 40046207 0 returned -16 [ 1394.225089][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:34:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x0, 0x0, &(0x7f0000ff7000/0x9000)=nil}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x61) writev(r0, &(0x7f0000000040), 0x146) 00:34:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) 00:34:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x21, 0x3}) 00:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfcfdffff) 00:34:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1a01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x74000000, 0x0, 0x0}) [ 1394.380968][T11265] binder: 11234:11265 got transaction to context manager from process owning it [ 1394.393483][T11241] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1394.411100][T11265] binder: 11234:11265 transaction failed 29201/-22, size 0-0 line 2985 00:34:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x44400, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x3, 0x8, 0x101, 0x401, 0x1}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @rand_addr=0x7ff}}, 0x800, 0x1}, 0x90) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x20, 0x2, 0x81}) 00:34:07 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x2, 0x3, 0x7f) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x1000) read(r1, &(0x7f0000000340)=""/143, 0xfffffc68) [ 1394.431970][T11265] binder: 11234:11265 ioctl c0306201 200000c0 returned -14 [ 1394.467906][T11265] binder: BINDER_SET_CONTEXT_MGR already set 00:34:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) preadv(r2, 0x0, 0x0, 0x0) 00:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfdfdffff) [ 1394.508598][T11265] binder: 11234:11265 ioctl 40046207 0 returned -16 00:34:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1b01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000004c0)={0x20}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1c2dc0000}) 00:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a000000, 0x0, 0x0}) 00:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001400010300000000000000001e00000729ce00000000"], 0x1}}, 0x0) [ 1394.630825][T11604] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1394.660336][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:34:07 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40400, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/mixer\x00', 0x121000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r2, 0x401, 0x70bd26, 0x9, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r3 = gettid() process_vm_readv(r3, &(0x7f0000001680)=[{&(0x7f0000000340)=""/87, 0x57}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/26, 0x1a}], 0x7, &(0x7f0000002a40)=[{&(0x7f0000001700)=""/123, 0x7b}, {&(0x7f0000001780)=""/9, 0x9}, {&(0x7f00000017c0)=""/167, 0xa7}, {&(0x7f0000001880)=""/29, 0x1d}, {&(0x7f00000018c0)=""/149, 0x95}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/171, 0xab}], 0x7, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1394.735906][T11708] binder: 11705:11708 got transaction to context manager from process owning it [ 1394.769181][T11708] binder: 11705:11708 transaction failed 29201/-22, size 0-0 line 2985 00:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xff070400) [ 1394.789247][T11708] binder: 11705:11708 ioctl c0306201 200000c0 returned -14 [ 1394.810012][T11708] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.819672][T11708] binder: 11705:11708 ioctl 40046207 0 returned -16 00:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000000c40)}}], 0x1, 0x0, 0x0) 00:34:08 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000040)) 00:34:08 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) [ 1395.027699][T11827] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) [ 1395.073529][ T7771] binder: undelivered TRANSACTION_ERROR: 29201 00:34:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/155) 00:34:08 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x1, 0x5, 0x8, 'queue1\x00', 0x20}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) [ 1395.154915][T12132] binder: 12131:12132 got transaction to context manager from process owning it [ 1395.230634][T12132] binder: 12131:12132 transaction failed 29201/-22, size 0-0 line 2985 [ 1395.251511][T12132] binder: 12131:12132 ioctl c0306201 200000c0 returned -14 [ 1395.288594][T12132] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.303287][T12132] binder: 12131:12132 ioctl 40046207 0 returned -16 00:34:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1c01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1395.449014][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:34:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x2c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet6(0xa, 0x806, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 00:34:10 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xff0f0000) 00:34:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000200)=[@acquire, @free_buffer, @increfs, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 00:34:10 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'vxcan1\x00', {0x2, 0x4e20, @rand_addr=0x7fff}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100), 0x4) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x30, 0x80000000, 0x2, 0x7, 0x4}) 00:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffdfd, 0x0, 0x0}) 00:34:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1d01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1397.025109][T12352] binder: 12347:12352 got transaction to context manager from process owning it [ 1397.042882][T12352] binder: 12347:12352 transaction failed 29201/-22, size 0-0 line 2985 00:34:10 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x4, 0x200) r2 = dup3(r0, r0, 0x80000) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000440)=""/246) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @local}, 0x5}], 0x2c) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfff, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1397.073187][T12351] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1397.077586][T12352] binder: 12347:12352 ioctl c0306201 200000c0 returned -14 00:34:10 executing program 1: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffec9) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}) sched_getparam(r0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) [ 1397.117254][T12352] binder: BINDER_SET_CONTEXT_MGR already set [ 1397.138265][T12352] binder: 12347:12352 ioctl 40046207 0 returned -16 00:34:10 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffdf9) 00:34:10 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000940)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x40) [ 1397.298694][T12668] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100000000000000, 0x0, 0x0}) [ 1397.341997][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:10 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80480081, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) [ 1397.409047][T12674] binder: 12673:12674 got transaction to context manager from process owning it [ 1397.508985][T12674] binder: 12673:12674 transaction failed 29201/-22, size 0-0 line 2985 [ 1397.570169][T12674] binder: 12673:12674 ioctl c0306201 200000c0 returned -14 [ 1397.628751][T12674] binder: BINDER_SET_CONTEXT_MGR already set [ 1397.671612][T12674] binder: 12673:12674 ioctl 40046207 0 returned -16 [ 1397.861685][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 00:34:11 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffdfc) 00:34:11 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x5, 0xba]) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1e01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x200000000000000, 0x0, 0x0}) [ 1398.191950][T12857] binder: 12849:12857 got transaction to context manager from process owning it [ 1398.221008][T12848] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) [ 1398.261017][T12857] binder: 12849:12857 transaction failed 29201/-22, size 0-0 line 2985 00:34:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000340)={"cb893a62af86aa6ae9772a524692a671aa634d540f0335ea3f67deb0e792c5331634afd724b4a16e61fdb36d31793016574564cd3ceeb4df10d913dfc0d1e9421fec00d23247138c6f1e9bc683af3ce576b0e714c548e26b810295eee68c036207db72cbebd24ac19aacb370b5431772b2844879938e62bff0af0521aad442cb6e1fc166025a584af3841718f018356c94d735b9a6134f243dcd8a793833e3c98765bd4eed2c31de336f236ec3e9b8bebd46a4baf6caeaf560fd46c5e97e471ac1381799e7edf939936fea3ae61318f02d1c068237e202d9405d3ae941e8b225d5fd1d513d303d715a09c5f79edead3b146f7d959503ff42094fcd02578fca6b793c3f9e9653bbc0073ab900d7f285545d8646eef471d2d4a4d942e3e12d46b3fcbe315eee75be703540d7f95ff66423608f7754f4a9d9f369b63aa1608b7d34c886c73a1c24ab647783e999ebb37522051a5c746c1b1d8f01f8db4e0076e101478ded2254aee1830ea6d39ec7c3d60f93b2951472994dc1bb5047a45d9e8543feed6b53b2e8d63212c4c8b3f2cf0ea83743f2aa07c51e7900a72670bb2fecbca3be7062780582c14c2746da4fa8535428a88359c07d8e16c3b17764cc1e712fe716359e909a72e80eb80f7e687b9d8139954678a8a62d11eaef0f1c4c5528c5ed1569b5f6ac768f555384ec6fddb82c43a44d30f831113c316e5a87cfa0948adb5fd169d3ba08e86d6527eceea7196c7dc463ff398cc98954835ed347daab4edcb901cb89eb959acc5129c5f418b079b03924fd8f5141bd6acd8b9a132fcf239df73b127f6d2a1efb40f00f7335d163a29de9fdefb262c9941bf0b54d581d41ac407c0cfb168507062c4b22e1a6e78c6595e2fc26899820ebed56ba318cf6ec434389b9c91407aebf6ebd781e8eb4dd8962baa84167c7e60b25a48885db122d95371625f21a518e989b6ea920f714636d8ad236ab5b7103c3e1162c67520b5b2f9b746f2b0a3e28c376212ca8e39123b42f90c92df259629714d9ba52aa470ca1fbfc49d200f020960108ff3481c2bc9c22cf0fc946d1b35ce0ccbc1f53a63f9101f33b5d290f45ab54dd1e71875e52d1801ac734beaf68e5b32a116a36c2dba4945d4bed32c55cf93fbe45e75fcbd96be23b38ae8bc4d6f7073a6baea73e8677cd8b622dccc39bc730c52a78c06be4931b8dd1157faf336dc843479f3ea04b9fe13c7f51ab7269034e1bc8a7d3ad7ac8f22e717dceeb2ae1490f2c50275ae34a96f4d171e4f9ce61c2e6b6b195b0577cba977e63a2077064f90f1e049cc27d63509cd7ccedcc3f6af4bf903cfbfd1848f2ac82400faa538774ea6e1f02f95cf15bad26e48dde7fa9967fddef3d629f0ec4afe60879ccf9780a1b7fca2e278f101f8243b103256c275fc8cc8a60537e4f94a6030ff179f0c8bc72c32f213e66"}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0x9) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) [ 1398.327019][T12857] binder: 12849:12857 ioctl c0306201 200000c0 returned -14 [ 1398.383263][T12857] binder: BINDER_SET_CONTEXT_MGR already set [ 1398.416445][T12857] binder: 12849:12857 ioctl 40046207 0 returned -16 [ 1398.658854][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:13 executing program 0: 00:34:13 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffdfd) 00:34:13 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10, &(0x7f00000003c0)={'trans=unix,', {[{@access_uid={'access', 0x3d, r1}}, {@cache_none='cache=none'}, {@posixacl='posixacl'}, {@access_user='access=user'}, {@posixacl='posixacl'}, {@cache_loose='cache=loose'}], [{@smackfsdef={'smackfsdef', 0x3d, '\'#'}}, {@dont_hash='dont_hash'}, {@obj_user={'obj_user', 0x3d, '&%'}}, {@euid_gt={'euid>', r2}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, '/dev/ppp\x00'}}]}}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v2={0x2000000, [{0xffff, 0x6}, {0x9d}]}, 0x14, 0x3) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:13 executing program 1: 00:34:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300000000000000, 0x0, 0x0}) 00:34:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1f01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:13 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80000001, 0x101000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x483f29fea6b31aa4, &(0x7f0000000040)=0x80000000000, 0x0, 0xa) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:13 executing program 0: [ 1400.391134][T13111] binder: 13106:13111 got transaction to context manager from process owning it 00:34:13 executing program 1: 00:34:13 executing program 0: [ 1400.521183][T13111] binder: 13106:13111 transaction failed 29201/-22, size 0-0 line 2985 [ 1400.545725][T13113] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:13 executing program 1: [ 1400.599322][T13111] binder: 13106:13111 ioctl c0306201 200000c0 returned -14 00:34:13 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x101001, 0x0) r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x280, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x3c}}, 0x40800) r4 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000340)="d777faf53813feefa564821eff5bada284b449e840291c295f1cc75e2cb81f3b864dd1c4a61f6827309e9bc639e4925364ec9e7044d080b2944fb36d4ecea8d1772d06aba809c36e2c8d6b6f026c4320e85fbfb675bdab838718d8a9d1c24fe54f69956117d4ba52654d69dc89e3969bc12ecbf49da80500229f4757cc9f38fc97baaf752350df96d5059c863e7b7584f0f8fb8e5f06f9ad80d5b2ffe6f36eebd9f5e6a5c9b8a94a0f8b53b603461a3ea6617916e11b01", 0x286aeb3f93427b13, r1) keyctl$describe(0x6, r4, &(0x7f0000000400)=""/168, 0xa8) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in6}}, {{@in=@dev}}}, &(0x7f00000001c0)=0x16d) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:13 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xffffff7f) 00:34:13 executing program 0: [ 1400.678466][T13111] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.700778][T13111] binder: 13106:13111 ioctl 40046207 0 returned -16 00:34:14 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x400) syz_open_pts(r1, 0x400) times(&(0x7f0000000400)) dup2(r0, r0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x100, 0xa0000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/174) finit_module(r0, &(0x7f00000000c0)='/dev/ppp\x00', 0x2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000340)={'nat\x00'}, &(0x7f0000000100)=0x78) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) signalfd(r2, &(0x7f00000003c0), 0x8) 00:34:14 executing program 1: 00:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x400000000000000, 0x0, 0x0}) [ 1400.971874][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 1400.986694][T13252] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2001, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:14 executing program 0: 00:34:14 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:14 executing program 1: [ 1401.032933][T13337] binder: 13336:13337 got transaction to context manager from process owning it [ 1401.046870][T13337] binder: 13336:13337 transaction failed 29201/-22, size 0-0 line 2985 [ 1401.077216][T13337] binder: 13336:13337 ioctl c0306201 200000c0 returned -14 00:34:14 executing program 4: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@default, @remote, @remote, @null, @default, @remote, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) connect(r0, &(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) [ 1401.124844][T13337] binder: BINDER_SET_CONTEXT_MGR already set 00:34:14 executing program 0: 00:34:14 executing program 1: [ 1401.180686][T13337] binder: 13336:13337 ioctl 40046207 0 returned -16 00:34:14 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xffffff8c) 00:34:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2101, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 00:34:14 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000080)) 00:34:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000000)=""/19, 0x13) 00:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500000000000000, 0x0, 0x0}) [ 1401.464958][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1401.499613][T13553] kernel msg: ebtables bug: please report to author: Total nentries is wrong 00:34:14 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x20000000004000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x84000, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x20000) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000100)=0x78) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xa00, 0x0) dup2(r0, r0) gettid() r2 = dup(r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1401.578002][T13592] binder: 13591:13592 got transaction to context manager from process owning it [ 1401.621112][T13592] binder: 13591:13592 transaction failed 29201/-22, size 0-0 line 2985 00:34:14 executing program 0: pipe2(&(0x7f00000000c0), 0x80000084000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x1}) clock_gettime(0x0, &(0x7f000000a780)) recvmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{&(0x7f0000004940)=@l2, 0x80, &(0x7f0000005e00)=[{0x0}, {&(0x7f0000004a80)=""/119, 0x77}, {&(0x7f0000004b00)=""/214, 0xd6}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/149, 0x95}], 0x5, &(0x7f0000005e80)=""/190, 0xbe}, 0x7fff}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005f40)=""/221, 0xdd}, {0x0}], 0x2, &(0x7f0000006180)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000007180)=@tipc=@name, 0x80, &(0x7f0000007540)=[{&(0x7f0000007240)=""/150, 0x96}, {0x0}, {&(0x7f0000007340)=""/83, 0x53}, {&(0x7f00000073c0)=""/37, 0x25}, {&(0x7f0000007400)=""/19, 0x13}, {&(0x7f0000007440)=""/236, 0xec}], 0x6, &(0x7f00000075c0)}, 0x9}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000008c00)=""/115, 0x73}, {0x0}], 0x2, &(0x7f0000008e00)=""/83, 0x53}}, {{&(0x7f0000008e80)=@xdp, 0x80, 0x0}, 0x4}], 0x5, 0x10143, 0x0) 00:34:14 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0) [ 1401.709071][T13592] binder: 13591:13592 ioctl c0306201 200000c0 returned -14 00:34:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syslog(0x2, &(0x7f00000000c0)=""/66, 0x42) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 00:34:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x800, "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", 0xc0, 0x2, 0x40, 0x1ff, 0xffffffffffffffc0, 0x8ee2, 0x3}, r1}}, 0x128) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x1a9400, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000200)={0x0, 0x103, "5a79f13261dd9c6373497f1e8d7d1c3c26c18fda7619262e9a95137714618a5a", 0x2, 0x9, 0x2, 0x81, 0x2, 0x88, 0x8000, 0x3, [0x2, 0xa65, 0x3f, 0x1]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000480)=""/246) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) fstat(r0, &(0x7f0000000580)) ioctl$PPPIOCGUNIT(r3, 0x40107446, &(0x7f0000000000)) [ 1401.770591][T13592] binder: BINDER_SET_CONTEXT_MGR already set [ 1401.784326][T13584] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1401.803952][T13592] binder: 13591:13592 ioctl 40046207 0 returned -16 [ 1401.926919][T13800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.934136][T13800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.941566][T13800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.948633][T13800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.951133][ C0] net_ratelimit: 1 callbacks suppressed [ 1401.951140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1401.967835][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:34:15 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffff4) [ 1401.975534][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1401.981831][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1401.989285][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1401.995643][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:34:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600000000000000, 0x0, 0x0}) [ 1402.055294][ T7770] binder: undelivered TRANSACTION_ERROR: 29201 [ 1402.083634][T13955] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1402.132126][T13800] device bridge0 left promiscuous mode [ 1402.165958][T13800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.181929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1402.188057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1402.190993][T13988] binder: 13987:13988 got transaction to context manager from process owning it [ 1402.211330][T13800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.229806][T13988] binder: 13987:13988 transaction failed 29201/-22, size 0-0 line 2985 [ 1402.268005][T13988] binder: 13987:13988 ioctl c0306201 200000c0 returned -14 [ 1402.300647][T13800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1402.338225][T13988] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.349197][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1402.386641][T13988] binder: 13987:13988 ioctl 40046207 0 returned -16 00:34:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2201, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:15 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffff5) 00:34:15 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffdfd) 00:34:15 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80200, 0x0) fadvise64(r0, 0x0, 0x5, 0x3) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x400) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000001c0)={{0x8, 0x8, 0xff, 0x7, 0x3, 0xdea7}, 0x189}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000d80)=""/124) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r2 = getpid() prlimit64(r2, 0xc, &(0x7f0000000340)={0x811, 0xe4}, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000c00)={0x5, @sliced={0x1ff, [0xfff, 0x6, 0x3, 0x5e712898, 0xc502, 0x17f7, 0x33a, 0x3c3, 0x7, 0xfb, 0xfff, 0x5, 0x6, 0xffff, 0x9, 0x100000001, 0x6, 0x3, 0x80, 0x8, 0x4, 0x3ff, 0x6, 0xfff, 0x3, 0x8, 0x0, 0x1f, 0xffffffff00000001, 0x9, 0x3f, 0x4, 0x7, 0x8, 0x0, 0x0, 0x7, 0x5, 0x1, 0x5, 0x6e72, 0x6, 0x8, 0x80000000, 0x80000001, 0x81, 0x8001, 0x8], 0x1}}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10001, 0x400) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x61d5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x7}, 0x8) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000840)=0xe8) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000bc0)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000880)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) set_thread_area(&(0x7f0000000b80)={0x79, 0x1000, 0xffffffffffffffff, 0x401, 0x6, 0xd164, 0x9, 0x1c93, 0x7, 0x5}) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000ac0)={0x34, "7d854bab246abda2089eb4f0e544929dd57ea7e515c21d41cf9cd183eb73bacd5c9241639600c751cec3840105690b6bfa25795203817e0a0df1e96138e175d0f707d00f9b6a30b80854375809f3d293f015a938a424970c03685881ef7b3f3948c9a8f38fb33ee4ce7d0f4350e7917b816fe901f311364a5916eecada6703b4"}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000400)="c069324cb57b041a11e12aafeb9b98705d841b29c5bbc05080732d4d86246463c51ff9b309aed9d35db54e10cbe1391bafaccae57ade9f9601196e517d2b10c5a32b251d5f08b6330c98ae78d5a3ac11d4ee566ab8a37eab7ec6990deb94d5f9977c2a85fa216b55d347b0e07de9895ba090013f4e2a0d2f46540afa99414cdf44d6edd021bf77e138f2a7f73041f7f81cd6d0bab8f480cca7d709b580dc6352279627190434cc13daad1eb47b569cf3d614b35ed865119555c274571a9989e8c23c7697b82bc537ae2e391db317977ed0469d6267e04d5482c73fa940436a106236f88063e0b0ada56701", 0xeb}, {&(0x7f0000000500)="7bbdafc9f54120f58b7e4391dd3c001cb706b18442f70f233e25e82677dd5ea14ce6ea0b6c6b75cb69fe", 0x2a}, {&(0x7f0000000540)="f959ad599db782c2c9c168cd9c53a06887987e01e27110c02a6c82f03f52ad795db402b5caa4552fcbebba68430c35137f97513b1810a9fb22c154c1398ef02a7d2b477df4c4a5f533a2ff0ce95b22d626462841bffa2224b3da3e389c62460d82849e59c3b83b901951df91581996957540c2e859e92beb752b8102981211d302aa5b75b7fb2a7f", 0x88, 0x45}, {&(0x7f0000000600)="bba40c5f1ae3f242feef8d8bc95c004387d4363140b18a2871c3c4c7c720c4851bbb9d8c00ede5812549b3c500c9337e3901b4ba37ad162364fea62d5de700343f581f775b9e872be21637dc35025f7c633aa2455bb781d1a6cf4518c1c050c70c5b41e7701bf00c008d3322ba1f889bf2e5c50168494f6fd3d46b4717c3ec07e0cedb08e725a75d96c4d7eb730c2a9e0e737a681bed28f5", 0x98, 0x2}], 0x406, &(0x7f00000009c0)=ANY=[@ANYBLOB="66696c655f756d61736b3d3030303030303030303030303030b030303030303030342c7569643d", @ANYRESHEX=r5, @ANYBLOB=',smackfsroot=/dev/ppp\x00,mask=^MAY_WRITE,uid>', @ANYRESDEC=r6, @ANYBLOB=',subj_type=&vboxnet1&posix_acl_access,smackfstransmute=,fscontext=staff_u,\x00']) 00:34:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1e01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700000000000000, 0x0, 0x0}) [ 1402.587015][T14086] hfs: unable to parse mount options [ 1402.596533][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1402.620745][T14057] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1402.649632][T13800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.658424][T14171] binder: 14161:14171 got transaction to context manager from process owning it [ 1402.676122][T14171] binder: 14161:14171 transaction failed 29201/-22, size 0-0 line 2985 [ 1402.686317][T14171] binder: 14161:14171 ioctl c0306201 200000c0 returned -14 [ 1402.726992][T14171] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.740932][T13800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1402.777287][T14171] binder: 14161:14171 ioctl 40046207 0 returned -16 00:34:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1901, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2301, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) 00:34:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000080)=""/60, 0x3c) 00:34:16 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffff6) 00:34:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa00000000000000, 0x0, 0x0}) 00:34:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x81, 0xa, &(0x7f0000001600)=[{&(0x7f00000000c0)="66dd3bc311ed7b2fa7f9de51884a75be8d8db35975cb1edf282ec6b783ad8f13012e5072fa966114560469bdae4ba2e50250e1617be342f4d544ce7f5bc064d1581b857d5d1ec70b90b58ea64211588ce332181ef8854be0b88835a50c3616bdfa0b", 0x62, 0x20}, {&(0x7f0000000180)="8d7777ef96", 0x5, 0x5}, {&(0x7f00000001c0)="6ca4b1a68a84c0cf848a12ab97ce9173a14d14593721ef931e6c7b1e533acb78ca1771563fb41db9a0b17840d3458584332ed6a5b4ff516e4b91afd42e9a04", 0x3f, 0xfffffffffffffffb}, {&(0x7f0000000200)="fad241d6beec5705599c33b99e6f6037a5c0ccd6093f11fb4d64eda504cd9d751975642598e962d3d348fad54487d4ca9758", 0x32}, {&(0x7f0000000340)="50ec262e61d6cd4d42c152b95e54bcd6c95e4aa62ff2e9674659d4a8b331838869b27fcf33e788149f43b05b73063457d4e3742d23fa99df450cc4eda66ce8c0f596a6bb6349f6abe2d9e2d9123a74fd5d8bf32151c3643516b0db4bf625185e526561324153fed912e37587dfb6226e077928b43e1f9419026e5925e39b44719e6fba8b8238a7c67e3dd7818036a367be7144e3f1899d143d8442ab241bc798f3e22dabd28a60be873e881a3d46f0d9", 0xb0, 0x93a}, {&(0x7f0000000400)="cab98f569c47d03ec2868d3f6fc824bd1d0c0705a4e3a594c9d6e182d0dd0b807bd45b2e594888967386216540e7b7a04dc7190ccb1a478fc7", 0x39, 0x3}, {&(0x7f0000000440)="4579b62390cd7f4efe92897026d38e99e3f13f996dc451029c6b50830cb193666bb16290efb729f106724551d1060c708fbdd44f6e41e5642dd61e10d7e5d21db7d18a598cb66e56bc57d07a0cea81cdf59e2a", 0x53, 0x7}, {&(0x7f00000004c0)="cdf8755200983c21da49d0a8175b8df984b7a0a0f8279e577a9d1ef6afdab0d7f1cee0b1", 0x24, 0x3}, {&(0x7f0000000500)="e9268b27b7c83f4ee48bfd05bb3a3a9fad2e4dbb5d7184898828f9211a75557a71e61a32a9b449a423919ba20ab7b4d0553e35f48537b5bd78dc80c3d3faf6ce257e939b0d56b25be8a4e3d3527da47ea1d547b5b11d01de358e69716319477249954b1e4d97b0065aefb7174a65cfcfa65ce1cd9476b584ac63d5f3889392d6e38c9ece7bb5f15fad4f42278afe3b57bea42402fee4f7bcb78363c77ef6f67a9e28d23e629e4a554d885152c3b7bb2c2370c86066aaeb129ddd15b0a1b921b45ce7ea32cb4b38853b0a6a061aa45da1878cb2de902267d3eab9c103439e1593e274ed6592", 0xe5, 0x8}, {&(0x7f0000000600)="9b7597209a076102bdec6d1fe7f9cdd05189fd2588a92eaae3be79e27ff5e3e3229b9b5fb9cd9ab84bb2621f93f150eaab2722fb9543d5091fa6672f6c620bd33354e953d8fcd93c836c197fbbd36de6982fd01223bb9f6835d8358fd05c5207a2891d65d69fa748d92cebcb5e56fe09b7edc2151d118fd337eac4c85c7366eaf199bdae30bbd92f10d634c544df32633b662d67c389898da01fd6730bebebef31ce836c5d48823787cb432028e619fbb6e09a8327fc66ab903e53c0e075a070ce839bd92032f1a920e46e2761ce0425aef21003b4b9e34e82cbebd2c93d2bddcaad853cfcebae836a8a470e868f50e3bd3d342a20d58a456701483b61839cb343dc0cdae5e41059b515064cd81d8003b52b654e4a8b0dd3480ebd742b58898ba4a1f73f0becd605c8f3955fb49cadb46d7c2851cd1089f289c5bf4ca061e7ee158ebaa9c2cb74f9d6171bba2f059f2cae7d25926a338ad3c03a0dba78e272c560364ec7c2fd6b765a04b8e7c2580ce66eaa6e078b62c75e11197bcf575b5cb943f18c70446acded44bb734cf05694806047142e944bed82e45a7b5757e0813d1bf03783a5f87d0fc455dd4e508caebfea279da9ebf0e48f8e39272bc40cba6b795a5f3b586fb118c8911c894f49e7048a15f6e56e6b503e40d1ebc91719e54e8b7dc1b760968778c4375097359e31b4705c8468c89aba29385be9f45ec9b6dae1f895f2cf45d8892a5fbd00bfc54b1aa93a57aa02b82372f7ff6b54d4297044bb705789be13ec737e33205b5241082b44c6565326f61ea2510079d16a1fa3c759ca1eafde80ee1a14f198a90662642a8d2a229c1db03007f3705dd3cf81573aa2459ebf99cb3547bf2e59f5b445b3c44f5e5bd670f1a74f35d4e738dda53b2e820a0a28d4251a121173390fc1a74508e165ec21b31973ec93acebe0affc2ac7d54a9aec2b6e8770effed9372bc4c61a6ceb035a3e4561b3e7fae4adaba3935149078d74499238bebc79058582c21572593c707c4de742e9038d5a79fcb534d89e47c327a1489b6015759630a8497c21b5b8e58441ea2328979bab5c82218e6282f4c8e1b14bd241f57c7c11db77c56dbb7c7bbdef35f169c77d209d756035199e451377ddf46144576627cc22d84f1f36cb730c43a2626f3f6905ea997d1ed2d9c903523fd579892c980f0060ba0260058ef53e8568c6561b5c2dfa2da215a8079a0508812d09e51cfabd35f14f850d660793e84ba79f7d567ca3854d3dd05765469d67c347f67043ca339cd58a5aa9abaa5cd7385e17a4d7d0c0d970a8965b979b0fafed28134904af661ae54e28d844fadc0420b54148abfdb8521a9e8a2750bbb2c557aabcbbb7a0e2a705b78a02fcb80f18d610f149d837495de1df7c5963e5acb5e71ad587a577da4bd09135941fb27558728ecb7fba91cded102a879711ec3b8b7dbef9e87d74eafce831e0788a209eb3d196da607a1ca8401d96e33ec81ab8d32ca14eb9fae4076fe75c64bf2f942b82e32d32a215422f3ee50827da9cf782d4a2cb1a27a68f013b88ca328e2f5d32ccedf9ffb2e5158d6ec91794e4599a81c4845ef2f0b6d85cecbf79bdbee25e4507c0a5a001e5884f915f6193407dbe9052fc371a1db177d7f5c65669151ebc9ac45de2e94771bc9c9dbb7851b374c9593a5826782c96707ac63bd5d22485ba382d5f1e2f07ba6182359c3d89ca1ee2ba76d056fd007705f26c98cd62d985ac9223b6fff9f18f9fd9c04c41e60c0c06e0e33ef12202bd11460b0427e75dbf500760cf5a07683390578947fb590bdeba9fa0c7faffba7d94c8f9b2d645f38315467ad0de72e1e3622295a07b832a801794e7450a5497da80a22a0333083c7b389705bb6f8a5147555e04241b350206f3bbcccb7e8d4818ab72d888622adc92827cc3bfc6f3b2c252eb845c172db482f73fe317bf3bf42e612769e58e845061d45770fa75c7ba6ed676d24cf5925b04f6d622fb22e9f7670c54726aaf80c90cf1cad4f45ea75987b6617073e52842de210ed999d66b15e081bcfd57bed956416a08dea31f7d9388c36aa769517ddabf8bc3b95a68034c0277977384224aefd2b2cb051d70d4547d1a8a3faa6824c8202314556bac703cbcc33bae4aa7ea91b669de18425695fad27debb7b39b827ff8cefff488e2a40b1799ab3cd76fd49d05babfc0560943abb836e6e2983cfe96af35da9e248c9a2a82c509274d2a7e7fe28f306af837532dcf24dd83097f8d6c2227ee7f2090f630c921a02f955aaf55b57c4c2e5b96fe48dae69983030ff93bc9ce0df982b8af7026ac4fd3b53d8fb7d521ab1079f220b610d6a245ffc9cd4d6b19a88411482fc29e76455d2eb1b4c2f02f79b9502ec5fe3a974b397b92891dc18fc66d9f0f854de888f2ea3ba57357a010edfbd39889502b6eef8514eca332f1c22e8c3c9510336ce4b02a20260f60380492835efb6ae9d45109f7d51863c7ad6204c73d378e85cb550f5195137e4284bae7713754f4e1f95860f6279c5a5f5a0fa3363fba822b6a4c44278c86c0083930fb5f12b7e95e6d9acf4879613af280c0318f16530abab0aaa27eaffa1684434159909d1e7e2ac95b85566933368a85c3736f5b1a39113e162fe1abf1dd4cbd2a87bdd927f929c120abe72aef658e0f551c13295a517cdca2df4b5a49037d510f48ded8f59a92d34942ef4f39680fcf6908f11bce89fa36b301a57908064885021e64f39b9a7617fd7a697864b3bbb5acfb4438de77deaaac70d39ba56f1ba03d53853492c147a0d40c4f01685af64fdff404bb0f8cb7b253d7d514993c040748322902034f7e09e2b7fd1fb38214560f278ea648f2d1f628c474a655e26fb97836f925e491153c2dc68336be565d6492948048a36ad562b656b8b400f39cc962ee4656bd4e0befd5f4ae780a607f93fcea56c81604ebd6050d546ac3500ca44cc54effeaa787d43bea4de7d4c336a75796c43d0d5b3aee0409d0fd53c4edf363dcb5c5f1150b8f2acde37d2d71d61bbd1e0fa07e3310c26d5c8357ff8d6b49ce15721d6c0609b2c385778858dfb2b22bad6d6a731f1c58dd708f1acdb84a9f00d300286ffb591e13370b250675296f74813ff5e9cc6398b72c10c428b9683702db56db372651c4432f74e395e138e9ad37d53ee303e7f4f0a7c18c91202f17fbf06df7dbc59d8e5499d79ee1e6a71dafcd447231c5eef44f3fe5aed4767243d0c877bd6c462c6941623f072f73a3fe7fe6d608ab327a9d2e180229aa16f66d518e6818d1f49644513c6aa55833e45ff8ef2bdb66f0bbf0a0ff15d5886a9984268049523200d83de0fce26ccd8bfe6fa91403868d7073dde48d8061651747f18fc8ce1932ef54934ffb306d58b31ffd979a1c70481c8057d3515a693e36aa07161c31c78adda0ab92b5d6e491f10d2b7a5e2bc62726b6b4554234729edc22f30bbc4b8be99ee977de34dac251583e0e126f2e1b6180396f4ef5e2fc02523253f6325b66ee128d84439f57ff29b6c9be531604b12cb303f3a48e89bde6123248328b10cbd876d63136dff7faf4a1f09820ec0b3c81d6fb508ff912e0a5296caa3c14c0e00ca8ddeb6fb9b84a618f2c1f3f140155354af1d9d915fee4764b13e151041a68c9f2d34ea97d1a6a83a166d562564a77a589a6ea1b265004e15c3a2d9221f22e2ae4fa9da79d1fc9579cc1a8abb527914504f6010255a2384e3d4476a6a23ae717a2aca1a367c43fb7c27bda860f11728408520ae907b03160f57c82ebddf0d9bf540c554c82c964cabdc9a7f16de547cb75b3a5b8e62099349e965af0c85d166eaefbf29ea2290935d584798ad0fa58e6238cee81af322d873e4ba2eac8351f306d0f633c3173106dd96eef7206d2d99affd5fae1c6f7568c940098d3c63370b73665c6791b16e29c99c55df59ff684ebf5ceb4a2c5fac4b33f40f06c21157a37daf50f879a1f1855ce99e12c7b09aaac70409518807de104cac72efa95f0387c860f34094df894c6af35c1192742fe6bb1e6c3f66b0aab8bb2b962c6d04d253d4217fa83f3c531eb8979eafad69323f419d949dd8d4bf33fcae09271227294d8716d3764415cd2acf23bc45d7caae5199140dab9a5916e56ad30cd69ee28e2661a4ca34654ac08644554747216b956c97a44ac55615752cf6441f0283bbf1748a4b394a29b52ed25330d3f6ef34feb86e18bdf801f038f217dc7134259e92c483ab7dbe9b21c8ae1a73ce33c06387d3cb1c5e2b5969ab14618e0840ca3ce5cb63baa67afb7aa89489abf7af6ff8d5a976eeaba08ad8eb5bfbf8dd11a402bdf22d46dace87c884b1cf14d525f9b3c77fa714943046a97216b8722901387e2f8bc39f58434707fa698cd881b44ff471ceb7f7ab3c3930adfa7f8f7674c2af31b7442e21da3ed66ff4c7b4bda4fd10ccffb3993a7f495d46a5b5733b6febab6a0ccd204490295d7ad836bea1fa77378a7dec94b474d6326d31dc0d38dc878e473d7ede0e958d3101410bc839324b366ce6c0c0468ca96588e649e72e7956445e43bc417eb4a752aaeef910ceca550cd041c3ea6b5e945d4a12b6aaab3e2a8db668e33822f47445eba529d574d2353cb6d359a45a0e39ae47d7f5d2927c02ddff8d1490711657ffb656e10c0d2f2f1eb9ad26ae1634ed051df27dff4b0435415fb099261885d32b7c48b433817a114991103afc3ee5b1aaa108a6893371b94bb6de409d58674777a04fbd9779496e6617cf79234d64a2bc60c3b98655ce1786fff525145f3cfda76a7786d56ed0743aede1042f684e39db2193f8c6cb7fb644c43a9f1481b4113ae2939f4385f31086462110c671dc98076db784a99e4b597acf42eedfe559545f8ec825381edb50b765024beb0d654637e9cc7ca1e496372d8a4118307885c90c84417de896dbd29883afd150df47995686979cf237e0f18e4a57689760bf746178094672e07308c8ef5f8ce0e3cd5d8b3b468836bc03c4c363188813e8bf590a248c2d4d29c3e7984a97216f65c72bcd1cacab000e90db209333f86ff83fea1be7612341f63a492409cdd9572e1a860c2d94152577a718b41e14cba8aada178a58bb7c64bd03e5412f81ea9ec8a1d0f29c01ddb5e8337644218b7a2fae48ef5b40fa7fa125c5b6ed2076e3c0b4ea15d8f3566053f702d3223d0b37eefdf006ce9cf0b8cdfcc5337db47b5f3344d85d8351ab15b854ce71300219c06919b8d49270ea90165dee3fcb39873a8a1c1e89f249fe47abbce17a827ea9207dc53c4bb62cb1712a46d1b7041d4dda42afb1e30fb249b4b94872874c9540c015e108a5042ebd563efcaf187c0c36fc2d1c36e1d19354067f4f77f140065e2d8b8660fe5edc371ec178f73a21aa23e8dea08224e1e07e735bb6800845dbf6d8a0140d19d6bc15cd69da539dab72572e53be9c8d242e9e0bce8010c7ff9cecf60c5b925061b147698a07bce3cf8767c915b6e4785f525e8e1ee0cfd1d4ce44125ba5109187597d1ddad517423ff1582980548b4dfd5dcee9bab55b0716adc99cfc5698159211b799f1de084c7442680766d4bfaaa7c73389fc4fa600ea5c0518a7aa8c500dd30f428f01b324990f8b4d0dddcc7545562a70e5d465653fb06e9b99c709b5f479c0d3a67c211c586372d898bbff177d4a25784ca9fd268b3ebc526c06c0ecc593419d4abc6908dd7db61731f2890012cbb366f48a4619e7beeb16e176608670a9c89c255aa02f665252492af0dca8e82b48e8f367a014c462b2645154698eb9236e570a2", 0x1000, 0x1000}], 0x2000001, &(0x7f0000001700)='/dev/ppp\x00') ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) [ 1403.040993][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1403.117061][T14369] binder: 14352:14369 got transaction to context manager from process owning it [ 1403.184795][T14369] binder: 14352:14369 transaction failed 29201/-22, size 0-0 line 2985 00:34:16 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffff5) [ 1403.250592][T14369] binder: 14352:14369 ioctl c0306201 200000c0 returned -14 00:34:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) 00:34:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x200, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x1, 0x9, 0x2, 0x4]}) [ 1403.297664][T14369] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.318364][T14323] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1403.329954][T14369] binder: 14352:14369 ioctl 40046207 0 returned -16 00:34:16 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfffffffb) 00:34:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200000000000000, 0x0, 0x0}) [ 1403.540946][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1403.652485][T14551] binder: 14550:14551 got transaction to context manager from process owning it [ 1403.702806][T14549] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1403.790751][T14551] binder: 14550:14551 transaction failed 29201/-22, size 0-0 line 2985 [ 1403.801136][T14453] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 1403.830635][T14551] binder: 14550:14551 ioctl c0306201 200000c0 returned -14 [ 1403.843787][T14551] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.856826][T14551] binder: 14550:14551 ioctl 40046207 0 returned -16 00:34:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2401, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:17 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf4ffffff) 00:34:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x100) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) 00:34:17 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1000000000) 00:34:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000000000000, 0x0, 0x0}) 00:34:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x400, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x2a00, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) 00:34:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8a0000007d02000000960200000300000000020000000000000000000000000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d1c5e9c81f01f2d2d7d0b0047504c6e6f6465762a6c6fdb07cc90f53236590f652f5c50dc25911922882fbb40229e892289276edb540863307f1fa11553fe53c48c47f6d3fb8ad80e260e54a23501f5eb66aa0b4171b96431a11f4b443e2a6bad71411e2a9b0713ea25465d04f74f6c1cddebc40e4b51d5f77daefbc8b659a65e23efe4843e253ffad6712b2d2166c758bb5f90a9fb6e741b9bad7bb296b4ddc793f2807904f8ce89df25110d"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) [ 1403.971743][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1403.994483][T14656] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1404.062352][T14666] binder: 14665:14666 got transaction to context manager from process owning it 00:34:17 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x10000000000) [ 1404.120322][T14666] binder: 14665:14666 transaction failed 29201/-22, size 0-0 line 2985 [ 1404.155893][T14666] binder: 14665:14666 ioctl c0306201 200000c0 returned -14 00:34:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x10000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x10002, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x0, 0x2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000080)=""/162) [ 1404.216049][T14666] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.259016][T14666] binder: 14665:14666 ioctl 40046207 0 returned -16 [ 1404.293633][T14765] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) 00:34:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) fallocate(r0, 0x1, 0x4, 0xffffffffffffff34) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x4c, 0x12040) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000200)) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) [ 1404.430076][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2501, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4800000000000000, 0x0, 0x0}) 00:34:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xedc000000000) 00:34:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) 00:34:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) 00:34:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) 00:34:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) [ 1404.977715][T15105] binder: 15099:15105 got transaction to context manager from process owning it [ 1405.009129][T15109] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1405.027696][T15105] binder: 15099:15105 transaction failed 29201/-22, size 0-0 line 2985 [ 1405.049693][T15105] binder: 15099:15105 ioctl c0306201 200000c0 returned -14 [ 1405.066589][T15103] FS-Cache: Duplicate cookie detected 00:34:18 executing program 4: r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x1, 0x2) epoll_pwait(r0, &(0x7f0000000500)=[{}, {}, {}], 0x3, 0x401, &(0x7f0000000540)={0x8}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/104, 0x68}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/177, 0xb1}], 0x4, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000480)={0x8, &(0x7f0000000440)=[{0x6, 0x7, 0xfa70, 0x3f}, {0x5, 0x10001, 0xae7, 0x277}, {0xffffffff, 0x1d, 0x0, 0xfffffffffffffffe}, {0x9, 0x7, 0x0, 0x3ff}, {0x0, 0x80, 0x1, 0x4}, {0x9, 0x50ac, 0xfff, 0x9}, {0x5e1, 0x4, 0x4, 0x9}, {0x8, 0xda7b, 0xfffffffffffffffc, 0x2}]}) [ 1405.072261][T15103] FS-Cache: O-cookie c=00000000ff4ee49a [p=0000000032af7ca6 fl=222 nc=0 na=1] [ 1405.081364][T15103] FS-Cache: O-cookie d=0000000080479701 n=00000000a9eae815 [ 1405.088700][T15103] FS-Cache: O-key=[10] '02000200000002000000' [ 1405.095374][T15103] FS-Cache: N-cookie c=00000000cd142b8e [p=0000000032af7ca6 fl=2 nc=0 na=1] [ 1405.104253][T15103] FS-Cache: N-cookie d=0000000080479701 n=00000000002b2bdf [ 1405.111779][T15103] FS-Cache: N-key=[10] '02000200000002000000' [ 1405.135876][T15105] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.154942][T15105] binder: 15099:15105 ioctl 40046207 0 returned -16 00:34:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1000000000000) 00:34:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000180)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0xc900) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x534, 0x4) [ 1405.294640][T15259] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c00000000000000, 0x0, 0x0}) [ 1405.388607][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2000000000000) [ 1405.483520][T15424] binder: 15371:15424 got transaction to context manager from process owning it [ 1405.650759][T15424] binder: 15371:15424 transaction failed 29201/-22, size 0-0 line 2985 [ 1405.659075][T15424] binder: 15371:15424 ioctl c0306201 200000c0 returned -14 [ 1405.852229][T15424] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.898994][T15424] binder: 15371:15424 ioctl 40046207 0 returned -16 [ 1405.938519][T15439] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2601, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3ff, 0x200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x30b, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2400c855) 00:34:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:19 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x22) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x6, 0x7) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r4, 0x40107446, &(0x7f0000000000)) 00:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000000000000, 0x0, 0x0}) 00:34:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x8001, 0x2329, 0xffffffffffff0000, 0x7d, 0xff, 0x81}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2, 0x0) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)={r2, 0x2, 0x4441, "a326d9cc150faec6c1eb0e24724ec22a4f19fd2f2aeb799a3fc6e5c68bf1b0945c171b7c7a2bfccf27a088ae9af738d201f5ba522392c608627547abb75d80806bfeb8d4cf3f68733908803d01482c8d036e3533dec43b934c7b9400b1fdf21920db25eb6bfb6684f81d2606c20fda81"}) [ 1406.104849][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:19 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x44040000) [ 1406.181488][T15561] binder: 15560:15561 got transaction to context manager from process owning it [ 1406.258002][T15561] binder: 15560:15561 transaction failed 29201/-22, size 0-0 line 2985 00:34:19 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x43040000) 00:34:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0xc0201, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0xfff, 0x0, 0x0, "92a9b1e246217a18a955dc3b3b12fb37d1b69875209165e3b7133bb6cb7a13d5", 0x777b7f5f}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, &(0x7f0000000040)) [ 1406.328622][T15561] binder: 15560:15561 ioctl c0306201 200000c0 returned -14 00:34:19 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x41040000) 00:34:19 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7ffffffffffff) 00:34:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2701, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1406.370608][T15561] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.401509][T15561] binder: 15560:15561 ioctl 40046207 0 returned -16 00:34:19 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) open(&(0x7f0000000080)='./file0\x00', 0xc2002, 0x4) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x3a1400, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x200, 0x400) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3, 0x4040) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000100)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x48000, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xe0, 0x10, 0x400, 0x70bd27, 0x25dfdbff, {0xd}, [@generic="7b76009f798f5b6642027e720c16673e50f7aa37505d351941488ee761fa2fad54f4ded25a0947082c2a3dd7061ebbf103f445e0163e4b112c87c0aec3b71a5e51c9417829f709cc0a94f49678b4142575f4eca3f50901c85efad52289005ec2f055034148bef107d6d07be0237719e1830c6bdeece6bfba6c6047c0c1fbb0d595033c08af06a01e739da00ac3be2827657c6a6652806450d36d46b53bee054adbcf45d1f5bf7553b5f8c51534d338d479aba934a4d842b4fa61970aa77d1b181cf3596d86ba07762f"]}, 0xe0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 00:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6800000000000000, 0x0, 0x0}) [ 1406.632357][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:19 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x40000000) 00:34:19 executing program 4: r0 = msgget(0x0, 0x4) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/21) [ 1406.723658][T15671] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 1406.757597][T15676] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1406.780643][T15843] binder: 15819:15843 got transaction to context manager from process owning it 00:34:20 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3f000000) [ 1406.831043][T15843] binder: 15819:15843 transaction failed 29201/-22, size 0-0 line 2985 00:34:20 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x36040000) [ 1406.873328][T15843] binder: 15819:15843 ioctl c0306201 200000c0 returned -14 [ 1406.912373][T15843] binder: BINDER_SET_CONTEXT_MGR already set 00:34:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x43040000) [ 1406.957032][T15843] binder: 15819:15843 ioctl 40046207 0 returned -16 00:34:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x15, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1407.219204][T15910] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 1407.330640][T15895] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 00:34:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c00000000000000, 0x0, 0x0}) [ 1407.403492][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:20 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x8040000000000) 00:34:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x43040000) 00:34:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2801, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r1, 0x40107446, &(0x7f0000000000)) 00:34:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x15, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1407.558686][T16108] binder: 16072:16108 got transaction to context manager from process owning it [ 1407.570564][T16086] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1407.597840][T16108] binder: 16072:16108 transaction failed 29201/-22, size 0-0 line 2985 [ 1407.644589][T16108] binder: 16072:16108 ioctl c0306201 200000c0 returned -14 00:34:20 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xe000000000000) [ 1407.713494][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 1407.737451][T16108] binder: 16072:16108 ioctl 40046207 0 returned -16 [ 1407.753044][T16110] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 00:34:20 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x27040000) 00:34:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x20100000) 00:34:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2901, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:21 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1f000000) [ 1407.925624][T16317] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 00:34:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7400000000000000, 0x0, 0x0}) [ 1408.015557][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:21 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x4004743c, &(0x7f0000000000)) 00:34:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x14000000) [ 1408.086124][T16309] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1408.121457][T16365] binder: 16335:16365 got transaction to context manager from process owning it [ 1408.150801][T16365] binder: 16335:16365 transaction failed 29201/-22, size 0-0 line 2985 [ 1408.229529][T16365] binder: 16335:16365 ioctl c0306201 200000c0 returned -14 00:34:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 1408.350581][T16365] binder: BINDER_SET_CONTEXT_MGR already set [ 1408.366331][T16369] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 00:34:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x9000000) [ 1408.409752][T16365] binder: 16335:16365 ioctl 40046207 0 returned -16 00:34:21 executing program 4 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:21 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x40000000000000) 00:34:21 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:21 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1408.708700][T16522] FAULT_INJECTION: forcing a failure. [ 1408.708700][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.772811][T16527] FAULT_INJECTION: forcing a failure. [ 1408.772811][T16527] name failslab, interval 1, probability 0, space 0, times 0 00:34:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00000000000000, 0x0, 0x0}) [ 1408.814167][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1408.826097][T16527] CPU: 1 PID: 16527 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1408.835826][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1408.845881][T16527] Call Trace: [ 1408.849198][T16527] dump_stack+0x172/0x1f0 [ 1408.853540][T16527] should_fail.cold+0xa/0x15 [ 1408.858139][T16527] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1408.863963][T16527] ? ___might_sleep+0x163/0x280 [ 1408.868829][T16527] __should_failslab+0x121/0x190 [ 1408.873777][T16527] should_failslab+0x9/0x14 [ 1408.878290][T16527] __kmalloc+0x2dc/0x740 [ 1408.882544][T16527] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1408.883987][T16506] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1408.888784][T16527] ? fput_many+0x12c/0x1a0 [ 1408.888802][T16527] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1408.888818][T16527] ? strnlen_user+0x1f0/0x280 [ 1408.888843][T16527] ? __x64_sys_memfd_create+0x13c/0x470 [ 1408.888862][T16527] __x64_sys_memfd_create+0x13c/0x470 [ 1408.888878][T16527] ? memfd_fcntl+0x1550/0x1550 [ 1408.888896][T16527] ? do_syscall_64+0x26/0x610 [ 1408.888913][T16527] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1408.888931][T16527] ? trace_hardirqs_on+0x67/0x230 [ 1408.888950][T16527] do_syscall_64+0x103/0x610 [ 1408.888973][T16527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1408.953614][T16527] RIP: 0033:0x457e29 [ 1408.957513][T16527] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1408.977135][T16527] RSP: 002b:00007f3ee57e9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1408.985538][T16527] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457e29 [ 1408.993514][T16527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce27 [ 1409.001474][T16527] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1409.009445][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ee57ea6d4 [ 1409.017418][T16527] R13: 00000000004c6757 R14: 00000000004dbd08 R15: 0000000000000005 [ 1409.026714][T16522] CPU: 0 PID: 16522 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1409.035857][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.035882][T16522] Call Trace: [ 1409.035910][T16522] dump_stack+0x172/0x1f0 [ 1409.051862][T16559] binder: 16558:16559 got transaction to context manager from process owning it [ 1409.053555][T16522] should_fail.cold+0xa/0x15 [ 1409.053578][T16522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1409.067172][T16522] ? ___might_sleep+0x163/0x280 [ 1409.067191][T16522] __should_failslab+0x121/0x190 [ 1409.067211][T16522] should_failslab+0x9/0x14 [ 1409.075374][T16559] binder: 16558:16559 transaction failed 29201/-22, size 0-0 line 2985 [ 1409.077845][T16522] kmem_cache_alloc+0x2b2/0x6f0 [ 1409.077865][T16522] ? mark_held_locks+0xf0/0xf0 [ 1409.077886][T16522] __d_alloc+0x2e/0x8c0 [ 1409.095198][T16559] binder: 16558:16559 ioctl c0306201 200000c0 returned -14 [ 1409.095543][T16522] ? __d_lookup+0x40c/0x760 [ 1409.116358][T16559] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.116475][T16522] d_alloc+0x4d/0x2b0 [ 1409.116499][T16522] d_alloc_parallel+0xf4/0x1bc0 [ 1409.116541][T16522] ? lock_downgrade+0x880/0x880 [ 1409.129141][T16559] binder: 16558:16559 ioctl 40046207 0 returned -16 [ 1409.130969][T16522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1409.130997][T16522] ? kasan_check_read+0x11/0x20 [ 1409.131015][T16522] ? __d_lookup+0x433/0x760 [ 1409.131030][T16522] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1409.131051][T16522] ? lockdep_init_map+0x10c/0x5b0 [ 1409.131068][T16522] ? lockdep_init_map+0x10c/0x5b0 [ 1409.131095][T16522] proc_fill_cache+0x317/0x4f0 [ 1409.182478][T16522] ? tid_fd_update_inode+0xf0/0xf0 [ 1409.187590][T16522] ? proc_pid_instantiate+0x160/0x160 [ 1409.192955][T16522] ? pointer+0x910/0x910 [ 1409.197194][T16522] ? find_held_lock+0x35/0x130 [ 1409.201970][T16522] ? snprintf+0xbb/0xf0 [ 1409.206153][T16522] ? lock_downgrade+0x880/0x880 [ 1409.210995][T16522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1409.217233][T16522] ? kasan_check_read+0x11/0x20 [ 1409.222082][T16522] proc_readfd_common+0x655/0xc00 [ 1409.227103][T16522] ? tid_fd_update_inode+0xf0/0xf0 [ 1409.232226][T16522] ? proc_lookupfdinfo+0x30/0x30 [ 1409.237170][T16522] ? lock_acquire+0x16f/0x3f0 [ 1409.241863][T16522] ? fiemap_fill_next_extent+0x310/0x380 [ 1409.247497][T16522] proc_readfd+0x25/0x30 [ 1409.251747][T16522] iterate_dir+0x489/0x5f0 [ 1409.256162][T16522] ksys_getdents64+0x187/0x2e0 [ 1409.260921][T16522] ? __ia32_sys_getdents+0x350/0x350 [ 1409.266200][T16522] ? ksys_write+0x166/0x1f0 [ 1409.270702][T16522] ? iterate_dir+0x5f0/0x5f0 [ 1409.275302][T16522] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1409.280794][T16522] ? do_syscall_64+0x26/0x610 [ 1409.285473][T16522] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1409.291538][T16522] ? do_syscall_64+0x26/0x610 [ 1409.296213][T16522] __x64_sys_getdents64+0x73/0xb0 [ 1409.301231][T16522] do_syscall_64+0x103/0x610 [ 1409.305822][T16522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1409.311724][T16522] RIP: 0033:0x457e29 [ 1409.315635][T16522] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1409.335243][T16522] RSP: 002b:00007f4195675c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1409.343648][T16522] RAX: ffffffffffffffda RBX: 00007f4195675c90 RCX: 0000000000457e29 [ 1409.351609][T16522] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1409.359570][T16522] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1409.367538][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f41956766d4 [ 1409.375512][T16522] R13: 00000000004be6e8 R14: 00000000004cf2d0 R15: 0000000000000004 00:34:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2a01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:22 executing program 4 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:22 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x100000000000000) 00:34:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff00000000, 0x0, 0x0}) 00:34:22 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:22 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4d242026, 0x2100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000080)=0x8) r2 = msgget(0x3, 0x8) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/42}, 0x32, 0x1, 0x800) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x7, {0x7, 0x1c, 0x10001, 0x80, 0x1, 0x7, 0x9f, 0x1ff}}, 0x50) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x2c, &(0x7f0000000380)}, &(0x7f0000000180)=0xffffffffffffffbd) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r3, 0x40107446, 0x0) [ 1409.530573][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1409.591179][T16668] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1409.626521][T16722] FAULT_INJECTION: forcing a failure. [ 1409.626521][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.636679][T16736] binder: 16689:16736 got transaction to context manager from process owning it [ 1409.659168][T16722] CPU: 1 PID: 16722 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1409.668282][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.678354][T16722] Call Trace: [ 1409.681684][T16722] dump_stack+0x172/0x1f0 00:34:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2b01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1409.682216][T16736] binder: 16689:16736 transaction failed 29201/-22, size 0-0 line 2985 [ 1409.686029][T16722] should_fail.cold+0xa/0x15 [ 1409.686052][T16722] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1409.686077][T16722] ? ___might_sleep+0x163/0x280 [ 1409.686102][T16722] __should_failslab+0x121/0x190 [ 1409.702761][T16736] binder: 16689:16736 ioctl c0306201 200000c0 returned -14 [ 1409.714616][T16722] ? proc_i_callback+0x30/0x30 [ 1409.714633][T16722] should_failslab+0x9/0x14 [ 1409.714651][T16722] kmem_cache_alloc+0x2b2/0x6f0 [ 1409.714667][T16722] ? kasan_check_read+0x11/0x20 [ 1409.714687][T16722] ? proc_i_callback+0x30/0x30 [ 1409.714707][T16722] proc_alloc_inode+0x1c/0x1a0 [ 1409.745914][T16736] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.750323][T16722] alloc_inode+0x66/0x190 [ 1409.750341][T16722] new_inode_pseudo+0x19/0xf0 [ 1409.750357][T16722] new_inode+0x1f/0x40 [ 1409.750392][T16722] proc_pid_make_inode+0x22/0x230 [ 1409.750406][T16722] ? lockdep_init_map+0x10c/0x5b0 [ 1409.750427][T16722] proc_fd_instantiate+0x58/0x1f0 [ 1409.764755][T16736] binder: 16689:16736 ioctl 40046207 0 returned -16 [ 1409.765396][T16722] proc_fill_cache+0x3a7/0x4f0 [ 1409.765411][T16722] ? tid_fd_update_inode+0xf0/0xf0 [ 1409.765431][T16722] ? proc_pid_instantiate+0x160/0x160 [ 1409.765447][T16722] ? pointer+0x910/0x910 [ 1409.765466][T16722] ? find_held_lock+0x35/0x130 [ 1409.815768][T16722] ? snprintf+0xbb/0xf0 [ 1409.819942][T16722] ? lock_downgrade+0x880/0x880 [ 1409.824787][T16722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1409.831049][T16722] ? kasan_check_read+0x11/0x20 [ 1409.836546][T16722] proc_readfd_common+0x655/0xc00 [ 1409.841566][T16722] ? tid_fd_update_inode+0xf0/0xf0 [ 1409.846673][T16722] ? proc_lookupfdinfo+0x30/0x30 [ 1409.851604][T16722] ? lock_acquire+0x16f/0x3f0 [ 1409.856279][T16722] ? fiemap_fill_next_extent+0x310/0x380 [ 1409.861919][T16722] proc_readfd+0x25/0x30 [ 1409.866167][T16722] iterate_dir+0x489/0x5f0 [ 1409.870588][T16722] ksys_getdents64+0x187/0x2e0 [ 1409.875351][T16722] ? __ia32_sys_getdents+0x350/0x350 [ 1409.880630][T16722] ? ksys_write+0x166/0x1f0 [ 1409.885126][T16722] ? iterate_dir+0x5f0/0x5f0 [ 1409.889715][T16722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1409.895168][T16722] ? do_syscall_64+0x26/0x610 [ 1409.899844][T16722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1409.905904][T16722] ? do_syscall_64+0x26/0x610 [ 1409.910589][T16722] __x64_sys_getdents64+0x73/0xb0 [ 1409.915610][T16722] do_syscall_64+0x103/0x610 [ 1409.920206][T16722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1409.926092][T16722] RIP: 0033:0x457e29 [ 1409.929980][T16722] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1409.949575][T16722] RSP: 002b:00007f4195675c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1409.957986][T16722] RAX: ffffffffffffffda RBX: 00007f4195675c90 RCX: 0000000000457e29 [ 1409.965952][T16722] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1409.973929][T16722] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1409.981886][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f41956766d4 [ 1409.989940][T16722] R13: 00000000004be6e8 R14: 00000000004cf2d0 R15: 0000000000000004 00:34:23 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0x9}) 00:34:23 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x200000000000000) 00:34:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 1410.086361][T16953] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1410.118756][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1410.138913][T17000] FAULT_INJECTION: forcing a failure. [ 1410.138913][T17000] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.184934][T17000] CPU: 0 PID: 17000 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1410.194059][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.204111][T17000] Call Trace: [ 1410.207410][T17000] dump_stack+0x172/0x1f0 [ 1410.211842][T17000] should_fail.cold+0xa/0x15 [ 1410.216470][T17000] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1410.222291][T17000] ? ___might_sleep+0x163/0x280 [ 1410.227146][T17000] __should_failslab+0x121/0x190 [ 1410.232093][T17000] ? shmem_destroy_callback+0xc0/0xc0 [ 1410.237470][T17000] should_failslab+0x9/0x14 [ 1410.241980][T17000] kmem_cache_alloc+0x2b2/0x6f0 [ 1410.246867][T17000] ? __alloc_fd+0x430/0x530 [ 1410.251382][T17000] ? shmem_destroy_callback+0xc0/0xc0 [ 1410.256795][T17000] shmem_alloc_inode+0x1c/0x50 [ 1410.261591][T17000] alloc_inode+0x66/0x190 [ 1410.265924][T17000] new_inode_pseudo+0x19/0xf0 [ 1410.270609][T17000] new_inode+0x1f/0x40 [ 1410.274689][T17000] shmem_get_inode+0x84/0x780 [ 1410.279387][T17000] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1410.284940][T17000] shmem_file_setup+0x66/0x90 [ 1410.289628][T17000] __x64_sys_memfd_create+0x2a2/0x470 [ 1410.295003][T17000] ? memfd_fcntl+0x1550/0x1550 [ 1410.299797][T17000] ? do_syscall_64+0x26/0x610 [ 1410.304484][T17000] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1410.309774][T17000] ? trace_hardirqs_on+0x67/0x230 [ 1410.314819][T17000] do_syscall_64+0x103/0x610 [ 1410.319418][T17000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1410.325307][T17000] RIP: 0033:0x457e29 [ 1410.329200][T17000] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1410.348838][T17000] RSP: 002b:00007f3ee57e9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1410.357249][T17000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457e29 [ 1410.365221][T17000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce27 [ 1410.373198][T17000] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 00:34:23 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x300000000000000) [ 1410.381177][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ee57ea6d4 [ 1410.389141][T17000] R13: 00000000004c6757 R14: 00000000004dbd08 R15: 0000000000000005 00:34:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3, 0x0}) 00:34:23 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1ffe, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4a00, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x3, r1}) [ 1410.443373][T17185] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1410.498189][T17193] binder: 17191:17193 got transaction to context manager from process owning it [ 1410.515095][T17193] binder: 17191:17193 transaction failed 29201/-22, size 0-0 line 2985 [ 1410.528946][T17193] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.548115][T17193] binder: 17191:17193 ioctl 40046207 0 returned -16 00:34:23 executing program 4 (fault-call:2 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:23 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x400000000000000) 00:34:23 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1410.680011][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1410.734702][T17452] FAULT_INJECTION: forcing a failure. [ 1410.734702][T17452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1410.747924][T17452] CPU: 0 PID: 17452 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1410.757031][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.767092][T17452] Call Trace: [ 1410.770395][T17452] dump_stack+0x172/0x1f0 [ 1410.774742][T17452] should_fail.cold+0xa/0x15 [ 1410.779347][T17452] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1410.785157][T17452] ? mark_held_locks+0xf0/0xf0 [ 1410.789949][T17452] should_fail_alloc_page+0x50/0x60 [ 1410.795150][T17452] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1410.800535][T17452] ? find_held_lock+0x35/0x130 [ 1410.805317][T17452] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1410.811058][T17452] cache_grow_begin+0x9c/0x860 [ 1410.815831][T17452] ? shmem_alloc_inode+0x1c/0x50 [ 1410.820772][T17452] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1410.827019][T17452] kmem_cache_alloc+0x62d/0x6f0 [ 1410.831901][T17452] ? shmem_destroy_callback+0xc0/0xc0 [ 1410.837287][T17452] shmem_alloc_inode+0x1c/0x50 [ 1410.842060][T17452] alloc_inode+0x66/0x190 [ 1410.846394][T17452] new_inode_pseudo+0x19/0xf0 [ 1410.851077][T17452] new_inode+0x1f/0x40 [ 1410.855148][T17452] shmem_get_inode+0x84/0x780 [ 1410.859842][T17452] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1410.865397][T17452] shmem_file_setup+0x66/0x90 [ 1410.870090][T17452] __x64_sys_memfd_create+0x2a2/0x470 [ 1410.875471][T17452] ? memfd_fcntl+0x1550/0x1550 [ 1410.880245][T17452] ? do_syscall_64+0x26/0x610 00:34:24 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4, 0x0}) [ 1410.884941][T17452] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1410.890256][T17452] ? trace_hardirqs_on+0x67/0x230 [ 1410.895289][T17452] do_syscall_64+0x103/0x610 [ 1410.899890][T17452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1410.905782][T17452] RIP: 0033:0x457e29 [ 1410.909682][T17452] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1410.928263][T17436] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1410.929283][T17452] RSP: 002b:00007f3ee57e9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1410.929299][T17452] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457e29 [ 1410.929308][T17452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce27 [ 1410.929317][T17452] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1410.929326][T17452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ee57ea6d4 [ 1410.929336][T17452] R13: 00000000004c6757 R14: 00000000004dbd08 R15: 0000000000000005 [ 1410.989071][T17490] binder: 17465:17490 got transaction to context manager from process owning it [ 1411.010067][T17490] binder: 17465:17490 transaction failed 29201/-22, size 0-0 line 2985 [ 1411.034762][T17490] binder: BINDER_SET_CONTEXT_MGR already set [ 1411.043869][T17490] binder: 17465:17490 ioctl 40046207 0 returned -16 [ 1411.101058][T17452] JFS: discard option not supported on device [ 1411.139146][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2c01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5, 0x0}) 00:34:24 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x34d0, 0x0) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="c055efd81e65948415be469aebaaebbad19c31637c6f3f7402a7c17fbc3dabf6530668c03c823070a4cd085d26e73cd8a6d27f350035f0d5276646ca19730fd7a569c23cfc88d6019235d40f7739b69cac498824f1226c21cc0b48f6d09b805eb5262761f0623feb9beadde1dab3d9b7787e8372475026f3", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={r4, 0x0, 0xa7}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'nhpoly1305-generic\x00'}}, &(0x7f0000000400)="6df11b7e38a8aa4e3de54d2a97f7e4ac66ca61cb35453b7bedc3688a3ed94d2316eca3c7a99430a4e23690f2f540dca10bdab4a71e5f628dc54cec3103805887ef122f3ea475027d71d995603a54b8b1779a6d4bec9022c1be9fe2", &(0x7f0000000480)=""/171) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r2, r3/1000+30000}}, 0x100) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:24 executing program 4 (fault-call:2 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:24 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x500000000000000) [ 1411.569485][T17713] FAULT_INJECTION: forcing a failure. [ 1411.569485][T17713] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.582883][T17716] binder: 17711:17716 got transaction to context manager from process owning it [ 1411.613277][T17716] binder: 17711:17716 transaction failed 29201/-22, size 0-0 line 2985 [ 1411.626839][T17713] CPU: 1 PID: 17713 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1411.635967][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.646031][T17713] Call Trace: [ 1411.649354][T17713] dump_stack+0x172/0x1f0 [ 1411.653717][T17713] should_fail.cold+0xa/0x15 [ 1411.658330][T17713] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1411.664159][T17713] ? ___might_sleep+0x163/0x280 [ 1411.669032][T17713] __should_failslab+0x121/0x190 [ 1411.673992][T17713] should_failslab+0x9/0x14 [ 1411.678499][T17713] kmem_cache_alloc+0x2b2/0x6f0 [ 1411.683371][T17713] __alloc_file+0x27/0x300 [ 1411.687792][T17713] alloc_empty_file+0x72/0x170 [ 1411.692568][T17713] alloc_file+0x5e/0x4d0 [ 1411.697019][T17713] alloc_file_pseudo+0x189/0x280 [ 1411.701963][T17713] ? alloc_file+0x4d0/0x4d0 [ 1411.706479][T17713] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1411.712735][T17713] __shmem_file_setup.part.0+0x108/0x2b0 [ 1411.718383][T17713] shmem_file_setup+0x66/0x90 [ 1411.723074][T17713] __x64_sys_memfd_create+0x2a2/0x470 [ 1411.728452][T17713] ? memfd_fcntl+0x1550/0x1550 [ 1411.733223][T17713] ? do_syscall_64+0x26/0x610 [ 1411.737904][T17713] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1411.743196][T17713] ? trace_hardirqs_on+0x67/0x230 [ 1411.748230][T17713] do_syscall_64+0x103/0x610 [ 1411.752831][T17713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1411.758731][T17713] RIP: 0033:0x457e29 [ 1411.762633][T17713] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1411.782239][T17713] RSP: 002b:00007f3ee57e9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1411.790648][T17713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457e29 [ 1411.798624][T17713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce27 00:34:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x18) [ 1411.804778][T17718] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1411.807082][T17713] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1411.807092][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ee57ea6d4 [ 1411.807101][T17713] R13: 00000000004c6757 R14: 00000000004dbd08 R15: 0000000000000005 [ 1411.862320][T17716] binder: BINDER_SET_CONTEXT_MGR already set [ 1411.895547][T17716] binder: 17711:17716 ioctl 40046207 0 returned -16 00:34:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 00:34:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x2000001c) 00:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6, 0x0}) 00:34:25 executing program 4 (fault-call:2 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1411.980149][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x0) sendmsg$alg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ba335967ed8a1314020cd641c0a82f", 0xf}, {&(0x7f00000000c0)="c76528b656c0d3b75467785fe689aaaaf68ec4ca354cbc6417cfea6b6c83a4271893fee4dd41f258a3a2f24721b9120cdaa4235d4017ede63d68f2be6ee96e1fd71caa0ccedcf35065433d329b6108847e16cd11633172e35c2df1458e06f7550b39f8eab2ecdb7cb3f79fb068c69d614544c1fd7ad9eb1251717d6d129ebd1c1d9248ad2f7e6212608e2a4bc0a4db379551a1d7a38ff00833c6dd2d5e91c096a1baf55d7e182a276255efddef59fe17e34c9481ee872bd1c72320745d1e0d6c4e2f37a090412f8158b5ad82387e2ddb7edc2a7cdac8a9efde594fd59a375227a3355880aee3e2", 0xe7}, {&(0x7f00000001c0)="02dc65fa21f979d422d357df03982a514a7653953a5b1b293eb7499e77f84ad70d95484961d28465392e2d24ae1ba6c700a48853cdf3e9d28040dde1848696dc95cff4afdf4515d54161a8760b12a0171a0ff9e3f0a6a8ebcd799676b31156d875c4fec62cad17888425f672cb85bd97ee3f", 0x72}], 0x3, 0x0, 0x0, 0x4}, 0x4) [ 1412.132383][T18058] binder: 18031:18058 got transaction to context manager from process owning it [ 1412.205706][T18058] binder: 18031:18058 transaction failed 29201/-22, size 0-0 line 2985 [ 1412.283393][T18058] binder: BINDER_SET_CONTEXT_MGR already set [ 1412.323736][T18058] binder: 18031:18058 ioctl 40046207 0 returned -16 [ 1412.366830][T18169] FAULT_INJECTION: forcing a failure. [ 1412.366830][T18169] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.417670][T18169] CPU: 0 PID: 18169 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1412.426817][T18169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1412.436872][T18169] Call Trace: [ 1412.440174][T18169] dump_stack+0x172/0x1f0 [ 1412.444519][T18169] should_fail.cold+0xa/0x15 [ 1412.449129][T18169] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1412.454972][T18169] ? ___might_sleep+0x163/0x280 [ 1412.459836][T18169] __should_failslab+0x121/0x190 [ 1412.464783][T18169] should_failslab+0x9/0x14 [ 1412.469294][T18169] kmem_cache_alloc+0x2b2/0x6f0 [ 1412.474146][T18169] ? rcu_read_lock_sched_held+0x110/0x130 [ 1412.479883][T18169] ? kmem_cache_alloc+0x32e/0x6f0 [ 1412.484910][T18169] security_file_alloc+0x39/0x170 [ 1412.489966][T18169] __alloc_file+0xac/0x300 [ 1412.494386][T18169] alloc_empty_file+0x72/0x170 [ 1412.499148][T18169] alloc_file+0x5e/0x4d0 [ 1412.503386][T18169] alloc_file_pseudo+0x189/0x280 [ 1412.508307][T18169] ? alloc_file+0x4d0/0x4d0 [ 1412.512827][T18169] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1412.519066][T18169] __shmem_file_setup.part.0+0x108/0x2b0 [ 1412.524704][T18169] shmem_file_setup+0x66/0x90 [ 1412.529372][T18169] __x64_sys_memfd_create+0x2a2/0x470 [ 1412.534735][T18169] ? memfd_fcntl+0x1550/0x1550 [ 1412.539506][T18169] ? do_syscall_64+0x26/0x610 [ 1412.544181][T18169] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1412.549458][T18169] ? trace_hardirqs_on+0x67/0x230 [ 1412.554487][T18169] do_syscall_64+0x103/0x610 [ 1412.559094][T18169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1412.564992][T18169] RIP: 0033:0x457e29 [ 1412.568890][T18169] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1412.588482][T18169] RSP: 002b:00007f3ee57e9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1412.596879][T18169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457e29 [ 1412.604842][T18169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce27 00:34:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2d01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:25 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x600000000000000) 00:34:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200200, 0xc4) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0xb, &(0x7f0000000240)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/ppp\x00', 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000ac0)={0x7, &(0x7f0000000140)=[{0x8, 0x8, 0x0, 0x8}, {0x7fff, 0x9d, 0xfffffffffffffffe, 0xff}, {0xffffffff, 0x200, 0x0, 0x7fffffff}, {0x3f, 0x9, 0x2, 0x1}, {0x1000000000, 0xb61, 0x5, 0x4f4}, {0x9, 0x10000, 0x9, 0x1f}, {0x80, 0xc0, 0x9, 0x1f}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000008c0)='/dev/vbi#\x00', 0x2, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4180, 0x0) getpeername$netrom(r0, &(0x7f0000000280)={{0x3, @default}, [@default, @default, @default, @remote, @bcast, @remote, @remote, @default]}, &(0x7f0000000300)=0x48) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000800)) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/mixer\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x2, 0x5, 0x6, 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000200aaaaaaaaaaaaaaaaaaaaaabb10e067b01b88351e4a845f86379849e4edb45bddedd77dbb21e3142ea5c701a0c3c18059282d87dc09bf488be26ec4f7d71f79770f2a67eaffd1bcce0470d0c160219bf62859ac3bf9905a155c7c8d52fe1ebe5c9c18b56d3eeef786a05d8fb50500ff164052364646854f90363ea606009de2017e548ed3ad84e1b4bb7784d51c29265d8822d66855094be159d80f7a62a3ba88e74ad540d054137b4bd29f04a5f875009a3789ed21525b79d3d15e7264328d489954d7081b6b5f1ecc914d2735a845d275c93be43fa798c0b2d0a972614d"]) ioctl(r4, 0x2, &(0x7f0000000580)="94d7cde8877d32957e14938dc06a52f0c66586bf8b60b7bcd4ea0678283db8ca41c6b153ac0e53409b2fe44ca49ee23a2b2e0e51409f6644be414ff94b2d4cc454561150e5ba4242ff230e22ff58b7997bd3d80cbca97ebe3d9f4d3e246710773ff319c60586fc210745c98480d536856bbbd8675d033cead67ec099425e731f14da27bfb7a2a4fcddb53532a4eb6d491d6d7e51703164a2b13a50ba521d517c4ca1260bcce64efe8c30912f94b7d448e8a9ce3a68720e9fa8f5249f4a25e6473efdc5094c918ad691ad48a24a") ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000007c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000a00)={0x4, 0x18000}) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x424000, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer\x00', 0x6000, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000340)=""/246) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$PPPIOCGUNIT(r1, 0x40107446, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x400, 0x9, 0x1, "91f4837857d805db42af6f0c1e6191bb672437e2b5fca4b57c73f606378656be", 0x47525a4f}) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000000000, 0x13, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0x50, &(0x7f00000006c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)=r8, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000009c0)={0x4, &(0x7f0000000980)=[{0x287, 0xddb, 0x7, 0x26}, {0x3, 0xe0, 0x0, 0x80}, {0x5, 0x4, 0x2685, 0x40}, {0x8, 0x2664, 0x2, 0x100000001}]}) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000000c0)) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000940)) 00:34:25 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x14e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x0, @mcast1, 0x62}}}, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r2, &(0x7f0000000280)=""/77, 0x19) getdents64(r2, &(0x7f0000000000)=""/28, 0x1c) 00:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7, 0x0}) [ 1412.612811][T18169] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1412.620772][T18169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ee57ea6d4 [ 1412.628732][T18169] R13: 00000000004c6757 R14: 00000000004dbd08 R15: 0000000000000005 [ 1412.657279][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:25 executing program 4 (fault-call:2 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1412.742440][T18242] binder: 18238:18242 got transaction to context manager from process owning it [ 1412.760941][T18243] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4a00) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4007, 0x6, 0x401, 0xfffffffffffffffe}) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1412.792672][T18242] binder: 18238:18242 transaction failed 29201/-22, size 0-0 line 2985 00:34:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="5a8a7990ec80e21a3dc8535eba505235a164f6aaf496931e01994e2c2763a06c46981115e4be4994774c7637", 0x2c, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x400800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xa0, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0xfffffffffffffff9, @empty, 0xffffffff}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x5, @empty, 0x2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1, @rand_addr="193e6fa8cf97d32960edcdd4595758ff"}, @in6={0xa, 0x4e22, 0x800000, @loopback, 0xff}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000480)={r3, 0x4}, 0x8) r4 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='/dev/ppp\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x100, 0x20, r4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000380)={'yam0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:26 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x700000000000000) [ 1412.869562][T18242] binder: BINDER_SET_CONTEXT_MGR already set [ 1412.883940][T18354] FAULT_INJECTION: forcing a failure. [ 1412.883940][T18354] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.925961][T18242] binder: 18238:18242 ioctl 40046207 0 returned -16 [ 1412.950505][T18354] CPU: 0 PID: 18354 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1412.959631][T18354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1412.969687][T18354] Call Trace: 00:34:26 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4a8200, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) [ 1412.972992][T18354] dump_stack+0x172/0x1f0 [ 1412.977337][T18354] should_fail.cold+0xa/0x15 [ 1412.981960][T18354] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1412.987793][T18354] ? ___might_sleep+0x163/0x280 [ 1412.992664][T18354] __should_failslab+0x121/0x190 [ 1412.997614][T18354] should_failslab+0x9/0x14 [ 1413.002463][T18354] kmem_cache_alloc+0x2b2/0x6f0 [ 1413.002478][T18354] ? notify_change+0x6d5/0xfb0 [ 1413.002493][T18354] ? do_sys_ftruncate+0x41e/0x550 [ 1413.002511][T18354] getname_flags+0xd6/0x5b0 [ 1413.002528][T18354] getname+0x1a/0x20 00:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa, 0x0}) [ 1413.002542][T18354] do_sys_open+0x2c9/0x5d0 [ 1413.002566][T18354] ? filp_open+0x80/0x80 [ 1413.034235][T18354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1413.040486][T18354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1413.040776][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1413.045948][T18354] ? do_syscall_64+0x26/0x610 [ 1413.045964][T18354] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1413.045984][T18354] ? do_syscall_64+0x26/0x610 [ 1413.067504][T18354] __x64_sys_open+0x7e/0xc0 [ 1413.072025][T18354] do_syscall_64+0x103/0x610 00:34:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x40) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @loopback, 0x5e08}}, 0x13e) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1413.076622][T18354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1413.082517][T18354] RIP: 0033:0x411f11 [ 1413.086457][T18354] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1413.106058][T18354] RSP: 002b:00007f3ee57e9a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1413.114471][T18354] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411f11 [ 1413.122444][T18354] RDX: 00007f3ee57e9afa RSI: 0000000000000002 RDI: 00007f3ee57e9af0 [ 1413.130426][T18354] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1413.138400][T18354] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1413.146373][T18354] R13: 0000000000000000 R14: 00000000004dbd08 R15: 0000000000000005 [ 1413.173416][T18643] binder: 18613:18643 got transaction to context manager from process owning it [ 1413.277316][T18643] binder: 18613:18643 transaction failed 29201/-22, size 0-0 line 2985 [ 1413.298276][T18649] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1413.364235][T18643] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.390749][T18643] binder: 18613:18643 ioctl 40046207 0 returned -16 [ 1413.579438][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2e01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x1f, 0x2, [0x7, 0x9ea1]}, 0xc) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:26 executing program 4 (fault-call:2 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:26 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80001fffff, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) 00:34:26 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x800000000000000) 00:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12, 0x0}) 00:34:27 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000300)='teql0\x00'}, 0x30) r2 = semget$private(0x0, 0x3, 0x20) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0x27c, 0xffffffffffffffe0, 0x5b3, 0x5, 0xcec, 0x9]) r3 = syz_open_procfs(r0, &(0x7f00000002c0)='net/icmp\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') getdents64(r3, &(0x7f00000000c0)=""/77, 0x4d) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000380)={0x5, 0x2, 0x3f, 0x9, 0x5, 0x5}) getdents64(r3, &(0x7f0000000080)=""/28, 0xffffff30) r4 = semget$private(0x0, 0x0, 0x2) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000001c0)=""/76) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e23, @multicast1}}) accept4$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000003c0)={0x0, 0x0, {0x18, 0x4, 0xd, 0x4, 0x6, 0x1, 0x4, 0xac, 0xffffffffffffffff}}) [ 1413.829041][T18876] binder: 18875:18876 got transaction to context manager from process owning it [ 1413.832518][T18877] FAULT_INJECTION: forcing a failure. [ 1413.832518][T18877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1413.851144][T18876] binder: 18875:18876 transaction failed 29201/-22, size 0-0 line 2985 [ 1413.851897][T18877] CPU: 0 PID: 18877 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1413.851906][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.851911][T18877] Call Trace: [ 1413.851934][T18877] dump_stack+0x172/0x1f0 [ 1413.851956][T18877] should_fail.cold+0xa/0x15 [ 1413.869649][T18876] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.879325][T18877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1413.879345][T18877] ? mark_held_locks+0xf0/0xf0 [ 1413.879366][T18877] should_fail_alloc_page+0x50/0x60 [ 1413.879383][T18877] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1413.879403][T18877] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1413.879424][T18877] ? find_held_lock+0x35/0x130 [ 1413.883502][T18876] binder: 18875:18876 ioctl 40046207 0 returned -16 [ 1413.887032][T18877] ? do_truncate+0x187/0x220 [ 1413.887050][T18877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1413.887071][T18877] cache_grow_begin+0x9c/0x860 [ 1413.887091][T18877] ? getname_flags+0xd6/0x5b0 [ 1413.955604][T18877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1413.961850][T18877] kmem_cache_alloc+0x62d/0x6f0 [ 1413.966704][T18877] ? notify_change+0x6d5/0xfb0 [ 1413.971461][T18877] ? do_sys_ftruncate+0x41e/0x550 [ 1413.976485][T18877] getname_flags+0xd6/0x5b0 [ 1413.980992][T18877] getname+0x1a/0x20 [ 1413.984879][T18877] do_sys_open+0x2c9/0x5d0 [ 1413.989287][T18877] ? filp_open+0x80/0x80 [ 1413.993518][T18877] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1413.999770][T18877] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1414.005224][T18877] ? do_syscall_64+0x26/0x610 [ 1414.009895][T18877] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1414.015953][T18877] ? do_syscall_64+0x26/0x610 [ 1414.020622][T18877] __x64_sys_open+0x7e/0xc0 [ 1414.025131][T18877] do_syscall_64+0x103/0x610 [ 1414.029715][T18877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1414.035594][T18877] RIP: 0033:0x411f11 [ 1414.039479][T18877] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1414.059083][T18877] RSP: 002b:00007f3ee57e9a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1414.067483][T18877] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411f11 [ 1414.075441][T18877] RDX: 00007f3ee57e9afa RSI: 0000000000000002 RDI: 00007f3ee57e9af0 [ 1414.083401][T18877] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1414.091366][T18877] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1414.099327][T18877] R13: 0000000000000000 R14: 00000000004dbd08 R15: 0000000000000005 00:34:27 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48, 0x0}) [ 1414.162463][T18877] JFS: discard option not supported on device [ 1414.193965][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1414.245083][T19177] binder: 19129:19177 got transaction to context manager from process owning it 00:34:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2f01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x23, 0x100) [ 1414.297371][T18873] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1414.310902][T19177] binder: 19129:19177 transaction failed 29201/-22, size 0-0 line 2985 [ 1414.367279][T19177] binder: BINDER_SET_CONTEXT_MGR already set 00:34:27 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) timerfd_create(0x0, 0x800) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) fsync(r0) [ 1414.409764][T19177] binder: 19129:19177 ioctl 40046207 0 returned -16 00:34:27 executing program 4 (fault-call:2 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:27 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ptype\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) 00:34:27 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x900000000000000) 00:34:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c, 0x0}) [ 1414.666691][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x63006f2893e4fcef) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000080)) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) rt_tgsigqueueinfo(r1, r2, 0x2d, &(0x7f0000000140)={0x23, 0x8, 0x6}) [ 1414.709384][T19582] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:27 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0x9) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x4c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) bind$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) r2 = semget(0x2, 0x402, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000440)={{0x0, r3, r4, r5, r6, 0x10, 0x63}, 0x0, 0x1, 0x5}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) [ 1414.756286][T19614] binder: 19613:19614 got transaction to context manager from process owning it [ 1414.802519][T19618] FAULT_INJECTION: forcing a failure. [ 1414.802519][T19618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1414.815739][T19618] CPU: 1 PID: 19618 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1414.824862][T19618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.834937][T19618] Call Trace: [ 1414.838238][T19618] dump_stack+0x172/0x1f0 [ 1414.842578][T19618] should_fail.cold+0xa/0x15 [ 1414.847218][T19618] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1414.853048][T19618] ? mark_held_locks+0xf0/0xf0 [ 1414.857821][T19618] should_fail_alloc_page+0x50/0x60 [ 1414.863027][T19618] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1414.868406][T19618] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1414.874120][T19618] ? find_held_lock+0x35/0x130 [ 1414.878888][T19618] ? do_truncate+0x187/0x220 [ 1414.883478][T19618] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1414.889284][T19618] cache_grow_begin+0x9c/0x860 [ 1414.894055][T19618] ? getname_flags+0xd6/0x5b0 [ 1414.898736][T19618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1414.904979][T19618] kmem_cache_alloc+0x62d/0x6f0 [ 1414.909829][T19618] ? notify_change+0x6d5/0xfb0 [ 1414.914611][T19618] ? do_sys_ftruncate+0x41e/0x550 [ 1414.919644][T19618] getname_flags+0xd6/0x5b0 [ 1414.924149][T19618] getname+0x1a/0x20 [ 1414.928035][T19618] do_sys_open+0x2c9/0x5d0 [ 1414.932446][T19618] ? filp_open+0x80/0x80 [ 1414.936679][T19618] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1414.942914][T19618] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1414.948364][T19618] ? do_syscall_64+0x26/0x610 [ 1414.953039][T19618] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1414.959092][T19618] ? do_syscall_64+0x26/0x610 [ 1414.963762][T19618] __x64_sys_open+0x7e/0xc0 [ 1414.968258][T19618] do_syscall_64+0x103/0x610 [ 1414.972844][T19618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1414.978743][T19618] RIP: 0033:0x411f11 [ 1414.982625][T19618] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1415.002214][T19618] RSP: 002b:00007f3ee57a7a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1415.010625][T19618] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411f11 [ 1415.018594][T19618] RDX: 00007f3ee57a7afa RSI: 0000000000000002 RDI: 00007f3ee57a7af0 [ 1415.026553][T19618] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1415.034527][T19618] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1415.042498][T19618] R13: 0000000000000000 R14: 00000000004dbd08 R15: 0000000000000003 [ 1415.068786][T19614] binder: 19613:19614 transaction failed 29201/-22, size 0-0 line 2985 [ 1415.087493][T19614] binder: BINDER_SET_CONTEXT_MGR already set 00:34:28 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xa00000000000000) 00:34:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4) [ 1415.122694][T19614] binder: 19613:19614 ioctl 40046207 0 returned -16 00:34:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3000, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1415.223605][T19747] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000840)="4b5dbf5f91ccff8d4c4b1cff29142d57d0a0947765f95d1902d696248f4aa41194dcb801af6128d114ff4fbff4ebbb1b1cd0c7fa7209e2880e06e44f24e369ca7609e9bbce1480d349b890c5043df064ab23fbd0de102b41b7481adc89742cd5897566ecf772a7ca9d2e7dda1ca327ee4774cbfa2be554df49527af5db798ed151808f303790a34686cd0f6fd9fa8e0ce57993c8c038ff1a7396b26b2369c02c5e73d7691fabf4d9023bff79363c06c1f2d191f045a78213333d", 0xba, 0xfffffffffffffffe) keyctl$clear(0x7, r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x7, 0x7ff, 0x3, 0x8, 0x0, 0x2, 0x10, 0x0, 0x5, 0x3, 0x7102, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x7, 0x401, 0xffffffffffffffe0, 0x100000000, 0x8, 0x2, 0x8001, 0x3, 0x7fffffff, 0x7, 0xd9c, 0x100, 0x3, 0x3, 0x4, 0x7, 0x30, 0x1000, 0x200, 0x10000, 0xffffffffffffff00, 0x0, 0x400, 0x3, @perf_bp={&(0x7f0000000040), 0x1}, 0x10000, 0x1, 0x5, 0x0, 0x10000, 0x255, 0x3}, r3, 0x0, r4, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000080020000400100004001000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000ffffffffffff0000000000000000000000000000000000000000000000000000e0000002ffffffff0f000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa1700000000000000000000aaaaaaaaaa1f00000000000000000000ac1e0101ffffffff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x1000) 00:34:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x2, r0}) 00:34:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60, 0x0}) [ 1415.350138][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1415.481722][T19949] binder: 19944:19949 got transaction to context manager from process owning it [ 1415.526900][T19949] binder: 19944:19949 transaction failed 29201/-22, size 0-0 line 2985 [ 1415.573056][T19949] binder: BINDER_SET_CONTEXT_MGR already set [ 1415.589510][T19618] JFS: discard option not supported on device [ 1415.596548][T19949] binder: 19944:19949 ioctl 40046207 0 returned -16 00:34:28 executing program 4 (fault-call:2 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') sendto$inet(r0, &(0x7f0000000180)="e13a29e9b4e9edeb47acf8810af290ea8bc139b4a64b5ba7c2399c0f484ab64afcfe8e48404d008f4ef30a8052cc7a778bef2f0690024f0a67c3fcaea27b38443aaec7dcc6211d4bb84c0a1412bbba40cadd3b2e0f7fb9948948b646634905bde717c13234d9750a84f36f8950a4cd1a3b6cc20771a4c9aa506c18f0973023bfc847562a07c54cd394c206fa69b34cf5f5423e9394f3e236598c6827201a8612e0e94dc40bbd476e834108c97436289eff2198b4f9680d1f70095f720214e25176b388ca5de02845f0cfd51f74f3f2127b2a1ce02489c015", 0xd8, 0xc001, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffffffffeffff, 0x7757575b, 0x3, @discrete={0x5, 0x2}}) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0xf6) 00:34:28 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1000000000000000) 00:34:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x100, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:29 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/77, 0x86) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1ad, &(0x7f0000000040)=ANY=[@ANYBLOB="850000081b0000007e45007081e83d00a636809cec8cc1d27b"], &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68, 0x0}) [ 1415.869177][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1415.875588][T20197] FAULT_INJECTION: forcing a failure. [ 1415.875588][T20197] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.946851][T20121] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1415.972407][T20197] CPU: 0 PID: 20197 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1415.981549][T20197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.986608][T20254] binder: 20218:20254 got transaction to context manager from process owning it [ 1415.991616][T20197] Call Trace: [ 1415.991644][T20197] dump_stack+0x172/0x1f0 [ 1415.991668][T20197] should_fail.cold+0xa/0x15 [ 1415.991689][T20197] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1415.991720][T20197] ? ___might_sleep+0x163/0x280 [ 1416.023544][T20197] __should_failslab+0x121/0x190 [ 1416.028508][T20197] should_failslab+0x9/0x14 [ 1416.033020][T20197] kmem_cache_alloc+0x2b2/0x6f0 [ 1416.037891][T20197] ? rcu_read_lock_sched_held+0x110/0x130 [ 1416.043613][T20197] ? kmem_cache_alloc+0x32e/0x6f0 [ 1416.048677][T20197] security_file_alloc+0x39/0x170 [ 1416.053703][T20197] __alloc_file+0xac/0x300 [ 1416.058150][T20197] alloc_empty_file+0x72/0x170 [ 1416.062919][T20197] path_openat+0xef/0x46e0 [ 1416.067332][T20197] ? __lock_acquire+0x55d/0x4710 [ 1416.072268][T20197] ? getname+0x1a/0x20 [ 1416.076332][T20197] ? do_sys_open+0x2c9/0x5d0 [ 1416.080921][T20197] ? __x64_sys_open+0x7e/0xc0 [ 1416.085594][T20197] ? do_syscall_64+0x103/0x610 [ 1416.090353][T20197] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1416.096442][T20197] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1416.101826][T20197] ? __alloc_fd+0x430/0x530 [ 1416.106327][T20197] do_filp_open+0x1a1/0x280 [ 1416.110834][T20197] ? may_open_dev+0x100/0x100 [ 1416.115547][T20197] ? lock_downgrade+0x880/0x880 [ 1416.120400][T20197] ? kasan_check_read+0x11/0x20 [ 1416.125256][T20197] ? do_raw_spin_unlock+0x57/0x270 [ 1416.130362][T20197] ? _raw_spin_unlock+0x2d/0x50 [ 1416.135210][T20197] ? __alloc_fd+0x430/0x530 [ 1416.139722][T20197] do_sys_open+0x3fe/0x5d0 [ 1416.144139][T20197] ? filp_open+0x80/0x80 [ 1416.148374][T20197] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1416.154611][T20197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1416.160074][T20197] ? do_syscall_64+0x26/0x610 [ 1416.164746][T20197] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1416.170824][T20197] ? do_syscall_64+0x26/0x610 [ 1416.175507][T20197] __x64_sys_open+0x7e/0xc0 [ 1416.180019][T20197] do_syscall_64+0x103/0x610 [ 1416.184634][T20197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1416.190518][T20197] RIP: 0033:0x411f11 [ 1416.194418][T20197] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1416.214031][T20197] RSP: 002b:00007f3ee57c8a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1416.222443][T20197] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411f11 [ 1416.230409][T20197] RDX: 00007f3ee57c8afa RSI: 0000000000000002 RDI: 00007f3ee57c8af0 [ 1416.238377][T20197] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 00:34:29 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=""/148, &(0x7f0000000180)=""/167, &(0x7f0000000100)=""/19}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x40000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, 0x0) [ 1416.246343][T20197] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1416.254305][T20197] R13: 0000000000000000 R14: 00000000004dbd08 R15: 0000000000000003 [ 1416.265486][T20254] binder: 20218:20254 transaction failed 29201/-22, size 0-0 line 2985 [ 1416.328906][T20254] binder: BINDER_SET_CONTEXT_MGR already set 00:34:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc7e2ff6", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250500000008000100000000000c00030006000000000000001c00070008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c000200053e000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x84) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1416.410956][T20254] binder: 20218:20254 ioctl 40046207 0 returned -16 00:34:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3001, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:29 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000800) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=0x4, 0x4) r2 = gettid() r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffff000, 0x400000) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x7, 0x8, 0x3b6, 0x100000001, 0x0, 0xbe, 0xa0000, 0x7, 0x100000000, 0x6, 0x1, 0xa77e, 0x2, 0xff, 0x7, 0x3, 0x5, 0x80, 0x4, 0x4, 0x4000000000000000, 0x3, 0xe98b, 0x3, 0x10001, 0x1, 0x20, 0x0, 0x4795, 0x400, 0xaf, 0x7, 0x0, 0xb3, 0x1, 0xff, 0x0, 0x9, 0x1, @perf_config_ext={0x76, 0x6}, 0x0, 0x6, 0x2, 0x7, 0x9, 0x2, 0x3ff}, r2, 0xd, r3, 0x1) 00:34:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x2002c0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x693}, &(0x7f0000000100)=0x452) r3 = gettid() ptrace$setopts(0x4206, r3, 0x1, 0x4) 00:34:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1400000000000000) 00:34:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c, 0x0}) 00:34:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x9) [ 1416.734926][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x800) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1416.830681][T20576] binder: 20572:20576 got transaction to context manager from process owning it [ 1416.860909][T20576] binder: 20572:20576 transaction failed 29201/-22, size 0-0 line 2985 00:34:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10, r0, 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1416.906319][T20576] binder: BINDER_SET_CONTEXT_MGR already set [ 1416.929736][T20576] binder: 20572:20576 ioctl 40046207 0 returned -16 [ 1416.953553][T20568] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000180)=0x1, 0x4) 00:34:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') ioctl$TIOCSTI(r0, 0x5412, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000000300)) getdents64(r0, &(0x7f0000000280)=""/77, 0x4d) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="71d7d01ee5789709615016598c", 0xd, r2) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x80ab51f8fda6e53a, 0x40010, r0, 0x27) 00:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74, 0x0}) [ 1417.139849][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1417.253816][T20894] binder: 20893:20894 got transaction to context manager from process owning it [ 1417.298728][T20894] binder: 20893:20894 transaction failed 29201/-22, size 0-0 line 2985 00:34:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x1f00000000000000) 00:34:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3100, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xbf0004, 0x10001, 0xfffffffffffffff8, [], &(0x7f00000000c0)={0x9a0919, 0x7ecf, [], @p_u8=&(0x7f0000000080)=0x20}}) syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x1, 0x2) getdents64(r0, &(0x7f0000000280)=""/77, 0x4d) setsockopt(r0, 0x0, 0x44, &(0x7f0000000300)="9fb1431010c79af8ac0a58b992be20e39a06d9c2c1a888812f000fa1aded3221ee9c9faa7df2a955f5269d4478d10a9324682c3b9cc9766e5368eff34bf45d51518d29ac5bef40bc51f65d1257c524daabdd46ca834e90d0f5d2997ebb1e57fc4ae1a29ee13a67def9c1ceca5ac17c77d2661de52d9dfe2780329fd1de3cb01433774b3a1397db271789c8b6fcbb7721f9f649d2fb3a5cc7a10e64f212f803aed32e1c36dd7d5e1b3f3d96a7b69c88486ce8ffb4399f1882325a7f59b1b4636546ea5a4a828d4fff48e6", 0xc0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0x89, "f8735154d21de203ce62ac044563ebc12e15c87123fd8ea127e243edf6f514992b84930720663a2f7ab541067e35d6824323850548424ab6457e84d1125ebc437959acea68fa0c9021d1174cd2d0ae757f636553f6208dc3c147b60e59415b8130e22ece8a2e8c308f3416eb1e93306d9c3f1e91bba8b099a34863efe0932ad98eef7ff7e3021da4ff"}, &(0x7f0000000400)=0x91) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x5714, 0x1, [0x218a]}, &(0x7f0000000200)=0xa) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r0, 0x7, 0x767284a0, r0}) [ 1417.364304][T20894] binder: BINDER_SET_CONTEXT_MGR already set [ 1417.387841][T20894] binder: 20893:20894 ioctl 40046207 0 returned -16 [ 1417.397422][T20738] JFS: discard option not supported on device 00:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a, 0x0}) 00:34:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='%fs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:34:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1417.506870][T21104] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1417.515429][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1417.551369][T21110] binder: 21109:21110 got transaction to context manager from process owning it [ 1417.592525][T21110] binder: 21109:21110 transaction failed 29201/-22, size 0-0 line 2985 [ 1417.627269][T21110] binder: BINDER_SET_CONTEXT_MGR already set 00:34:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2000000000000000) [ 1417.647774][T21110] binder: 21109:21110 ioctl 40046207 0 returned -16 00:34:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3101, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:30 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x1) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x2}) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x2}}, 0x6, 0x0, 0x1f, 0x9, 0x12}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x5, 0x7, 0xc7}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={r1, 0xef, 0x1ff800, 0x7, 0x0, 0xfffffffffffffff8, 0x5, 0x80, {r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7ff, 0x2, 0x6, 0xec, 0x100000001}}, &(0x7f00000004c0)=0xb0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r3, 0x40107446, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x2, 'syz0\x00', 0x1eb9}) 00:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0}) [ 1417.797314][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000140)=""/77, 0xfd47) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @null, @remote, @remote, @bcast, @bcast, @netrom]}, &(0x7f0000000100)=0x48) 00:34:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='j.s\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:31 executing program 1: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) [ 1417.906330][T21616] binder: 21596:21616 got transaction to context manager from process owning it 00:34:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3200, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1417.990690][T21616] binder: 21596:21616 transaction failed 29201/-22, size 0-0 line 2985 [ 1417.999792][T21440] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1418.023958][T21616] binder: BINDER_SET_CONTEXT_MGR already set 00:34:31 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x111000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000500)={0x7, 0x26, 0x2, 0x10001, 0x0, 0x4, 0x400, 0x2}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000240)) io_cancel(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000480)="c154fd51bd4506c3fd45475297725d7f5ba7726ab5375ff78de8028731ed5f413413df212a6b6f8fd3", 0x29, 0x6651, 0x0, 0x0, r3}, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000280)='/dev/ion\x00') r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @remote}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000400)={0x2, &(0x7f00000002c0)=[{}, {}]}) r5 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000001c0)={{0x3ac, 0x1}}, 0x10) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000940)={{{@in=@remote, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x40, &(0x7f0000000040), 0x111, 0xb}}, 0x20) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2d4, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x978}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85c9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x53}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9d2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb45}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) write$binfmt_aout(r1, &(0x7f0000000640)={{0x10b, 0x0, 0x4, 0x115, 0x39a, 0xfffffffffffffff7, 0x2e7, 0xfffffffffffffffb}, "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a20) [ 1418.065136][T21616] binder: 21596:21616 ioctl 40046207 0 returned -16 00:34:31 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2010000000000000) 00:34:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500, 0x0}) 00:34:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='j/s\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1418.272623][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x401, 0x200) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x18a6) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0x4d, "bd574c85238e02f6f5f6206249c69dd0be4d0bd9948d1ef9cad98f3c9d1761b11d5204498124ca8097180bbbe272ac93c6c085d833fa2464fd38a9acbd082dff0085a6d400d805580ddf180590"}, &(0x7f0000000100)=0x55) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0xe24, 0x1, 0x0, 0x0, 0x100, 0x60800, 0x2, 0x4, 0x800000000, 0x3, 0xb94b, 0x2, 0x6, 0x401, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x8, 0x2, 0x4, 0x0, 0x7, 0x800, 0x2, 0x100, 0x1, 0x80000000, 0x9, 0x4, 0x0, 0x7ff, 0x6, 0x3, 0xff, 0x3f, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x8400, 0x8, 0xf45, 0x7, 0x41, 0x543, 0x6}, r3, 0x5, r1, 0x1) [ 1418.391229][T21906] binder: 21899:21906 got transaction to context manager from process owning it [ 1418.424682][T21906] binder: 21899:21906 transaction failed 29201/-22, size 0-0 line 2985 [ 1418.441315][T21770] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1418.482021][T21906] binder: BINDER_SET_CONTEXT_MGR already set [ 1418.512477][T21906] binder: 21899:21906 ioctl 40046207 0 returned -16 00:34:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) 00:34:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf\n\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600, 0x0}) [ 1418.832499][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x220f000000000000) [ 1419.009546][T22180] e mqueue: Unknown parameter ' [ 1419.009546][T22180] ' [ 1419.021138][T22184] binder: 22118:22184 got transaction to context manager from process owning it 00:34:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400140, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000001c0)={0x3, @bcast, r1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r2, 0x40107446, 0x0) [ 1419.061141][T22184] binder: 22118:22184 transaction failed 29201/-22, size 0-0 line 2985 [ 1419.093527][T22184] binder: BINDER_SET_CONTEXT_MGR already set 00:34:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3201, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1419.146214][T22184] binder: 22118:22184 ioctl 40046207 0 returned -16 [ 1419.209919][T22189] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1419.306848][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:32 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf#\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0}) 00:34:32 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80400, 0x0) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x20082) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0xff, 0x80000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/net/pfkey\x00', 0x105000, 0x0) pipe2(&(0x7f0000000c80), 0x4000) r2 = syz_open_dev$audion(&(0x7f0000000fc0)='/dev/audio#\x00', 0x8, 0x200) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000ec0)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, 0x0) 00:34:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2300000000000000) 00:34:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3300, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1419.654010][T22531] binder: 22522:22531 got transaction to context manager from process owning it [ 1419.677470][T22531] binder: 22522:22531 transaction failed 29201/-22, size 0-0 line 2985 [ 1419.687749][T22535] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0xf9abbcf3ede835e9) [ 1419.706414][T22531] binder: BINDER_SET_CONTEXT_MGR already set 00:34:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, 0x0) [ 1419.749847][T22531] binder: 22522:22531 ioctl 40046207 0 returned -16 00:34:33 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd\x00') ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x4, 0x8fb}) getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) read(r1, &(0x7f0000000140)=""/41, 0x29) 00:34:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2704000000000000) 00:34:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf%\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00, 0x0}) 00:34:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) 00:34:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x14040, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x80}) [ 1420.030719][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 [ 1420.101472][T22788] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1420.130796][T22986] binder: 22983:22986 got transaction to context manager from process owning it [ 1420.172294][T22986] binder: 22983:22986 transaction failed 29201/-22, size 0-0 line 2985 00:34:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) sendfile(r0, r0, 0x0, 0x200) 00:34:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf*\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2904000000000000) [ 1420.231659][T22986] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.265521][T22986] binder: 22983:22986 ioctl 40046207 0 returned -16 00:34:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3301, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:33 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000080)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) 00:34:33 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='/dev/ppp\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x644a}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200, 0x0}) [ 1420.428019][T23167] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1420.466190][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:33 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) mknod(&(0x7f0000000080)='./file0\x00', 0x2, 0x4f) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) 00:34:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf+\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2a04000000000000) [ 1420.594534][T23221] binder: 23211:23221 got transaction to context manager from process owning it [ 1420.637733][T23221] binder: 23211:23221 transaction failed 29201/-22, size 0-0 line 2985 [ 1420.677431][T23221] binder: BINDER_SET_CONTEXT_MGR already set 00:34:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$TIOCEXCL(r0, 0x540c) r1 = getpid() r2 = geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r0, &(0x7f0000000180)={0x90, 0x0, 0x5, {0x2, 0x2, 0x280000000, 0x200, 0xffffffffffffffa9, 0x400, {0x2, 0x4, 0xb9b, 0x5, 0x100000000, 0x6, 0x0, 0x100, 0x400, 0x5, 0x401, r2, r3, 0x0, 0x1}}}, 0x90) syz_open_procfs(r1, &(0x7f0000000080)='fdinfo/3\x00') [ 1420.704133][T23221] binder: 23211:23221 ioctl 40046207 0 returned -16 [ 1420.733729][T23340] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2b04000000000000) 00:34:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf-\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000, 0x0}) [ 1420.953806][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 [ 1421.119292][T23640] binder: 23639:23640 got transaction to context manager from process owning it 00:34:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3400, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000200)=""/77, 0x1ef) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000002c0)={{0x1, 0x1, 0xf, 0x1, 0x4, 0x6, 0x8, 0x4, 0xfffffffffffffffc, 0x5, 0x1, 0xffffffffffff0001}, {0xd000, 0x5000, 0xe, 0x3, 0x1ff, 0x1, 0x80, 0x100000001, 0xaea, 0x6, 0x2567, 0x8000}, {0x17000, 0x4000, 0xf, 0xc670, 0x5, 0x7, 0xfff, 0x2, 0x800000000000000, 0x9f50000000000000, 0x1f, 0x5}, {0x1000, 0xd002, 0x19, 0x75c3, 0xffffffffe83304ef, 0x1, 0x4, 0x80000000, 0x0, 0x2, 0xb0, 0x3781}, {0x10002, 0x11000, 0xb, 0xae0, 0x1ff, 0x1ff, 0x8, 0x9, 0x5, 0xfff, 0xfffffffffffffffb, 0x100000001}, {0x4, 0x3000, 0xf, 0xafc6, 0xfff, 0x800, 0x100, 0x7, 0xff, 0x8, 0x2}, {0x3000, 0x4000, 0x10, 0x40, 0x6e, 0x8000, 0xd0, 0x3, 0x3, 0xfffffffffffffffe, 0x1, 0x1ff}, {0xf004, 0x4000, 0xc, 0x100000000, 0x1000, 0x200, 0x1, 0x6, 0x0, 0x4, 0x9, 0x5}, {0x4, 0x13001}, {0x7006, 0x2002}, 0x20000010, 0x0, 0xf000, 0x400000, 0x1, 0x400, 0x103000, [0x4c3d, 0x6, 0x0, 0x5]}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x5}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000440)={r4, 0x78, 0xffffffffffffff37}, 0x8) rt_sigtimedwait(&(0x7f0000000080)={0x3ff}, &(0x7f00000000c0), &(0x7f0000000180)={r2, r3+30000000}, 0x8) 00:34:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1421.164549][T23640] binder: BINDER_SET_CONTEXT_MGR already set [ 1421.181419][T23640] binder: 23639:23640 ioctl 40046207 0 returned -16 00:34:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1421.257152][T23627] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800, 0x0}) 00:34:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1421.365836][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1421.456651][T23916] binder: 23872:23916 got transaction to context manager from process owning it [ 1421.482916][T23916] binder_transaction: 1 callbacks suppressed [ 1421.482944][T23916] binder: 23872:23916 transaction failed 29201/-22, size 0-0 line 2985 [ 1421.565403][T23916] binder: BINDER_SET_CONTEXT_MGR already set 00:34:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2c04000000000000) [ 1421.606042][T23916] binder: 23872:23916 ioctl 40046207 0 returned -16 00:34:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jf0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@null, @netrom, @remote, @rose, @netrom, @netrom, @netrom, @null]}, &(0x7f0000000080)=0x48) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) connect$x25(r2, &(0x7f00000001c0)={0x9, @remote={[], 0x0}}, 0x12) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="5c8ed0a87dde53311f430087e7277572a8236992f5ef9369a3ed35f00948b18906000000000000005929a38b29a4066217742ed5be361def64826514ec3d732d3279ad71bb002f68f025755c3e2624c9"], 0x4, 0x1) [ 1421.737221][T24089] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00, 0x0}) 00:34:35 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2d04000000000000) [ 1421.907048][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@bcast) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1422.011149][T24276] binder: 24274:24276 got transaction to context manager from process owning it [ 1422.050710][T24276] binder: 24274:24276 transaction failed 29201/-22, size 0-0 line 2985 00:34:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3401, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x20) 00:34:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfX\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1422.085173][T24276] binder: BINDER_SET_CONTEXT_MGR already set [ 1422.110874][T24276] binder: 24274:24276 ioctl 40046207 0 returned -16 00:34:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/77, 0x4d) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r1, 0x9, 0x200}, &(0x7f0000000240)=0x8) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) getsockname$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2080, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x401, 0x1, 0x1, 0xbb7}}}, ["", ""]}, 0x30}}, 0x8004) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x7ff}) 00:34:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000, 0x0}) [ 1422.339902][T24281] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1422.340960][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3500, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfc\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1422.411174][T24611] binder: 24606:24611 got transaction to context manager from process owning it [ 1422.433414][T24611] binder: 24606:24611 transaction failed 29201/-22, size 0-0 line 2985 [ 1422.448636][T24611] binder: BINDER_SET_CONTEXT_MGR already set 00:34:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) [ 1422.456631][T24611] binder: 24606:24611 ioctl 40046207 0 returned -16 00:34:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0xa0000) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x3ff, 0x2, 0x1}) [ 1422.618761][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2e04000000000000) 00:34:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800, 0x0}) 00:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000080)=""/28, 0xfeff) 00:34:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xc63, 0x6000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14, 0x80800) accept4$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="2c01020040000100240001006c625f706f72745f737461747300000080000000000000000000000000000000080003000b0000000800040001feffff08000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70f06972735f636f756e740000000000000000020000000000080003000300000008000400060000003c0001002400010075d9eb2c7365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff030000"], 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x90) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000140)=0x4) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) 00:34:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfd\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1423.001039][T25018] binder: 25017:25018 got transaction to context manager from process owning it [ 1423.033605][T25018] binder: 25017:25018 transaction failed 29201/-22, size 0-0 line 2985 00:34:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xf4a, 0x2) accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x0) [ 1423.050052][T25018] binder: BINDER_SET_CONTEXT_MGR already set [ 1423.060060][T25018] binder: 25017:25018 ioctl 40046207 0 returned -16 00:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x80, 0x0, [], {0x0, @reserved}}) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getdents64(r0, &(0x7f0000000000)=""/28, 0x2b7) [ 1423.172465][T25133] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3501, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfi\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x2f04000000000000) 00:34:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00, 0x0}) [ 1423.324328][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x5, @remote, 0x9}}, [0x100000001, 0x101, 0x6ceb, 0xffff, 0xb535, 0x1fffffffc000000, 0x7, 0x4, 0x3a7, 0x1000, 0x100000001, 0x14ad, 0x2, 0x7, 0x43]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f00000003c0)="44be815e12a4f6d72cda86911c5ffa84eefa664df10bf8430c98984a0d7bbedb92ac4726c815514ccf83130a5399d446400da90e586cebc3e59c36cc4671de1001048cb93e0b82099555e0f2f686193804286aaefec3c0560266962ea4c6104163d73c71d2eb3fdb4881849b0bb736721efe01e5a01d39f6ae", &(0x7f0000000440)=""/90}, 0x18) ioctl$EVIOCGPROP(0xffffffffffffff9c, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000380)=""/27) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r4 = getpid() r5 = getpid() setpgid(r4, r5) [ 1423.399198][T25352] binder: 25351:25352 got transaction to context manager from process owning it [ 1423.421001][T25352] binder: 25351:25352 transaction failed 29201/-22, size 0-0 line 2985 00:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x5, 0x1, 0x7, 0x2, 0x5}) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1423.453105][T25352] binder: BINDER_SET_CONTEXT_MGR already set [ 1423.488875][T25352] binder: 25351:25352 ioctl 40046207 0 returned -16 00:34:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfl\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1423.537493][T25361] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000648}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7086}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4801}, 0x10) getdents64(r0, &(0x7f0000000240)=""/28, 0xbf3226278b1c0baf) 00:34:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400, 0x0}) [ 1423.705416][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1423.757610][T25675] binder: 25674:25675 got transaction to context manager from process owning it 00:34:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3004000000000000) [ 1423.820896][T25675] binder: 25674:25675 transaction failed 29201/-22, size 0-0 line 2985 [ 1423.889078][T25675] binder: BINDER_SET_CONTEXT_MGR already set [ 1423.934684][T25675] binder: 25674:25675 ioctl 40046207 0 returned -16 00:34:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3600, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfo\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1c000) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000004300)=@ax25, 0x80, &(0x7f0000005640)=[{0x0}, {&(0x7f00000043c0)=""/249, 0xf9}, {&(0x7f00000044c0)=""/78, 0x4e}], 0x3, &(0x7f00000056c0)=""/231, 0xe7, 0xfff}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005840)=""/13, 0xd}, {&(0x7f0000005880)=""/105, 0x69}, {&(0x7f0000005900)=""/48, 0x30}, {&(0x7f0000005940)=""/75, 0x4b}, {&(0x7f00000059c0)=""/175, 0xaf}], 0x5, &(0x7f0000005b00)=""/142, 0x8e, 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000005cc0), 0x0, &(0x7f0000005d00)=""/193, 0xc1, 0xde7}, 0xfffffffffffffe00}, {{0x0, 0x0, &(0x7f0000006040)=[{0x0}, {&(0x7f0000005f40)=""/208, 0xd0}], 0x2, 0x0, 0x0, 0x294000000000}, 0x80000001}, {{&(0x7f0000006080)=@nl, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006100)=""/225, 0xe1}, {&(0x7f0000006200)=""/208, 0xd0}, {0x0}], 0x3, &(0x7f0000006400)=""/136, 0x88, 0x8}, 0x7}], 0x5, 0x2000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000c80)={0x0, 0x400}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000840)={0x0, 0x2}, &(0x7f0000000d80)=0xfffffffffffffe5a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000bc0)={r3, @in6={{0xa, 0x4e22, 0x0, @local, 0x8001}}, 0xd23, 0x6cb3, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000500008c70252b40e9ff"], 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000040), 0x0}, 0xfe19) dup2(r5, r4) r6 = socket$inet6(0xa, 0x80003, 0x800000000000006) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x45, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000ac0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[], @ANYPTR64, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESHEX], @ANYRESDEC], @ANYRESOCT=0x0], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f00000007c0)=0xffffffffffffff94) ptrace$poke(0x2000005, r9, 0x0, 0xff) [ 1424.057694][T25778] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00, 0x0}) [ 1424.170967][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1424.201139][T25901] binder: 25899:25901 got transaction to context manager from process owning it 00:34:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3104000000000000) 00:34:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) prctl$PR_CAPBSET_DROP(0x18, 0xa) [ 1424.230718][T25901] binder: 25899:25901 transaction failed 29201/-22, size 0-0 line 2985 00:34:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfp\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1424.307322][T25901] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.339113][T25901] binder: 25899:25901 ioctl 40046207 0 returned -16 00:34:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0xff, 0x1}, {0x6, 0x5}]}, 0x14, 0x1) 00:34:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x201, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1424.372944][T26052] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 00:34:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) close(r0) [ 1424.467366][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1424.550730][T26325] binder: 26324:26325 got transaction to context manager from process owning it [ 1424.559921][T26325] binder: 26324:26325 transaction failed 29201/-22, size 0-0 line 2985 [ 1424.646158][T26325] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.661144][T26325] binder: 26324:26325 ioctl 40046207 0 returned -16 00:34:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3601, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfu\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) 00:34:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3204000000000000) 00:34:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8000, 0x1b4e, 0x7, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x5, @rand_addr="62dc2a6a53165b2c1d0110d0cdaf4962", 0x80000000}]}, &(0x7f0000000180)=0x10) 00:34:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0}) [ 1424.743278][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1424.789269][T26443] binder: 26436:26443 got transaction to context manager from process owning it [ 1424.822751][T26438] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:38 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)='*\x00', 0xffffffffffffffff}, 0x30) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @empty, 0x3}, r1}}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/protocols\x00') getdents64(r3, &(0x7f0000000280)=""/77, 0x19) write$vhci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="046a338a4ca448eec4b9cf6b2042899b7b44cfb663807728b4da37f1423e007ada062cf641889a73cf752237baadb00901861963849d1ba26bb4c61302b800fbe68c3a7180d47fc72d8edbb9c0455534dfb495d33d92235b56b809933bf2112ddb46eb8281c17c8b0af663a74e3f4fd7aa1902aa5899e26c4297e6f91b84a4a79b893ca37d128250ea5fb15fff24854ceec54111cbc319baa8cf918fc3db354b5fbf327f567c01f5df8a30571fb2886a70553eda645131687ca837c68554d2"], 0x74) getdents64(r0, &(0x7f0000000400)=""/28, 0x240) [ 1424.837140][T26443] binder: 26436:26443 transaction failed 29201/-22, size 0-0 line 2985 00:34:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0x61}, &(0x7f0000000180)=0x8) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1424.893066][T26443] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.899371][T26443] binder: 26436:26443 ioctl 40046207 0 returned -16 00:34:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3304000000000000) 00:34:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfx\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x8, 0x200) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x2, 0x33735759, 0x3, @stepwise={0x6, 0xffffffff, 0x3, 0x7ff, 0x135, 0x3ff}}) 00:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0}) [ 1425.085852][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1425.146777][T26868] binder: 26867:26868 transaction failed 29201/-22, size 0-0 line 2985 [ 1425.161596][T26822] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1425.201555][T26868] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.207850][T26868] binder: 26867:26868 ioctl 40046207 0 returned -16 [ 1425.338182][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3700, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x4) getdents64(r0, &(0x7f0000000080)=""/28, 0x10047) ioctl$KDSETLED(r0, 0x4b32, 0x2400000000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{0x10000, 0x5}, 'port1\x00', 0x10, 0x24, 0x1, 0x0, 0x8, 0x1f, 0x9, 0x0, 0x7, 0xffff}) 00:34:38 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x2, 0x100000000, [{0x7f, 0x0, 0xffffffffffffff84}, {0xffff, 0x0, 0x5}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r1, 0x40107446, 0x0) 00:34:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x02', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0}) 00:34:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3404000000000000) [ 1425.519578][T26982] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.546547][T26982] binder: 26980:26982 ioctl 40046207 0 returned -16 00:34:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:38 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/153) connect$caif(r0, &(0x7f0000000080)=@util={0x25, "d74c0c35f6ce20efce1d05ab0beffb7f"}, 0x18) getpeername(r0, &(0x7f00000000c0)=@caif=@dbg, &(0x7f0000000340)=0x80) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}}, 0x8001) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xa343, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, r3, 0xb08, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff65}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x380000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24008890}, 0x40800) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r2, 0x40107446, 0x0) [ 1425.627771][T26978] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x03', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0}) 00:34:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3426000000000000) [ 1425.759115][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:39 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc0000000}) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1425.840716][T27397] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.868861][T27397] binder: 27386:27397 ioctl 40046207 0 returned -16 [ 1425.903657][T27406] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3701, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xf0, 0x3, [0x7, 0x6, 0x8]}, &(0x7f00000000c0)=0xe) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x401, 0x2, 0x0, 0x10000, r1}, 0x10) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0xffffffffffffff1c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000180)={{0x3, 0x33, 0x9, 0xffffffffffffffff, 0x9, 0x9e}, 0x80000001, 0x80000000, 0x10001, 0xa65, 0x400, "dc8bcfe38d59f4d5f4c65c360739d18e27a00a43898ed949abf081c70d0de186a1923abbc509e940731c4c3aae86c63c25f5e4c412ebe4af9780daa7f18afb32d1b5058e79371f06daa0655ac4e162c7326600aed45a0bc59712483a3ad8876f70a83498711cf87f335ec0b960ae9ea7054eb859b6effb73f1af757709ebf467"}) 00:34:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x04', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:39 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3504000000000000) 00:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) [ 1426.051408][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xfe0, 0x4) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:39 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) getpeername$ax25(r1, &(0x7f0000000040)={{0x3, @netrom}, [@bcast, @null, @rose, @bcast, @default, @remote, @remote, @rose]}, &(0x7f00000000c0)=0x48) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1426.121332][T27624] binder: BINDER_SET_CONTEXT_MGR already set [ 1426.133277][T27624] binder: 27623:27624 ioctl 40046207 0 returned -16 00:34:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000300)={@remote, r1}, 0x14) getdents64(r0, &(0x7f0000000000)=""/28, 0x96388f7ee56b1ff3) ioctl$KVM_SMI(r0, 0xaeb7) 00:34:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x05', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1426.246014][T27622] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0}) 00:34:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) [ 1426.334745][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:34:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x43, 0x6, 0x8161, 0x1, "ab41888a5bc1c82214bc3856102bb6117abc47efee4c7c25c843797858645cf5"}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x80000, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r2, 0x40107446, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) r4 = gettid() write$P9_RGETLOCK(r3, &(0x7f0000000040)={0x24, 0x37, 0x1, {0x0, 0x4, 0xf400000, r4, 0x6, 'system'}}, 0x24) [ 1426.451932][T27946] binder_transaction: 4 callbacks suppressed [ 1426.451940][T27946] binder: 27945:27946 got transaction to context manager from process owning it [ 1426.496598][T27946] binder_transaction: 3 callbacks suppressed [ 1426.496612][T27946] binder: 27945:27946 transaction failed 29201/-22, size 0-0 line 2985 00:34:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3800, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:39 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$setstatus(r0, 0x4, 0x6800) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) 00:34:39 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3526000000000000) [ 1426.573773][T27946] binder: BINDER_SET_CONTEXT_MGR already set [ 1426.607734][T27946] binder: 27945:27946 ioctl 40046207 0 returned -16 00:34:39 executing program 1: syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x100, 0x9, &(0x7f0000000900)=[{&(0x7f0000000080)="6d60fa5ad1a488c2d556c45bd9b1d237e90abc4fccaf81216ac41060eab52bbaa29a00475731e6930f88dc38cfc09c5307764eae33ce4fa42a1668ac76a72776044814faee783f3b9466f795f086d23a135fc061e5dd3c862da0f481699957400bf7f4d69c75de", 0x67, 0x7}, {&(0x7f0000000180)="283eb6f8c3b7c9aaea0058c37d44af74679340bbd5a3af55266214a5c29d64f73b3f6290f1b0ebc0839160ba777ef517bbc2f65f29a9fa2e0aefa3a83c3405fca9dcdab6e8beda57a26c683b3936289f3f997dac9a1fcf1b70f1686d9df34e7a1daf98c07692f8e64518560b52ad", 0x6e}, {&(0x7f0000000340)="2f67d858c8c0f618aa69ac115ea49a2f7a0aa2010f377d0bac5f4ed99a97522b72482a6db3af0435cfcc12e65675e4c93433aa743b7f6392687ccbc3f61f27076b8035e1ae556b974b14334939729804c9d6cf03b6d7c34c48f07e3136ea92befc9fe551f6627792e41504323423dd65d0bd374e93faca7667c4bfa10e66f199f878b90d9fc393599fd915795f2a67ac74fa5b4a155507e7e0", 0x99, 0x1ff}, {&(0x7f0000000400)="268ae8f8562974965606d95b2e735714c9fabf3da4ea3d80a38c504b3fc2fc6477673cecd997f7f913c296ec28036b0af032dfb11f69e40a75f7f6fc77997aaf490b78ceead4815930a50bfaba7c9d45a8600c65028d7cd97e4423e31485c064d4e12810fffff73e18ed95eac4b1a6becfbaec1330f5fc745833de8e904ff6af944104f91b09df0f2955764b9b23b3fcb9bbfa1af0ecc2bb0afa08568d32b407ec08a4e7c1eb1cc33e94e50bdb605e7cacecf22812b2873a60af6f01b5127d213a2bf8c5d0cca7", 0xc7, 0xfffffffffffffffe}, {&(0x7f0000000500)="f3b6ada5b104545310b96ba0941d37367445f923eabe25501996f78a18224165a7f9db7864d3f3435404d01cfa2bae03a6e1ef5a9d313fb7a08821076087b58f2217cab4fe6103a01bbecc0b22702962cf53048f253539dac452dda0b00ca1a7daa0fe94dce15b01905053ce8ee1fea0e0e9a07fa4dcfb9d5333b4aeefbf2e63259a4a633b4b2f84f6c1c3e6c6d05d2cf36c0a74b228a0f27314bea6b4d4c57080e76642e2887df40ff9dae4f4136eabd4c8be5e945064faf81e340e95774e2a4e5101aa3f3352317f4fc3d222e6bbf3cf6dab2367b8e33a3cd9b992c8cd1f2b9a4d045eb039", 0xe6, 0xfffffffffffffffc}, {&(0x7f0000000600)="0ac737d474ade941bc1c334bbf540a30301c20224a6275d07c2bf508f9310d5ddff111616a5caae6d32166f710e0845e526be1e88079867c27a21bdc8d16b2208ec19b89a730e3fb1f07779e3e42b4fff484d3a998c71dea7a3036d1bf0b991e845475730d2d2c904619a44ef2efe88740e6991de6fe599c9cfe9a6561439249041961e740c128358034170ab07e353a56f9fb2bfef6878cbce66b531cedb54c13f58aaf", 0xa4}, {&(0x7f00000006c0)="fc9a1e153a2771f5ee2b47199c652095006509e676d129e8e723531b7a7f7607d190c70cf87e799c07a7707dfd346f6ff01531852ff2fe745ac9cf9414b4ab61245abd8d9f84009b2f7a1026f534bcb881fd9da74e8d84007c75155eb031ad698bffbaaf8d4bc996f1c088ddde3d3174672a4ee45927e0b06126437e7eb08b554a7e45cd3111dcaacc5b844d96a88f2b60ff676db7125a58e98d673a7299eae1afc298f1127f0a6e877bd04296835968260d3ff8c77c15befea15d97ea91a98fcf8df1794204780a2218be3180e357d30fee870d20beb42b9341", 0xda, 0x3}, {&(0x7f00000007c0)="f07a66d3aeac133c60a4941b79d539e726aaaae33efcdbeb859c27c6445d6f8d5a7c756bdc350c546480a5be05db84a607bc8f3e9cf6c5fa7d507d53762a7372a01515871eabcae67cff35767c10c75ba01fa80b985f623c864c4c789a87a2249e04f0b4921798bfbe051bc398aa6c250b208deacb786da5a42c39c6e8a8d17728b1716cbf0e6b66be589edba440a7436f", 0x91, 0x7fffffff}, {&(0x7f0000000880)="d842d9364fa976bfc532847631b10c6676d0af2fdb181da12b8824e04a56f0c33d30d1e568e5f3c8348de3ada75d483ea0a9c33755b0999d3dfcdab6dfe2346511ffb2b7a4277b177029e39d380961172d141587", 0x54, 0x3dea}], 0x20000, &(0x7f0000000100)='/dev/ppp\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1426.641358][T28058] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7fff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) 00:34:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x06', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa000000, 0x0}) 00:34:40 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3604000000000000) 00:34:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={0x20}, &(0x7f0000000040), 0x8) 00:34:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001800)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e20, 0x46ce, 0x4e20, 0xff, 0x2, 0x20, 0x80, 0x7e, r1, r2}, {0x40, 0x0, 0x2, 0x2, 0x3, 0x10000, 0x6, 0x1}, {0x7fff, 0x5, 0x4, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x33}, 0xa, @in6=@local, 0x3505, 0x3, 0x2, 0x1, 0x405, 0x3}}, 0xe8) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1426.878140][T28364] binder: 28334:28364 got transaction to context manager from process owning it [ 1426.910681][T28364] binder: 28334:28364 transaction failed 29201/-22, size 0-0 line 2985 [ 1426.986557][T28364] binder: BINDER_SET_CONTEXT_MGR already set 00:34:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x153) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1427.039598][T28364] binder: 28334:28364 ioctl 40046207 0 returned -16 [ 1427.075895][T28374] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3801, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\a', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7f, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.SMACK64\x00', &(0x7f0000000240)='fd\x00', 0x3, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x0, &(0x7f0000000140)}, &(0x7f00000001c0)=0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={r0, 0x0, 0x80, 0xee, 0xffffffffffffffe1}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r2, &(0x7f0000000280)=""/77, 0x19) getdents64(r2, &(0x7f0000000000)=""/28, 0x1c) 00:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12000000, 0x0}) 00:34:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:40 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 1427.442304][T28718] binder: 28699:28718 got transaction to context manager from process owning it 00:34:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x330) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000380)=0x82) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x801c581f, &(0x7f0000000080)) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1427.482766][T28718] binder: 28699:28718 transaction failed 29201/-22, size 0-0 line 2985 [ 1427.522626][T28718] binder: BINDER_SET_CONTEXT_MGR already set 00:34:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1427.545215][T28718] binder: 28699:28718 ioctl 40046207 0 returned -16 00:34:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\b', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4840) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) fstat(r0, &(0x7f0000000000)) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1427.633994][T28726] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x20000000, 0x0}) [ 1427.912458][T29128] binder: 29127:29128 got transaction to context manager from process owning it [ 1427.957744][T29128] binder: 29127:29128 transaction failed 29201/-22, size 0-0 line 2985 [ 1427.996483][T29128] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.008377][T29128] binder: 29127:29128 ioctl 40046207 0 returned -16 00:34:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3900, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x3, 0xf004, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\t', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) getegid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x3f04000000000000) 00:34:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48000000, 0x0}) [ 1428.236903][T29240] binder: 29231:29240 got transaction to context manager from process owning it [ 1428.277438][T29240] binder: 29231:29240 transaction failed 29201/-22, size 0-0 line 2985 00:34:41 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ftruncate(r0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) 00:34:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) msgget$private(0x0, 0x24d) [ 1428.317885][T29240] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.353477][T29240] binder: 29231:29240 ioctl 40046207 0 returned -16 00:34:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\n', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1428.429362][T29236] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3901, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000180)=0x4) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000100)={0x7ffffffe, 0x80000000, 0xdc00, 0xfffffffffffffffc}) 00:34:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c000000, 0x0}) [ 1428.528654][T22443] binder_release_work: 4 callbacks suppressed [ 1428.528661][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@getqdisc={0x30, 0x26, 0xb01, 0x70bd2a, 0x25dfdbfc, {0x0, r3, {0xffff}, {0xffff, 0x1}, {0xfffd, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x5) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x2, 0x3ff, 0x2, 0xffffffffffffffff, 0x7, 0x0, 0x4}, 0x1c) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1428.616854][T29660] binder: 29659:29660 got transaction to context manager from process owning it [ 1428.631318][T29660] binder: 29659:29660 transaction failed 29201/-22, size 0-0 line 2985 00:34:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 00:34:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x10', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4000000000000000) [ 1428.702284][T29660] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.716950][T29660] binder: 29659:29660 ioctl 40046207 0 returned -16 00:34:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:42 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000e40)=0x2, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000880)=0x0) setpriority(0x1, r1, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$cgroup(r2, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@ipv4={[], [], @multicast2}}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000dc0)=0xe8) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="401c0000", @ANYRES16=r3, @ANYBLOB="00002bbd7000fddbdf25040000002c000700080002001800000008000200010000000c00040080000000000000000c0003004000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) getdents64(r2, &(0x7f0000000280)=""/77, 0x19) getdents64(r2, &(0x7f0000000000)=""/28, 0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) sendmsg$kcm(r2, &(0x7f0000000c80)={&(0x7f0000000300)=@ll={0x11, 0xfa, r4, 0x1, 0x1, 0x6, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)="88f409249711f384955c", 0xa}, {&(0x7f00000003c0)="91101b832ca9297167ae02b91cf4634e97cd92b96898ccfc85c4ba77fc6c5bd56917043f16ffcc158ade337fdd4f32d68ad083e83320c8a5fbf3642abb9c7d81273c495eb951f7426ec682c2d08d2e256259056f19651af27c4b887917ebe0b9e2ed4fd22e6ecd9ad81b0690174b00e3ef17f40b164b46ad403aa10bb510a312811ebdc213c0e3512af19341170361386f775557e53993bd87760709d742a46779a447d90e9349ba7b7667ec77d55e3a5c0b1fab5a37ab1dfde600d3be09dcf1fe5b66ed28", 0xc5}, {&(0x7f00000004c0)="a7523e1149d37996ca78f35705261c5569f3531173fef30bc00da05c71eabb99ffe162d9e4a434ad3639a4", 0x2b}, {&(0x7f0000000500)="aeec1194b109e15b632e6f8437cf122ede8318fa75085b314c302109adf75bb048479604a45e809854d3072b0a13aeb220e9b8f07e25aef73af4338c56cb04d37cbb2f5f3c044340285662bd04b67dc5653576301fe6c14ca0b623aa271d1c27e92bd4988e7c0503d07a64a53e579849bfa5d58ad7028a067cad0647058143659428eaa0a1da090c93de7577f695b442f751f280ce8bdd665b61fa4a5d7183a45a", 0xa1}, {&(0x7f00000005c0)="396bfb21fe5a3ff9636a92bf3435ee55f8e07226a6b0f5fe72bbfbb033975f0aef20266ff3fc8b1661ffec5b81e54c28f59a4e0ae3184cfbdfdb16bafa50b8dd67", 0x41}, {&(0x7f0000000640)="05b34c1dab29f5b7b7f091f16c776c09648975c6aeeac322a7efdac8769109ad02960e6b04b15452e58296f95a6a935bef6baa347ae6c110a4cf0565c2628a68bb957a585e4defd9622318447a110f49f11a82c59f09213af0aba708df54171b9ef0a5c27cb3bac160d2d432a3c583569669046d45f8bfa25d7728fac57c55e11131c73f2e54c7459950d9d651ab7168516848f75fa7ef6546456a8f02d46ee5dce6c50b861c81107b1f071d1f7f293be21daef85f2ab67de7f34557ab8a285ae8829e43a917c27be7c806d7", 0xcc}, {&(0x7f0000000740)="294661b344697ccfacb2b08076ce10cb53e0889d44d1a02ac84a0bb3669a066c2652e3147f21774b3309c11fee33ababf21d653609bdf29cf90b24414c1e7ec55a05742aa174906388743e6699fb43ba1071dd2dbd9fbd7d0ddd236542b5ee6768e75fa12d165ee8ff6fe36897cd1873704deec61021a249d63c4b2143770c3504ff850e6daf64730b2fcc166b56ed0f0255b127232211f3dcd3ef8c09e2c4f94bc8d52a4a2dde5469ae7166863b8420e68405ee3b3d57269e2575719e0321aea211333b753789050f8d30547d34d243c63b5993520b0d59104ffe35e8b5b0cba9da0f731bd78beffdcbab7f432163bf519245dbb3aeddef1b", 0xf9}, {&(0x7f0000000840)="653d6cd6c8110b2dc661c53eaca6bb6195540a0cc9a4ab06f29c01c68f52873b587859", 0x23}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="c61406bef134ac5540a413ff05c85a0b15d6b94384fc42ee7a1111065317af947b4197f63960667ab71a9fc3b4446e8d0c075097be63945f796e6a60c066db9f789b6db0a43d2d5563db5d5a647375022d03ba69e4bc0b5e321b23578899e9a5ec385c4426f42988056fd83bb74ba3b997a41b2afcc1be83e3c2f6748bca78d60ee6349bccaeb8039aeb71fce1d6402ffb82313aeb446bc1f1cfe010522e396822fe67", 0xa3}], 0xa, &(0x7f0000000a40)=[{0xa0, 0x10e, 0x6, "9ac226636833a574cf8f431c35e0be1f335c2c4849bcf607143ccccc6a9980d1f0cf924d4fd0a0de2208a4ba56bb96b320ab6e7f4c92da58e9e1934de8fad84a5b1a280bd8fd7f92b340c6725e31eca366998c670dd4bc173e2ce73ff22fc5f356bf472582def852cbd46adff61db4c0ba35cc54a036c953ed78a36cfa89f15b59ab3ebc7fbf40386b84b0"}, {0x58, 0x112, 0x20, "3fda636f45c14ae95eabad40a264b8bc58a3c85bcf02b03d79f297797836c42b04ab3f09dd0d40bcbfa2a6988831686868414806cac9ddb0e2ed174afa2d9068635ab9c69dd36851"}, {0x18, 0x101, 0x7e79, 'S'}, {0xb8, 0x10f, 0x9, "1e54dc38d965402dfe183f5b0b6bd4a4168f6e523f369189f045f93afe363293344911cbbc9f4671e707e2414550091c3949ffe9d93518953fc4cafece24fbfbc137271aa6298b3e5ba9d2f078d20da4c204785b0a90355f1b364e81e52038980851fdc685848caeb8c53fae74f39cb60b09a4cdeff8901902a2e1cae2ae45f12e5d3b742f94bc713bf8676f9724e706fe5a2f915a4e6b7d05b6b8bc1feaea633b"}, {0x40, 0x0, 0x9, "5a25d9d16b068a849753bc868ec232b90172c1476156ed68ade46c6ece08789784086d32bbbbc06ef22651"}], 0x208}, 0x11) 00:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60000000, 0x0}) [ 1428.861497][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1428.902168][T30023] binder: 30022:30023 got transaction to context manager from process owning it [ 1428.933539][T30023] binder: 30022:30023 transaction failed 29201/-22, size 0-0 line 2985 [ 1428.943212][T29975] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs#', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x400200, 0x0) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x6) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x401) [ 1428.977877][T30023] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.004440][T30023] binder: 30022:30023 ioctl 40046207 0 returned -16 00:34:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3a00, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20101, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000680)) r2 = msgget(0x2, 0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x20, @rand_addr="79e162094a22ea119b58fc7029384ff0", 0x6}}, 0xb9, 0x31}, &(0x7f0000000600)=0x90) syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x309, 0x428601) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000640)=@sack_info={r3, 0x9, 0x80000001}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000180)=0xe8) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000006c0)=""/56) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x4, r4, r5, r6, r7, 0x2, 0xfb}, 0x200, 0x7fb1, 0x0, 0x1000, 0x4, 0x2, r8, r9}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000700)={0x4, 0x10, 0x1, r1}) 00:34:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4004000000000000) 00:34:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x13c) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0xe81, 0x3f, 0x100000000, 0x3f, 0x8, 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x1000) 00:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68000000, 0x0}) [ 1429.180825][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="e4aa907cf3c3ede036c7ab40ee2d5661b05a9a11aadfb150439be8b2a8eab4996335382d42fcf2d07eb3775787482ae0791e9a1d815c02787e51195bebdfb5fa7f28f20abf561bc34c7c52f3dcff0f732ddc1925cda048967f39beddca4d80e9e0d906b7dbbf7f2a4c111e58b16b7b99b6c4e4d804109e2aaefbd91373fd6eb68114c8bff3d747bbe7237e429e4751e2531c3d5e75f249f1a2a8a7cea1d8b9d1f88155b00927d7f6154c6c13", 0xac}, {&(0x7f00000000c0)="f3d87fc382b977ee82761b72d77231e25e8ab266404aac6d9948599f907d837486a44f06d9e7090f0fc37f623eda2efaa12bb44de1a8c414897378be81f80821110d4318358526fe", 0x48}, {&(0x7f0000000180)="f415975eed47d78e2f36bc31f74b7e189f0c34e65ad3724d7640fec38ca56f37640f54c4178cc106be301dd2d51704343bc654c3aab5297a2a3f0313793cbaf3c4f9ea99479b13c35701812ab4c97073966d78715f858f0d6384ffce9161ce12400339e97a9363ffd66f170e207d687870ba07fd4a3387f759f2c58121c0fbb5c70f56cf8f2feba9bd7b68d4ee8430c59888a14eae21491b3b15", 0x9a}, {&(0x7f0000000340)="762e4522dde63e45602dac8aa8c82a3d89e326256081e06b487b84645a4caa48d4cd3316078c91b7513efa69d41e11745eabaf6a62bb12313f04a77e8961f54dc0cdfddf9b5c151a72b2cd26885865eae003802cf74df30f7e52cabcf067d584e33e2f4f43e3486051b889efc96e4ba86941525d9a127aa77d295f40e1c3d669538f3a77bbb227556d538c0745999c5b705f77a2dcfcdc40080742b7d822eb61646b75ed7a8c7486a137c7ba62dc80da85417d3bf4cd2abe7f16c2faddfebafb465536ba", 0xc4}], 0x4, &(0x7f0000000480)}, 0x800) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1429.249042][T30309] binder: 30290:30309 got transaction to context manager from process owning it [ 1429.278177][T30309] binder: 30290:30309 transaction failed 29201/-22, size 0-0 line 2985 00:34:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x3e6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000680)="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", 0x10d, 0x1b9a4d0eb29, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xb8, r2, 0x208, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}]}]}, 0xb8}}, 0x4000000) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) bind(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x2, 0x4, 0x2, 0x4}}, 0x80) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) setpriority(0xffffffffffffffff, r3, 0x400) 00:34:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfsH', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1429.318142][T30309] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.347160][T30309] binder: 30290:30309 ioctl 40046207 0 returned -16 [ 1429.358323][T30280] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4104000000000000) 00:34:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0xfffffffffffffef2) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) 00:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c000000, 0x0}) 00:34:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x401, 0x3, 0x0, 0x9, 0x4, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x9, 0x7c8, 0xc936, 0x4, 0xffffffffffffff80}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x8, 0xffffffff, 0x4}, 0x10) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1429.580618][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1429.645589][T30630] binder: 30629:30630 got transaction to context manager from process owning it [ 1429.700689][T30630] binder: 30629:30630 transaction failed 29201/-22, size 0-0 line 2985 [ 1429.719817][T30624] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1429.734661][T30630] binder: BINDER_SET_CONTEXT_MGR already set 00:34:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3a01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = epoll_create1(0x4000000000080000) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x8000, 0x0) socket$isdn(0x22, 0x3, 0x0) timerfd_settime(r4, 0x0, 0x0, 0x0) dup3(r3, r2, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)}], 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) 00:34:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfsL', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1429.764236][T30630] binder: 30629:30630 ioctl 40046207 0 returned -16 00:34:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = getuid() syz_genetlink_get_family_id$net_dm(0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) fchown(r0, r1, r3) socket$inet6(0xa, 0x4, 0x5) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)=0x0) syz_open_dev$media(&(0x7f0000000780)='/dev/media#\x00', 0xfffffffffffffffb, 0x100) r6 = getpgrp(0x0) sendmsg$unix(r4, &(0x7f0000000740)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000180)="1fefc2b67c0bf77e6bbc5424609c3674d4dd2af7e583ad8593e44ffd4089da8c141f3693d252ba71960e46f9b60ef605795ff443efcdcdb29191a65f881bd4921eff8d89a7f3481c0c32ac2e2e5323e1629854177fdd4f71c02994ff27ae69f50c93386bf8e7a01cc3cca68748698c33bee06db79af6c6dcd83badc025cafdc24822338572e95888147213b5ea66698e2935345c0cecf93651437b7402c13b8cd04badfae39702371517d39e", 0xac}, {&(0x7f0000000340)="416ce8f30d642c0e4a12ce8ee2ac29251fdf7a062925bc280d251a1998f4c6b82c3bb4ad0cd0ae3b4f408c6403c7705f1399ce46b1ce91507e7a333a512ab9b5ba7aceef16e5e2fd33dcd8ae190180dbf03dae8cca270a59995fc7e3e2be543989b0a01bb903701a75d03678448c35211ab2042c6eda2ee3fe3d1dd4186b8b3244ce677dd0a54cfa379bf64e27bc8d784a95b3d7b0f516233a061e99ecf9257645f296a16a86843451234fea84501ab5884dd886cfa4f363f0a888e3f6dba888ee378acf2d3822a61f3385c683860265d389f5", 0xd3}, {&(0x7f0000000440)="79150a0df8c605091379c5ecc27563b60134837512839404b3c5cda77a604e02c884a79f11681763ba14", 0x2a}, {&(0x7f0000000480)="58fb5364470b869bdd1276a58f4018b60a7775bb753c944ef48a4e0ea4361261b305071b6d9b4a6bed71e1048775efddb99dbad2798772c2c9a41d9345f4fa845b0e", 0x42}, {&(0x7f0000000500)="be949d05a736e7f4d815ff90cd750eabb187aa3f217ba93110d589ee0aaed402c7284ff37f5d61acc7115ceee9890a35227579b03e5ccb01bc495c462c07066a1ccfba297c59c85a51c881914d9c9a252b672b96dab6edfd2af7c47eccef1dc31ef86084883ba2d29634b44c1e767d029f0e77744a21878e8a6578cf6b525279f7d5f885237fb5349d0e6d1ea280f2943d2e797e7d927c08de327e388a22f72ca69bb4584f20dea698c47a4c1d56ff1e41b52140b2e828952765fb", 0xbb}], 0x5, &(0x7f0000000680)=[@cred={0x20, 0x1, 0x2, r5, r1, r3}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r1, r2}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x90, 0x1}, 0x4008811) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:43 executing program 0: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd\x00') setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) getdents64(r1, &(0x7f0000000280)=""/77, 0x19) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000300)={0x384ac265, {{0x2, 0x4e21, @broadcast}}, 0x1, 0x7, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @rand_addr=0x4}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @loopback}}]}, 0x410) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x7ff, 0x4) 00:34:43 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4204000000000000) 00:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74000000, 0x0}) 00:34:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0xffffff61) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x3, 0x1, {0x2, 0x3, 0x8000, 0x1, 0x101}}) socket$inet6(0xa, 0x1, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="91f63871c7c22d841701877ad7dc3cfd", 0x8000, 0x3, 0xff, 0x6, 0x800, 0xfffffffffffffff7}, 0x20) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1429.953376][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3b00, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1430.016937][T30965] binder: 30962:30965 got transaction to context manager from process owning it [ 1430.037162][T30913] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1430.052243][T30965] binder: 30962:30965 transaction failed 29201/-22, size 0-0 line 2985 00:34:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs`', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1430.089814][T30965] binder: BINDER_SET_CONTEXT_MGR already set [ 1430.101320][T30965] binder: 30962:30965 ioctl 40046207 0 returned -16 00:34:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x1) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000100)=ANY=[@ANYBLOB="0065000000000000000000000000febc00000000"]) write$P9_RLERROR(r1, &(0x7f0000000180)={0x1a, 0x7, 0x1, {0x11, 'security.selinux\x00'}}, 0x1a) 00:34:43 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4304000000000000) 00:34:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x12) 00:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a000000, 0x0}) [ 1430.260013][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3b01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1430.325116][T31345] binder: BINDER_SET_CONTEXT_MGR already set [ 1430.356185][T31345] binder: 31335:31345 ioctl 40046207 0 returned -16 00:34:43 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@caif=@dbg, &(0x7f00000003c0)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000400)='tls\x00', 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x200002, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x101) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x1, r4}) fstatfs(r1, &(0x7f0000000180)=""/125) fadvise64(r1, 0x0, 0x3, 0x4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x1}) ioctl$PPPIOCGUNIT(r2, 0x40107446, 0x0) 00:34:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2020a400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x0, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xffffffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004041}, 0x40000) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfsh', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1430.421799][T31319] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) 00:34:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3c00, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:43 executing program 0: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="71eec5911633715f907ae4c3375aabf74689327ced274acf05bbf9bb410014527ac0da8070409f81b099e13c08e93ad5d80bc424e829acc3d67dc66188795b0e600125a0454d57d257c9c596dfe380189f23ad4286e0c19d777854583d766a701a649521565a0b32ec73bf006bf018f036722cfc645b60e4469b9936b383bbc8749a39d01e34cf99df271bf80b9836fe186207cc8a5ad6955dda7a32f24ccce5ac8323c9fd50e54e9634ec5d8e3bcd6c75a9ed52bd17c6872f8b185aa37e10a962", 0xc1, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000000700)='blacklist\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r0, 0xfffffffffffffffe, 0x3ff, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000300)={"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"}) fcntl$setlease(r2, 0x400, 0x3) getdents64(r2, &(0x7f0000000280)=""/77, 0x19) write(r2, &(0x7f0000000080)="2941e31f1de8d33773f061c6d0a08f1f367c026c9d804f38c843db7f964d1019f02ff585859d315db0b8032afdff852bf4fcf5b576f6f3b3520cdaccd99edd5afbd032a49c25f2455db67f3ebb014ee94c3e5bf6", 0x54) getdents64(r2, &(0x7f0000000000)=""/28, 0x1c) 00:34:43 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4404000000000000) [ 1430.569613][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x3, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x430303) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) [ 1430.638079][T31704] binder: BINDER_SET_CONTEXT_MGR already set 00:34:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000400)=""/77, 0xffffffffffffffeb) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfsl', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1430.729763][T31704] binder: 31699:31704 ioctl 40046207 0 returned -16 [ 1430.828240][T31742] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 00:34:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x8, 0x8, 0x5, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r2, &(0x7f0000000280)=""/77, 0x19) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) getdents64(r2, &(0x7f0000000140)=""/28, 0xf7) [ 1430.920316][ T7768] binder: undelivered TRANSACTION_ERROR: 29201 00:34:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "c953cae0e8d908c7412e0f1c412531c009e07b46"}, 0x15, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0xc4a6444435ca204d) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:34:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfst', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0xe) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) [ 1431.054705][T32075] binder: BINDER_SET_CONTEXT_MGR already set [ 1431.084982][T32075] binder: 32029:32075 ioctl 40046207 0 returned -16 00:34:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80001, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3c01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4504000000000000) 00:34:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/77, 0x6) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) 00:34:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1431.257996][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfsz', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) socket$vsock_stream(0x28, 0x1, 0x0) userfaultfd(0x80000) getdents64(r0, &(0x7f0000000000)=""/28, 0xfffffffffffffebb) [ 1431.373123][T32286] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1431.384617][T32352] binder: BINDER_SET_CONTEXT_MGR already set [ 1431.401847][T32352] binder: 32351:32352 ioctl 40046207 0 returned -16 00:34:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001880)="648ca9a1e0a58091de9acb6b393082610a9d2c8f77db54135c00f1205bc0a2b53271b9fd48e4d2bdb53a6240c9ff74d5ac1c897baceb7b4535e9a3297c925c783dde227b1c0c09742d16aba7a060b1e906420d43f0b7ad6503874a06d58c9a511fcb64a9bccc14eb427600e676066a09ba9bb7a84179f254d9049bc1eb43885b9c6ef155918ecf620338fabecf4a264becce53130eaae743c07cee17faef02001a6c963c1ccf8d8aee87f538e0671078fe02c56a01f4bf2bd0aa1fe206dafa1a221a48dfc2ec5e11d9d988a9703802d98c220c26a11c8e7104ee04767935bcc336898dfecbf68bf4fceb4b127bda30272eb9aa43133b88f43441ba4bc00ac85d254d618a2571c7328c8fb89efc707d1694a5a375216256f151cda73f0b142a7138e5106b71310b88868894c0d325ac7041af35ee596c75e4098272dbbe630a6886853c6e1adfd7f55b4f6cf9dabece875fd6b2d3012991e6bf82c2efdf61a23e8cb907d4d22d328675e2fa24617530238e5dab89e3b427d89faac388ac8fd2ec08a6388c672f2af7a7fa75dae754fe925f5ff2872e6cede3099593c31526732e80ab3065ea2cf64ca8eb1037d4d6e34a2f73ba11c1771e31b54d40fa22a8806ba0145d94c21e7d0cb2e88671bbb07c6706ec6e13bfaac667d81b0798c6b15e339a9602886d9fabd89be748a203e22d902a0cc18aeacb93d15995262156562850ecacee682fb0c95047611da80f8b71fdfac6a86774ac37ec2a97504878f3253ddeff6c28e50f20a0af89fec4ceff3af64e680769cf424bdd3e071248665d3b2bef775134e940440fc1223de21fa15636727707db925f39d23f46d12a91760932130878927982bb6f808aedfc2061c2acdcb9487eb026418e87660256e4032b6295475af36eb671dd1301ea8d8720647e089222e478e37560e04b23f26d43cd3b7181db0f9338e01af9b43d3424c61079718def211c9791f9d4f3f1e5c36e280315931c77ded56360a7b634b6008db13b0658bd9f0db47357114daa71b5440b19d5f74100a18e0dca9fd3d9d6e2ecfd4b01edaa113255e26c5589fe439205e347fdc048dd59785682594ecd078867ce2653b117ef5deedc9afb664423820aa5941842a66b54d3be11c5b340c0807acdb25fea260e457481258eb4ff78fa8bc3717fdb66d2605a3648c9891a8e23968569e599bb6470713479517b6efdece7ff7b84d3012c4c5a91c661f7e5cd9a0e8c9ed8b77e99f5cf730c3d28caf9104ad2fa92ec24b9b0bbafc7171b26d67b91746c12ca36b460e49b7b5f86dda9f09289ea0445013dc44fd8d0af4d45feb03bca2c122354dd38241ea09cbca41c96c6049c337862c14e4e1d06dbce17535bf392b661c01d002b05ae020a6b3ee045d279bae23fe524ce38ab1b51862791c6b3d76b79c87e6f6c8e7117603396eefd551b7df73252943d28a18b5765c0d319764f12bbb7d2095577a90bd09948f0af09d36f3ab046d90edbfb8e8281d700d3ff71ac81865565161b3b972ccd4b0671dfad6748627293adf04d1c0cd757025a271ced7d4065519df42c8fddf0ab71e44be77216d302ea1539c27bdb6f237d895ee5f9422d3b75d98446bc5db1405dc1bf4c6b9d44e063a9167023953bec99f94b4121629a56f3fcfb99edcf29638c33b6bd63e463ff20f4a5f35c9d9d68fc4a47c9fc610c20939dfd2118168177d675b96dde358ab6cd5ff4949e2b8ab9c47e5873e1557cf712e88fdda56dde24fc57875627febbb48cb69de2c104f5f8c501a951824c04245d0843988c66757995d593ef48ec54d711a84da86bcc9d67bbb50ecf8d0ae6536f2bcf22757f484b8442427a64a6d72fb0dfb9d851c20450487e6144dac8f750548e82330cdc2cf28d44df1846a4c287f7f324e5da6a06a32df36e2aaf54f273a5e9905da2a60b1ae9083e6f19adc51ebfc9f37685ddabf833d9b3713a242dc360d8f1d4bde21f92a6872ff2fd3ce998904998960c6f9e71c1d78e72ac56c45326d82a3bfed795b3e625bcbcc1fdc96cb74e32436377eab78723b920a2fd9fc87092291e45d80b9b54e449c34dcf62396dee2ec48210fb4e11e501574596b324ab9dd300d1c6f684c90f505306cd7936a8cd9757f4c093b4a08ecbf469f2346f147051184247e19ee9588b9456c74e42e8ace01448d9ac742ad0a0c0016b41311036c6ee452870bafe82baab03066da8a2be49d6fe44979ba777d4f8db25c4d85ab58dbbe3bc00e5961bf71c2619ad1c1e8c399d859304beb9401b4a910f2332f386653b450e01f4a1830fec21e1a787b1ce8a1cb40867de346057502ad180cf743673ff471f269ca83dac23aceb6b07d23bd480563eba1f66a5f8db7384924eafab842fc3d9baa5e3a084f6ba0ec8580017254748d62e970e0d41a93902631a0aab7ac22154225b9cd20a2c3676ff89deaa54a5f9b4fc8924b2c943067a0bd813f234ea2234505910d1316cf58a7617cdc10df6960cb38f7d145171b6a0246c32a46785271d2420e8574c2ed8cdf25463b963aeb6dfafdee9302187f562e8e1dfe6cdf82ac95082e9e43e7ef58c210f9004ca641ad0e1353856f69b0080fe7f90319bee43dd6994f22fcefcf696d9508ef8984ec0d9b5c6e6406c79692b3d0a246224c504fa0c99934d306337e6e635da412fd107e376bdaaaf539df7083516b280f0009bfd54eb2076dabcf7020030ae2d0fc4c14b706e1a0a8186eba43bbf95546fe05d8331476446be3f80360b8942d3915f9ac97ce89952cb334bad816e419174c8ee54f0189f4c7c5a57ff2022e4fe2200a0cc4d563550444550643a5f62d07e11871947a21054a5c67fef139c22ab88415ac0a611309f43dec3bade9deff8fd0cce2bc099b539d1126e800ddbbb65e7cafc11d5ab43a277ee2b789663e68dd8a887c27b04c233f36e57589b55d00eaa500926186167ea3c8415a9b0cdad64059b2b1054ab4589aafc697ab6a64d27898faed7920a22be2337ef2b06edc0e011db95a2789e1e71d4c341b76d26b705766d9fb06e3669330d32cf7817f66ba03075f9789d743f645b57a364b0d7d4fc57ef443399fb63f56eb5e1bbda5be63ce9f281c23107891127a8a099c05a4bcff2f4736142ea887f91504ea368ff0fa70ed76d9cbe1e6ba83eec15f234323ccbad28d055322478f79da72bd7cf945858fe6920c668f593e173f030bc6b0c9b3650d54f4139ae480930184b123dc347a6db4c1a146589b1b595feec8b12deb4154045e2fcc3cfa7f6e20b14d29b18863527091e1f6d727d4eceae652b01740d3b32d15d834ba0b78b77f9e96230ae4705f9cc84598028339957310f8bc07d8ebb5b9ba8dea0d2c096fb619c8de7e94ab4acb0add2f77b616eecfb05e27f69a7248fc7ba458061ce3ff8ca2529994c0c85fea136f032581aa8b203bef188a8fb35054a45dbadd6cb35005cd7a1e3400870eb9accaec78c2a31f2654cba0c68537f8aa9cb36881748f68b91d3dea3e5bd7095f6ef80fad637b8e3c83634d842403f7916bae35968cebf4636f44a09e7b32dcc48262440539a53b394a92c077dc2681cbfb49134830015685f946c7b01610a17ad5880889df40649b04f569c8096d805751597fcffdc7de9e0ab6efa537028dd2e9ad314621b2450390b35f48017a836c7d56c76a2c2c2931f139f8b64448b4cb9eaa4265cf45c52f7e9fdfe525ad046538d2b6bb1c776781aebed28b0768bc729c76978550b91a96ae1a969a24e327fa9c2837e3b1dd95d18739b4566f77fcd168a364a4295c2ae4f22c17f695bb7d507c84e529a43562cc7ac6ebe350c00d1315a9a86f25f753169d68d48316892ff9a725eb8e94a4d69e19052a8cd49645a204c43d4a7891cb9cd4841045bea34dd34a65eb7640a45eab2414e2b43e370b4728e585898cd2916e99aa421dde40a1c107cbf20a348090895508387eeb9ab5a9e82e598bd9528bd08f855c6c6d053ff8a0f9b6b111c86579753b755ac28a5b07312d3b568a81b69ffd3e0a1361f1d51ad83ccf78d5ab8cc7c11daca4dd81511578d3e61098436b2c4db7eab279a95609bfb24526f6624759d0927c046f9351c6067f3b41d665d7464a6fecbddc5b6d1aa258a38204bed9cbe3c7dc2efd8753b9ec82ff5fc89ec88c243750f52a129512b9ad6d601ce0cbc98b25370c66e54845a60487785349a883b536cec4df0679b7a10fb6c47895ad7cef7be7692e61542ad6d6ad91a5836496ec410bc4ff1d82c1566cca5a3e782e7def7e28e11e0e8d51424d9b6d20cbc48a8a3c9f62679e9bbfa4e3b2e23cecd85ed8b7ee52a4dcfa5e8bf434b4ad53b6e55505cecda6d445526d40afde0b320b991e69c3b8436654aee0b0971a3c9ff4f8ecc2bfa96eba1bb6a576b3c8427ee515e49dcc75463eb6677d2c42092e00e4d75a818578cb5f4d5c6e8c1c1621fed96473056800d31b243b91c84c14776afd4c4f4a5a7571fffab32f763f2919a503d20d2a0523c05a2e56b7e3aed54459c27a8f430fdd9980e3c110a3fd2b7be1d0b9b61ced953deede33ccfc133ca5e2103a595b1a6ca97b4a71185cbf93ffbacb574287c1d63d8b89162e3895078d833c4b9786061c4c566be0430eba6f7f4b54ebc090a76b3cebfefb64bb00f3a6695d209a0764ce9c8b6ef9e627674f9293884f41762ff03264a1a1595d52e8e9800375c7bd3af4dbc4d6a1847782d95983f1dfea7f82a353fc865a16aa9b287fd6dee01d2ebf725b81499f04cc26d7be8b4b290dcf86fdd079f1449c2af0409ad3ed7eb036bbaab5f80fce236f267699be9a39df830071138109357ac817f568adcf58e9df71d5060313c52548795ddcecd47287c4a51cffdcf73bd05adcb9aac034f100074d77159564f683876c8470c11183882be7dd5eeaa66ca4f6c4857ee71e1e71a0df574e93e89de60223099eed4bf0ccc55f79f00b4150f053ae8609c70115c73f459e21aaa62b7ed1caa9c6675f100363a50393a0004873425e72fe37c789232195c18dc1fea8a8d21b2dd47232d855d103dbb3d4d1150e7dafba994b274d86104afef6bc2c52a10011cb8e870ce2e1af2669662fffad782219385cce1ade10e64471c0e6bddcb6d104d990ae44ce5e460fcd80d8d28beca02957a38315d555ad31fe8c6c2996285f1d2d2d7332b6369e895087b0568bc25823c3da40a3ef3fae50a75568d376862aa623377436edc2bd87b54b6aa1f485bc62b5fdd1d5b145376e03c70b83aca284231f388fd6299ecc7c83b5dbfce212c5908a9555a87c151d94b33cac3704e8c10cf684484b9113e9a1a27262cf8a663216aa649c399b3b274ad179fabe60c72f7cb83b1d990e3fdc5305f84ff16e1f2da70ef388d1de5313413e84877120fc607dda64def17d9610c6d3a06c05bba4cc0eb11fe4ac8c23603dbd56fe55e961ce119f7554a269c547e6787a7fd25a8b3617af5ebad29478f7cb72bfc21032bc32818873b1b9eb7eb851716dbfe22287c7c4ab32edceeec5c304ac58efd2c8b353ffbbeb2bc2674b75ad64633e1d82e37b47f6bd20e8fa73719365255e61db0345218d57cc108e6eb251a4a3dbb2ea11114315fa0654540c823fe3368509b6b0bc94114138fae370cc354e8dc8402fd792d4bde3160e86504a67328bb59a2051494c2a492f9f780f159eb83435d1b1dcf0b6759453a1356085beb7b58637e4c2ef8ff387491ec15fe0343aae61269ecb93e92778700ea9058d53689b6d4684e57ba217d0150c69fa4ae0a0292ae41617b0f5ecb172ed632e6", 0x1000, 0xfffffffffffffff9) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x76, 0x20880) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x80, 0x2, 0x7f, 'queue1\x00', 0x1f}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vsock\x00', 0x250000, 0x0) accept4$ax25(r3, &(0x7f00000016c0)={{0x3, @default}, [@default, @null, @netrom, @bcast, @remote, @netrom, @null, @netrom]}, &(0x7f0000001740)=0x48, 0x80800) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="dae5be5795182ea3dc8985f464d10542b56767a69990ae6181320ab412c55dfde06bdcae6081dfb6f12c01a93850ab58fb03b3add0d0489df436c689af492e5a92d65c624bfd99eb87129f4d136530e88f702694887866494208", 0x5a}, {&(0x7f0000001340)="30546c68dba13daa999db0985150bda0d1c7d8e5b629a2174a334129b51b879cb15fad3c44ec4b29a1c4fb0bc1900e666ea0437a4570e5080a2bab1bab76e788ee4cff22125dc3524d9aaeef2d2416c88750d166aed1ecf265fbce41117ac57dc7313fde9db3173e2f84b0a12578acda135957dc55cfa53f8cdf40b46321dc922eea321b74e99ad7572110934984f695a75f6377d788111879efe1d4c603fdcd724b77a350d03f15cc017fa782713601dd4724a49e7f710909c64642887091675c9d88f38ff74ba45fc10de58148eba6ed354d356e88c2df9495c8fe693e10703f2d51a5eb1b8d0fdc", 0xe9}, {&(0x7f0000000180)="b49180d56f354059dc9f1e984fd96e5b6d71366af57e283ed997c3e907e0eef13f2ea1bf4aab49571605e8cc2650c9acba557b81c8ea4e140054e18e9c62491c27d7430319fc13db1933d9a75aeb8a8909ed1b43a56a5ff6376be59d62e172defc83a51f3c6eb7d231a104fa6c83ec04d54bd44a1ba0264d27b7b7d8177f450cfc3f1cd791f991df44e2f4df612db718f1c1e4b7a4556d6b6c0307b203e1c71c39661e56", 0xa4}, {&(0x7f0000001440)="647b5d4e9e7ecb49cbedec890a296a04f670cf08027164732532e120cdd9d9a4bcdd63274871b87cd80b01be64fadc8098358a956f0d4d702c54f15c4ba6ee140ff47988a379954bc3b9e99742610fb24e863428668e9e985badaaa08c7f9ef969d4c14d74665d94fc34534d5d53ca102517343537c7f2b5f7e061d5086f37338fa580315497686121fbf441661d488bb434c4666aacdc41f6ad638dcc2c21e552c8ae25b2d73a567fe2b1878d32738eea387b7fd64145739c29560180748dfad01dcbf45d04ac247b", 0xc9}, {&(0x7f0000001540)="d673a9d793746e4c9d981c1c3d5593eba612f385dc77cacf020b59a9fb2784dccd363f35d6cc900c95a45d3978a900275357e8cfb3db510c12deaefc729220ee0ca3bf9ddbc13fb09c382dba77ef04b4115bfbd0b3c75dc16dfe40a684a0f85fe8ff18b84270f4a256cd2159a2", 0x6d}], 0x5, r4) r5 = getpgrp(0x0) ptrace$pokeuser(0x6, r5, 0x80000000, 0x5) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001780)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4604000000000000) 00:34:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0}) 00:34:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/77, 0xfffffffffffffe12) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000002c0)=""/128) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x10, &(0x7f00000004c0)={&(0x7f0000000400)=""/166, 0xa6, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x10, &(0x7f0000000540)={&(0x7f0000000240)=""/121, 0x79, r1}}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000340)=0x80000001, 0x4) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r3, &(0x7f0000000380)=""/121, 0x79) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ftruncate(r0, 0x5c5cd1ca) [ 1431.622004][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1431.663306][T32689] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1431.691712][T32743] binder_transaction: 4 callbacks suppressed [ 1431.691723][T32743] binder: 32742:32743 got transaction to context manager from process owning it [ 1431.783537][T32743] binder_transaction: 4 callbacks suppressed [ 1431.783573][T32743] binder: 32742:32743 transaction failed 29201/-22, size 0-0 line 2985 [ 1431.808104][ T313] JFS: discard option not supported on device [ 1431.869858][T32743] binder: BINDER_SET_CONTEXT_MGR already set [ 1431.897098][T32743] binder: 32742:32743 ioctl 40046207 0 returned -16 [ 1431.919163][ T320] JFS: discard option not supported on device 00:34:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3d00, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0xffffffffffff7fff) 00:34:45 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) 00:34:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4704000000000000) 00:34:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:45 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x0, 0x1e0, 0x1e0, 0x390, 0x1e0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000080), {[{{@ip={@broadcast, @local, 0xff, 0xffffffff, 'veth0_to_team\x00', 'veth1_to_team\x00', {0xff}, {}, 0x67, 0x2, 0x8}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'dummy0\x00', 'teql0\x00', {}, {0xff}, 0x29, 0x3, 0xa}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x20, 0x20, 0x0, 0x7ff}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="89c136242b1f", 0xffffffffffff8000, 0x3, [0x28, 0xb, 0x0, 0x39, 0x11, 0x33, 0x2d, 0x2e, 0x22, 0xc, 0x29, 0x17, 0x19, 0x23, 0x2a, 0x3], 0x1, 0x0, 0x2}}}, {{@ip={@empty, @remote, 0x0, 0xffffff00, 'ip6tnl0\x00', 'bond0\x00', {0xff}, {}, 0xaf, 0x0, 0x44}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x9, @loopback, 0x4e24}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xf}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x1}, 0x8) 00:34:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300000000000000, 0x0}) [ 1432.170986][ T380] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1432.182469][ T576] JFS: discard option not supported on device 00:34:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) getrandom(&(0x7f0000000080)=""/248, 0xf8, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @mcast2, 0x200}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x10ff, 0x5, 0xd2}, &(0x7f00000001c0)=0xe) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r2, 0x7f, 0x4, [0x80000000, 0x1f, 0x712e, 0x1]}, &(0x7f0000000240)=0x10) [ 1432.265292][ T712] binder: 710:712 got transaction to context manager from process owning it 00:34:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x100000000010002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200200, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1432.311706][ T741] JFS: discard option not supported on device [ 1432.320906][ T712] binder: 710:712 transaction failed 29201/-22, size 0-0 line 2985 00:34:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4800000000000000) [ 1432.361714][ T712] binder: BINDER_SET_CONTEXT_MGR already set 00:34:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x85, 0x2, 0x2}, 0x7}}, 0x18) [ 1432.419872][ T712] binder: 710:712 ioctl 40046207 0 returned -16 00:34:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3d01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x414001, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x2a0001) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x40000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000040)=[0xff43, 0x7]) 00:34:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000000000000, 0x0}) 00:34:45 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip_vs\x00') getdents64(r1, &(0x7f0000000280)=""/77, 0x19) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r2}, &(0x7f0000000300)=0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000180)) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) getdents64(r1, &(0x7f0000000080)=""/28, 0x123) [ 1432.692844][ T1107] binder: 1104:1107 got transaction to context manager from process owning it [ 1432.697230][ T1002] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1432.713385][ T1089] JFS: discard option not supported on device 00:34:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2040, 0x0) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) getdents(r1, &(0x7f0000000040)=""/248, 0xf8) 00:34:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x4082) [ 1432.751647][ T1107] binder: 1104:1107 transaction failed 29201/-22, size 0-0 line 2985 [ 1432.791904][ T1107] binder: BINDER_SET_CONTEXT_MGR already set 00:34:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4804000000000000) 00:34:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3e00, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1432.807314][ T1107] binder: 1104:1107 ioctl 40046207 0 returned -16 [ 1432.833128][ T1205] JFS: discard option not supported on device 00:34:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:46 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='cmdline\x00') getdents64(r2, &(0x7f0000000280)=""/77, 0x19) getdents64(r2, &(0x7f0000000000)=""/28, 0x1c) 00:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500000000000000, 0x0}) [ 1432.920100][ T1380] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) fcntl$setsig(r0, 0xa, 0x7) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1432.977145][ T1403] binder: 1402:1403 got transaction to context manager from process owning it [ 1433.011250][ T1403] binder: 1402:1403 transaction failed 29201/-22, size 0-0 line 2985 00:34:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x4c00000000000000) [ 1433.035512][ T1405] JFS: discard option not supported on device [ 1433.055335][ T1403] binder: BINDER_SET_CONTEXT_MGR already set [ 1433.077417][ T1403] binder: 1402:1403 ioctl 40046207 0 returned -16 [ 1433.092379][ T1502] JFS: discard option not supported on device 00:34:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x7d60b780) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x80}, 0x4) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2002, 0x0) dup(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) fchdir(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r3 = dup2(r0, r0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746508000000000000000000000000000000000000000000000000000007000000040000005004000038010000500200000000000068030000680300006803000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0003801000000000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000106000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fdffffff00000000ac1414bbac1414bb000000ffffffff003f09659bc57e000000000000000000000000000000000000ff0000ff00ff0000000000000000000000000000000000000000000000000000000000000000000000ffffff0000000000000000000000001abc000403ff094b06ef00e8766574683000000000000000000000007465716c30000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000340000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000244020000f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000180)=[0x4, 0x3], 0x2) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f00000001c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffff800, 0x20000) 00:34:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600000000000000, 0x0}) [ 1433.260210][ T1540] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) read$FUSE(r0, &(0x7f0000000300), 0x1000) 00:34:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6000000000000000) [ 1433.353524][ T1737] JFS: discard option not supported on device [ 1433.388504][ T1833] binder: 1807:1833 got transaction to context manager from process owning it [ 1433.431523][ T1833] binder: 1807:1833 transaction failed 29201/-22, size 0-0 line 2985 [ 1433.454773][ T1846] JFS: discard option not supported on device [ 1433.501773][ T1833] binder: BINDER_SET_CONTEXT_MGR already set [ 1433.538751][ T1833] binder: 1807:1833 ioctl 40046207 0 returned -16 [ 1433.630093][ T1850] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1433.655239][ T9936] binder_release_work: 4 callbacks suppressed [ 1433.655247][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3e01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:47 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = dup(r0) write$evdev(r1, &(0x7f0000000000), 0x0) write$9p(r1, &(0x7f0000000000)="d4b17935c82f7732c4f41751ac5bb74f7eabee57ca09833414878a95622db530637f625a8ca839d9def016b980e29924457ce2118fc618657d38b91991d1cf17bcda8a8c778396e08812d471fdfa53d660bcae1c9be009f3882d618c828d794f16f67a3871769cf1e6264d4da06a01e96dd76afead859d2ff9e73d446f71599acced4ab3fd0443cf1179597290876efae4444f2847749caf2229d1ef42eeb71af674cbc9cbf3ae35ff83ca27d21ebe78b37c75bf606f282e158261b5faac86c484cbfddc1c99f95bbb6b764c5fe80326a6", 0xd1) ioctl$KDSKBLED(r1, 0x4b65, 0xa) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000300)) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x100, 0x5, 0x80000001, 0x1200, 0x6}) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0xe, "f6631f189316fb465d4cee0ecc53478b7a7dc63a4914624deba3bbbfae44bdb3cbd8aae60e8fb19f4bdb4fc003370d2e3d4fd852e8d8e1ccaa7e6b70e89220dac4c8bb2349808d396e67988975b717075db4d12ad105b6dff02c02ac9e4596238c027943b06c3dd9263c005d158cf8717930c9f42bfcc8f45d07ce2c8e5b967a"}) close(r0) 00:34:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 00:34:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6800000000000000) [ 1433.863578][ T1959] binder: 1958:1959 got transaction to context manager from process owning it [ 1433.891040][ T1959] binder: 1958:1959 transaction failed 29201/-22, size 0-0 line 2985 [ 1433.929820][ T1959] binder: BINDER_SET_CONTEXT_MGR already set [ 1433.949512][ T1967] JFS: discard option not supported on device [ 1433.953001][ T1959] binder: 1958:1959 ioctl 40046207 0 returned -16 00:34:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000100)=0x1c) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) 00:34:47 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6be, 0x20080) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0xfffe, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1434.063616][ T1962] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1434.102260][ T2176] JFS: discard option not supported on device 00:34:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00000000000000, 0x0}) 00:34:47 executing program 0: mount(&(0x7f0000000100)=@md0='/dev/md0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x8, &(0x7f00000001c0)='fd\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r1, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x0, @mcast1}, @in={0x2, 0x4e22, @rand_addr=0x1}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @multicast1}], 0x5c) [ 1434.165115][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\"', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x6c00000000000000) [ 1434.239173][ T2337] binder: 2328:2337 got transaction to context manager from process owning it [ 1434.328537][ T2337] binder: 2328:2337 transaction failed 29201/-22, size 0-0 line 2985 [ 1434.401729][ T2337] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.477886][ T2337] binder: 2328:2337 ioctl 40046207 0 returned -16 [ 1434.531863][ T2387] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1434.632292][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3f00, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:48 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x119, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x8, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x200000f8}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.events\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000400)) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) mount(&(0x7f0000000440)=@sg0='/dev/sg0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x10040, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x180, 0x0) sendmsg$nfc_llcp(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x7, 0x101, 0x6, "4acbf42b31a1d988f31f561fd63f2b0efd4bc400d3befe87fd01295e7b06f357e31053586f8e958783c952a66960cf39319d2749d0c60ac6e093f2aefd08fe", 0x16}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000180)="c111e23255586839c2fa61f5906b2646747a30ca8af831cbedb4fb1b85d792009842fbb0820fdb61c1665e2eef1b40adcb8e76e5be4dbf18751c179603365bc25c8e320bcbe4bba0807c7b96440f3976fd1e4eb0", 0x54}], 0x1, &(0x7f0000000340)={0x68, 0x119, 0x20, "e82eb56757910a9820213fadd6b44bf5f55e62e693cf9a65d9616c9513cb7cea6f08c0c69005b5749b06b1e25ca0fdec71040922d9cff680b7d203081ed6a3bcd51858ec6d8e7e2dc05e1be3109277b3f9f8a4ba6d8a9639"}, 0x68, 0x40}, 0x40004) ioctl$PPPIOCGUNIT(r2, 0x40107446, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000500)="262e26660ffccdbaf80c66b88862348366efbafc0c66b8cfb0000066efba420066b8d40e57f866ef0f0010ba2100b09cee0f00dd6526f30f127e8f3e0f060f01de66b80500000066b9008000000f01d9", 0x50}], 0x1, 0x30, &(0x7f00000005c0)=[@dstype0={0x6, 0x7}], 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@ipv4={[], [], @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) fstat(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r4, &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000a80)={{}, {0x1, 0x6}, [{0x2, 0x4, r5}, {0x2, 0x1, r6}, {0x2, 0x5, r7}], {0x4, 0x3}, [{0x8, 0x1, r8}, {0x8, 0x7, r9}], {0x10, 0x4}, {0x20, 0x7}}, 0x4c, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$VT_ACTIVATE(r4, 0x5606, 0x401) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000600)=""/151) 00:34:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2800200}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=@newqdisc={0x29c, 0x24, 0x310, 0x70bd25, 0x25dfdbfc, {0x0, r1, {0x0, 0x1}, {0xffff, 0x4}, {0xfff3, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_STAB={0x80, 0x8, [@TCA_STAB_DATA={0x8, 0x2, [0x100000001]}, @TCA_STAB_BASE={0x1c, 0x1, {0x7, 0x6, 0x8, 0x22, 0x1, 0xfffffffffffff570, 0x40, 0x2}}, @TCA_STAB_DATA={0x14, 0x2, [0x10001, 0x7f, 0x7, 0x80000001, 0xffffffffffffffc0, 0x5, 0x1]}, @TCA_STAB_BASE={0x1c, 0x1, {0xfffffffffffffffe, 0x9, 0x9, 0xfffffffffffffffe, 0x0, 0x8, 0x8, 0xa}}, @TCA_STAB_DATA={0xc, 0x2, [0x10001, 0x3, 0x81, 0xd939]}, @TCA_STAB_BASE={0x1c, 0x1, {0x5, 0x6e5a, 0x80000001, 0x2, 0x0, 0x40, 0x0, 0x6}}]}, @TCA_STAB={0x2c, 0x8, [@TCA_STAB_DATA={0x14, 0x2, [0x3, 0x9, 0x1, 0x7, 0x1f, 0x4, 0x0]}, @TCA_STAB_DATA={0x14, 0x2, [0x1, 0x7fffffff, 0x81, 0x1, 0x7, 0x8, 0x7ff]}]}, @qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x1b0, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9c57}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_DPS={0x10, 0x3, {0x7, 0x3, 0x1, 0x7}}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0x9, 0x1, 0x5}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x200}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x7, 0x7, 0xe, 0x2, 0xd49f, 0x8, 0x81, 0x0, 0x9, 0x8, 0x1c, 0x8, 0xfb, 0x7, 0x59}}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0xffffffff00000001, 0x2, 0x3, 0x9, 0x2, 0x4, 0x80000001, 0x1, 0x25fb5477, 0xd, 0x12, 0x1b, 0x8000, 0x2, 0x80000000}}]}}, @TCA_RATE={0x8, 0x5, {0x8, 0x5}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getdents64(r0, &(0x7f0000000280)=""/77, 0x19) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/33) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@default, @bcast, @null, @remote, @default, @remote, @default, @rose]}, &(0x7f0000000180)=0x48, 0x80800) 00:34:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs ', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200000000000000, 0x0}) [ 1434.891887][ T2505] binder: 2501:2505 got transaction to context manager from process owning it [ 1434.923521][ T2505] binder: 2501:2505 transaction failed 29201/-22, size 0-0 line 2985 00:34:48 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x6, 0x5, 0x2000}, 0x4) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x19) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) [ 1434.952384][ T2505] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.982913][ T2505] binder: 2501:2505 ioctl 40046207 0 returned -16 00:34:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7400000000000000) 00:34:48 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) 00:34:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000023c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/186, 0xba}, {&(0x7f0000002500)=""/21, 0x15}], 0x2}, 0x4}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x1b, "d915bfdd6fab3c73dfdf9168e2191f2d736a529bfd8107a2a63793"}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x200000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80), 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @remote}}, 0xffffffffffff0000, 0xff}, 0x141) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000000000000, 0x0}) 00:34:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x3f01, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1435.189468][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1435.273374][ T2840] JFS: discard option not supported on device [ 1435.294151][ T2886] binder: 2842:2886 got transaction to context manager from process owning it [ 1435.330688][ T2886] binder: 2842:2886 transaction failed 29201/-22, size 0-0 line 2985 00:34:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) getdents64(r0, &(0x7f0000000080)=""/28, 0x191) 00:34:48 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200000) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1435.387715][ T2949] JFS: discard option not supported on device [ 1435.396537][ T2886] binder: BINDER_SET_CONTEXT_MGR already set [ 1435.402924][ T2833] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1435.419422][ T2886] binder: 2842:2886 ioctl 40046207 0 returned -16 00:34:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x19) r1 = semget(0x1, 0x2, 0x8) semctl$IPC_RMID(r1, 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000280)=""/77, 0x23f) getdents64(r0, &(0x7f0000000000)=""/28, 0x1c) 00:34:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800000000000000, 0x0}) 00:34:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7a00000000000000) 00:34:48 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) pipe2$9p(&(0x7f0000000000), 0x4000) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x100) getsockname$netrom(r1, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @default, @default, @bcast, @remote, @rose, @default]}, &(0x7f0000000100)=0x48) [ 1435.618931][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 [ 1435.652727][ T3286] JFS: discard option not supported on device [ 1435.726280][ T3332] binder: 3327:3332 got transaction to context manager from process owning it [ 1435.746870][ T3333] JFS: discard option not supported on device 00:34:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)={0x0, 0x1ff, 0x0, 0x0, 0x62a}) [ 1435.781476][ T3332] binder: 3327:3332 transaction failed 29201/-22, size 0-0 line 2985 00:34:49 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x10', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1435.875209][ T3334] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1435.876353][ T3332] binder: BINDER_SET_CONTEXT_MGR already set [ 1435.936250][ T3332] binder: 3327:3332 ioctl 40046207 0 returned -16 00:34:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4000, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x7fffffffffffffff) 00:34:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)={0x0, 0x1ff, 0x0, 0x0, 0x62a}) 00:34:49 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x1) 00:34:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00000000000000, 0x0}) [ 1436.204661][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:34:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x0f', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1436.275733][ T3660] binder: BINDER_SET_CONTEXT_MGR already set [ 1436.280016][ T3661] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1436.300883][ T3660] binder: 3659:3660 ioctl 40046207 0 returned -16 00:34:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x8000000000000000) 00:34:49 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x307100) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x8, 0x4) 00:34:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000018008105e00f80ecdb4cb92e0a06012c000cd300e8bd6efb120009000e0001000000000006000500fe2e", 0x2e}], 0x1}, 0x0) 00:34:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000000000000, 0x0}) [ 1436.508857][ T9936] binder: undelivered TRANSACTION_ERROR: 29201 00:34:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1436.775885][ T3979] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1436.781673][ T4152] JFS: discard option not supported on device 00:34:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000009080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x36e, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x9005, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x811e}, 0x100) [ 1436.973349][ T4197] JFS: discard option not supported on device 00:34:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4001, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x80000001, 0x18}, 0xc) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40, 0x4) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @random="266cf79bb19b"}, 0x0, {0x2, 0x4e22}, 'veth1\x00'}) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800000000000000, 0x0}) 00:34:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0x8cffffff00000000) [ 1437.128721][ T4203] binder_transaction: 1 callbacks suppressed [ 1437.128731][ T4203] binder: 4202:4203 got transaction to context manager from process owning it [ 1437.168206][ T4203] binder_transaction: 1 callbacks suppressed [ 1437.168221][ T4203] binder: 4202:4203 transaction failed 29201/-22, size 0-0 line 2985 [ 1437.199151][ T4203] binder: BINDER_SET_CONTEXT_MGR already set [ 1437.238897][ T4203] binder: 4202:4203 ioctl 40046207 0 returned -16 00:34:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1437.278058][ T4283] JFS: discard option not supported on device [ 1437.316511][ T4330] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1437.379402][ T4467] JFS: discard option not supported on device 00:34:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00000000000000, 0x0}) 00:34:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xa721000000000000) [ 1437.437342][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1437.535827][ T4603] binder: 4602:4603 got transaction to context manager from process owning it 00:34:50 executing program 1: socketpair(0xc, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x7fffffff, 0x2040}, 0xffffffffffffff3e) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$UHID_INPUT(r1, &(0x7f0000001880)={0x8, "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", 0x1000}, 0x1006) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "92dfdde1e4984e08f7db7bf72e991958"}, 0x11, 0x0) dup2(r2, r1) finit_module(r1, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r3, 0x40107446, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) [ 1437.589505][ T4603] binder: 4602:4603 transaction failed 29201/-22, size 0-0 line 2985 [ 1437.625614][ T4621] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1437.635919][ T4603] binder: BINDER_SET_CONTEXT_MGR already set [ 1437.648308][ T4624] JFS: discard option not supported on device [ 1437.659254][ T4603] binder: 4602:4603 ioctl 40046207 0 returned -16 00:34:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xcefaad1b00000000) [ 1437.755361][ T4709] JFS: discard option not supported on device 00:34:51 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x38e63ba4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) poll(&(0x7f0000000a40)=[{}, {r1}], 0x2, 0x800) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000007c0)=0x7c, &(0x7f0000000880)=0x4) [ 1437.875825][T22443] binder: undelivered TRANSACTION_ERROR: 29201 [ 1437.925754][ T4784] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4100, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400000000000000, 0x0}) 00:34:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) fdatasync(r0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1) 00:34:51 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xdf21000000000000) [ 1438.088031][ T4841] JFS: discard option not supported on device [ 1438.112623][ T4846] binder: 4844:4846 got transaction to context manager from process owning it [ 1438.144758][ T4885] JFS: discard option not supported on device [ 1438.159945][ T4846] binder: 4844:4846 transaction failed 29201/-22, size 0-0 line 2985 00:34:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) [ 1438.199463][ T4846] binder: BINDER_SET_CONTEXT_MGR already set [ 1438.225628][ T4846] binder: 4844:4846 ioctl 40046207 0 returned -16 [ 1438.300135][ T4916] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4101, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1438.387967][ T5068] JFS: discard option not supported on device 00:34:51 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf4ffffff00000000) [ 1438.459038][ T5224] JFS: discard option not supported on device 00:34:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00000000000000, 0x0}) [ 1438.518351][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1438.559523][ T5268] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1438.611015][ T5301] binder: 5270:5301 got transaction to context manager from process owning it [ 1438.677205][ T5351] JFS: discard option not supported on device [ 1438.690685][ T5301] binder: 5270:5301 transaction failed 29201/-22, size 0-0 line 2985 [ 1438.733543][ T5301] binder: BINDER_SET_CONTEXT_MGR already set [ 1438.748799][ T5377] JFS: discard option not supported on device [ 1438.764768][ T5301] binder: 5270:5301 ioctl 40046207 0 returned -16 [ 1438.978676][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0x0) 00:34:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x8480, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:52 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 00:34:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0}) [ 1439.240577][ T5484] binder: 5483:5484 got transaction to context manager from process owning it [ 1439.268401][ T5484] binder: 5483:5484 transaction failed 29201/-22, size 0-0 line 2985 00:34:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4200, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) [ 1439.304131][ T5484] binder: BINDER_SET_CONTEXT_MGR already set [ 1439.324724][ T5487] JFS: discard option not supported on device [ 1439.337579][ T5484] binder: 5483:5484 ioctl 40046207 0 returned -16 00:34:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400c42) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100000000, 0x0, 0x1000}, 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) [ 1439.417198][ T5606] JFS: discard option not supported on device 00:34:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1439.467877][ T5482] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x400000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x5, 0x1000, 0x401, 0x2, 0x2, 0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) capset(&(0x7f0000000180)={0x399f1736, r1}, &(0x7f00000001c0)={0x6, 0x4, 0x5, 0x80000001, 0x3, 0x9}) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/16) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1439.542391][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:52 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf6ffffff00000000) [ 1439.593209][ T5811] binder: 5809:5811 got transaction to context manager from process owning it 00:34:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/69) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) [ 1439.666465][ T5811] binder: 5809:5811 transaction failed 29201/-22, size 0-0 line 2985 [ 1439.676283][ T5816] JFS: discard option not supported on device [ 1439.689323][ T5858] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1439.892356][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1439.970285][ T6113] JFS: discard option not supported on device [ 1440.073411][ T6115] JFS: discard option not supported on device 00:34:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 00:34:53 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xf9fdffff00000000) 00:34:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x40080) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4100, 0x0) 00:34:53 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0xc2ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = epoll_create1(0x0) read$FUSE(r1, &(0x7f00000003c0), 0x1000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00fbb9030091a497e36991645ccf5270d5be691be9a281965057c41f96f654df6f95f0ef56799b9d75faba705f0c17005028605f5f292b85f862e5293c4b01e7d264594288924bd2aff596d1c3db8f895f8b6b8e1be006001ecbf4a2c20e0c51690982f0f2f687c8ca55d01fcc50428e3314c84d1375e2f0e9023e6085a7307a99a1d8ca1504feab172d5741ef413bf45a183d9e5fbdf7a96ebaa772f0304e467d45f343bbe90b649d"], 0xb9, 0x3) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) ioctl$PPPIOCGUNIT(r2, 0x40107446, 0x0) 00:34:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1440.213418][ T6123] binder: 6122:6123 got transaction to context manager from process owning it 00:34:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4201, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:53 executing program 1: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x40107446, 0x0) 00:34:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) fdatasync(r0) [ 1440.278489][ T6153] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1440.288342][ T6123] binder: 6122:6123 transaction failed 29201/-22, size 0-0 line 2985 [ 1440.350185][ T6238] JFS: discard option not supported on device 00:34:53 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfbffffff00000000) 00:34:53 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x0, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0xe89a, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000040) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) 00:34:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)) [ 1440.461734][ T6356] JFS: discard option not supported on device 00:34:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\xc0', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:53 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffff9c, 0x1}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1440.570882][ T12] binder: undelivered TRANSACTION_ERROR: 29201 00:34:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000200)=[@free_buffer], 0x0, 0x0, 0x0}) [ 1440.669925][ T6521] binder: 6470:6521 got transaction to context manager from process owning it [ 1440.697219][ T6363] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:53 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x842, "b1e17bf8d28e33546899f52e0b78f4ff16d1be1c46d3cfee28d128e18bb6bf10", 0x2, 0x80000001, 0x10000, 0x0, 0x2}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80080, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) [ 1440.770859][ T6521] binder: 6470:6521 transaction failed 29201/-22, size 0-0 line 2985 [ 1440.816240][ T6558] binder: 6557:6558 BC_FREE_BUFFER u0000000000000000 no match 00:34:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x0f', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) 00:34:54 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfcfdffff00000000) [ 1440.962143][ T6608] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 00:34:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4300, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 00:34:54 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$TCSBRK(r1, 0x5409, 0x40) ioctl$PPPIOCGUNIT(r0, 0x40107446, 0x0) fremovexattr(r1, &(0x7f0000000040)=@random={'os2.', '/dev/cec#\x00'}) 00:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80002, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0x101, "39bfeefbf891280d8f7fbc9b77384a8edbea9ccb8ba31e97eff83389dc36de3c", 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x4, 0x3}], 0x0, 0x0, 0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0xfffffffffffff001, 0x9}) 00:34:54 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xfdfdffff00000000) [ 1441.104377][T22443] binder: undelivered TRANSACTION_ERROR: 29201 00:34:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1441.208317][ T6795] binder: 6792:6795 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 00:34:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000180)=0x54) 00:34:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) [ 1441.345873][ T6832] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1441.379182][ T6919] JFS: discard option not supported on device [ 1441.424109][ T7052] IPVS: ftp: loaded support on port[0] = 21 00:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3ff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x10001, 0x3, 0xfffffffffffffff8, 0x800, 0x9, 0x93d, 0x8, 0x400]}) [ 1441.498686][ T7105] JFS: discard option not supported on device 00:34:54 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xff07040000000000) 00:34:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1441.594808][ T7178] binder: 7174:7178 got transaction to context manager from process owning it 00:34:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) [ 1441.693542][ T7178] binder: 7174:7178 transaction failed 29201/-22, size 0-0 line 2985 [ 1441.803955][ T7242] JFS: discard option not supported on device [ 1441.822850][ T7205] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1441.858907][ T27] audit: type=1804 audit(1551227695.033:70): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir799786228/syzkaller.DQ5tCH/2030/bus" dev="sda1" ino=17626 res=1 00:34:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4301, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:55 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c65000087b716da4e0a883200000000000000000000000000000000030000000000000000000000000000002f08f7236cdeae00000000000000000000000000000000000000000000000000000000000080e10000000000000000e5512e5760f887caaafead67f2ab65cdced44158225b6772622213277d"], 0x1) 00:34:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0xffff, 0x2, 0x7, 0xe323, 0x9, 0x200}) [ 1441.933761][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:34:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x4000800) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x80003) [ 1441.967216][ T27] audit: type=1804 audit(1551227695.063:71): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir799786228/syzkaller.DQ5tCH/2030/bus" dev="sda1" ino=17626 res=1 00:34:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@discard='discard'}]}) [ 1442.032312][ T7316] binder: 7314:7316 got transaction to context manager from process owning it 00:34:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x412c, 0x800000800) 00:34:55 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x0, 0x0, 0x0, 0xff0f000000000000) [ 1442.075476][ T27] audit: type=1804 audit(1551227695.103:72): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir799786228/syzkaller.DQ5tCH/2030/bus" dev="sda1" ino=17626 res=1 [ 1442.103083][ T7316] binder: 7314:7316 transaction failed 29201/-22, size 0-0 line 2985 [ 1442.126438][ T7346] BUG: Bad page state in process syz-executor.0 pfn:6d4b2 [ 1442.133801][ T7346] page:ffffea0001b52c80 count:0 mapcount:0 mapping:ffff88808776d340 index:0xf [ 1442.142703][ T7346] shmem_aops [ 1442.142710][ T7346] name:"memfd:" [ 1442.146009][ T7346] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1442.156439][ T7346] raw: 01fffc000008000c ffffea0001ad2548 ffff8880515a7600 ffff88808776d340 [ 1442.165092][ T7346] raw: 000000000000000f 0000000000000000 00000000ffffffff 0000000000000000 [ 1442.173773][ T7346] page dumped because: non-NULL mapping [ 1442.179320][ T7346] Modules linked in: [ 1442.183308][ T7346] CPU: 1 PID: 7346 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1442.192344][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.202406][ T7346] Call Trace: [ 1442.205733][ T7346] dump_stack+0x172/0x1f0 [ 1442.210089][ T7346] bad_page.cold+0xda/0xff [ 1442.214516][ T7346] ? si_mem_available+0x320/0x320 [ 1442.219577][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1442.225841][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1442.232142][ T7346] free_pages_check_bad+0x142/0x1a0 [ 1442.237365][ T7346] free_unref_page_list+0x31d/0xc40 [ 1442.242659][ T7346] release_pages+0x60d/0x1940 [ 1442.247372][ T7346] ? put_pages_list+0x2e0/0x2e0 [ 1442.252247][ T7346] ? trace_hardirqs_on+0x67/0x230 [ 1442.257284][ T7346] ? kasan_check_read+0x11/0x20 [ 1442.262149][ T7346] pagevec_lru_move_fn+0x218/0x2a0 [ 1442.263695][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1442.267275][ T7346] ? get_kernel_page+0xb0/0xb0 [ 1442.267297][ T7346] __lru_cache_add+0x1c4/0x2d0 [ 1442.267317][ T7346] lru_cache_add_anon+0x1e2/0x360 [ 1442.267343][ T7346] shmem_getpage_gfp+0x79c/0x2500 [ 1442.267375][ T7346] ? shmem_unuse_inode.constprop.0+0xfd0/0xfd0 [ 1442.299198][ T7346] shmem_file_read_iter+0x30a/0xbc0 [ 1442.304413][ T7346] ? shmem_write_begin+0x1e0/0x1e0 [ 1442.309546][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1442.315794][ T7346] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1442.321515][ T7346] ? iov_iter_pipe+0xba/0x2f0 [ 1442.326256][ T7346] generic_file_splice_read+0x4b4/0x800 [ 1442.331823][ T7346] ? add_to_pipe+0x350/0x350 [ 1442.336438][ T7346] ? rw_verify_area+0x118/0x360 [ 1442.341281][ T7346] ? add_to_pipe+0x350/0x350 [ 1442.345872][ T7346] do_splice_to+0x12a/0x190 [ 1442.350378][ T7346] splice_direct_to_actor+0x2d2/0x970 [ 1442.355761][ T7346] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1442.361309][ T7346] ? do_splice_to+0x190/0x190 [ 1442.365989][ T7346] ? rw_verify_area+0x118/0x360 [ 1442.370845][ T7346] do_splice_direct+0x1da/0x2a0 [ 1442.375706][ T7346] ? splice_direct_to_actor+0x970/0x970 [ 1442.381266][ T7346] ? rw_verify_area+0x118/0x360 [ 1442.386144][ T7346] do_sendfile+0x597/0xd00 [ 1442.390578][ T7346] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1442.395865][ T7346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1442.402116][ T7346] ? put_timespec64+0xda/0x140 [ 1442.406883][ T7346] __x64_sys_sendfile64+0x1dd/0x220 [ 1442.412087][ T7346] ? __ia32_sys_sendfile+0x230/0x230 [ 1442.417372][ T7346] ? do_syscall_64+0x26/0x610 [ 1442.422057][ T7346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1442.427345][ T7346] ? trace_hardirqs_on+0x67/0x230 [ 1442.432390][ T7346] do_syscall_64+0x103/0x610 [ 1442.436993][ T7346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1442.442881][ T7346] RIP: 0033:0x457e29 [ 1442.446776][ T7346] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1442.466374][ T7346] RSP: 002b:00007f4195675c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1442.474797][ T7346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1442.482761][ T7346] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1442.490726][ T7346] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1442.498693][ T7346] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f41956766d4 [ 1442.506657][ T7346] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1442.515015][ T7346] Disabling lock debugging due to kernel taint [ 1442.521209][ T7346] BUG: Bad page state in process syz-executor.0 pfn:6b495 [ 1442.528408][ T7346] page:ffffea0001ad2540 count:0 mapcount:0 mapping:ffff88808776d340 index:0xe [ 1442.528435][ T7346] shmem_aops [ 1442.528450][ T7346] name:"memfd:" [ 1442.540636][ T7346] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1442.550976][ T7346] raw: 01fffc000008000c ffff8880515a7600 ffff8880515a7600 ffff88808776d340 [ 1442.559576][ T7346] raw: 000000000000000e 0000000000000000 00000000ffffffff 0000000000000000 [ 1442.568214][ T7346] page dumped because: non-NULL mapping [ 1442.573803][ T7346] Modules linked in: [ 1442.577713][ T7346] CPU: 1 PID: 7346 Comm: syz-executor.0 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1442.588112][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.598160][ T7346] Call Trace: [ 1442.598196][ T7346] dump_stack+0x172/0x1f0 [ 1442.598215][ T7346] bad_page.cold+0xda/0xff [ 1442.598250][ T7346] ? si_mem_available+0x320/0x320 [ 1442.615251][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1442.621496][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1442.627748][ T7346] free_pages_check_bad+0x142/0x1a0 [ 1442.630970][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1442.633040][ T7346] free_unref_page_list+0x31d/0xc40 [ 1442.633059][ T7346] release_pages+0x60d/0x1940 [ 1442.633080][ T7346] ? put_pages_list+0x2e0/0x2e0 [ 1442.656950][ T7346] ? trace_hardirqs_on+0x67/0x230 [ 1442.661982][ T7346] ? kasan_check_read+0x11/0x20 [ 1442.666837][ T7346] pagevec_lru_move_fn+0x218/0x2a0 [ 1442.666852][ T7346] ? get_kernel_page+0xb0/0xb0 [ 1442.666872][ T7346] __lru_cache_add+0x1c4/0x2d0 [ 1442.678314][ T7347] JFS: discard option not supported on device [ 1442.681846][ T7346] lru_cache_add_anon+0x1e2/0x360 [ 1442.681863][ T7346] shmem_getpage_gfp+0x79c/0x2500 [ 1442.681886][ T7346] ? shmem_unuse_inode.constprop.0+0xfd0/0xfd0 [ 1442.681910][ T7346] shmem_file_read_iter+0x30a/0xbc0 [ 1442.709305][ T7346] ? shmem_write_begin+0x1e0/0x1e0 [ 1442.714416][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1442.720654][ T7346] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1442.726371][ T7346] ? iov_iter_pipe+0xba/0x2f0 [ 1442.731065][ T7346] generic_file_splice_read+0x4b4/0x800 [ 1442.736605][ T7346] ? add_to_pipe+0x350/0x350 [ 1442.741197][ T7346] ? rw_verify_area+0x118/0x360 [ 1442.746038][ T7346] ? add_to_pipe+0x350/0x350 [ 1442.750623][ T7346] do_splice_to+0x12a/0x190 [ 1442.755123][ T7346] splice_direct_to_actor+0x2d2/0x970 [ 1442.760489][ T7346] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1442.766029][ T7346] ? do_splice_to+0x190/0x190 [ 1442.770699][ T7346] ? rw_verify_area+0x118/0x360 [ 1442.775543][ T7346] do_splice_direct+0x1da/0x2a0 [ 1442.780385][ T7346] ? splice_direct_to_actor+0x970/0x970 [ 1442.785937][ T7346] ? rw_verify_area+0x118/0x360 [ 1442.790781][ T7346] do_sendfile+0x597/0xd00 [ 1442.795198][ T7346] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1442.800474][ T7346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1442.806715][ T7346] ? put_timespec64+0xda/0x140 [ 1442.811473][ T7346] __x64_sys_sendfile64+0x1dd/0x220 [ 1442.816662][ T7346] ? __ia32_sys_sendfile+0x230/0x230 [ 1442.821953][ T7346] ? do_syscall_64+0x26/0x610 [ 1442.826635][ T7346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1442.831942][ T7346] ? trace_hardirqs_on+0x67/0x230 [ 1442.837041][ T7346] do_syscall_64+0x103/0x610 [ 1442.841643][ T7346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1442.847524][ T7346] RIP: 0033:0x457e29 [ 1442.851411][ T7346] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1442.870999][ T7346] RSP: 002b:00007f4195675c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 00:34:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001, 0x0, 0x1, 0x4}, 0x2c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/105) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x1, [0x8, 0x20, 0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x4400, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 00:34:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000018, 0x0, &(0x7f0000000040)) 00:34:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:34:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1442.879399][ T7346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1442.887446][ T7346] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1442.895418][ T7346] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1442.903377][ T7346] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f41956766d4 [ 1442.911345][ T7346] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1442.920561][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6c071 [ 1442.927636][ T24] page:ffffea0001b01c40 count:0 mapcount:0 mapping:ffff88808776d340 index:0xd [ 1442.936544][ T24] shmem_aops [ 1442.936549][ T24] name:"memfd:" [ 1442.936559][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1442.936576][ T24] raw: 01fffc000008000c ffffea0001b1a008 ffff8880a9857200 ffff88808776d340 [ 1442.936591][ T24] raw: 000000000000000d 0000000000000000 00000000ffffffff 0000000000000000 [ 1442.936596][ T24] page dumped because: non-NULL mapping [ 1442.936599][ T24] Modules linked in: [ 1442.936616][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1442.936623][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.936635][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1442.944865][ T7782] binder: 7781:7782 got transaction to context manager from process owning it [ 1442.950202][ T24] Call Trace: [ 1442.950222][ T24] dump_stack+0x172/0x1f0 [ 1442.950240][ T24] bad_page.cold+0xda/0xff [ 1442.950267][ T24] ? si_mem_available+0x320/0x320 [ 1442.967416][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1442.967430][ T24] ? kasan_check_write+0x14/0x20 [ 1442.967445][ T24] free_pages_check_bad+0x142/0x1a0 [ 1442.967472][ T24] free_unref_page_list+0x31d/0xc40 [ 1442.967490][ T24] release_pages+0x60d/0x1940 [ 1442.973918][ T7782] binder: 7781:7782 transaction failed 29201/-22, size 0-0 line 2985 [ 1442.976928][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1442.976944][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1442.976959][ T24] ? kasan_check_read+0x11/0x20 [ 1442.976976][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1442.976997][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1443.061911][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1443.062619][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1443.062636][ T24] lru_add_drain+0x20/0x60 [ 1443.062651][ T24] __pagevec_release+0xbf/0x120 [ 1443.062676][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1443.117495][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1443.123219][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1443.128686][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1443.133724][ T24] ext4_writepages+0x10e4/0x34e0 [ 1443.138668][ T24] ? mark_held_locks+0xc1/0xf0 [ 1443.143434][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1443.148897][ T24] ? mark_held_locks+0xf0/0xf0 [ 1443.150341][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1443.153666][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1443.153681][ T24] ? find_held_lock+0x35/0x130 [ 1443.153698][ T24] ? find_held_lock+0x35/0x130 [ 1443.153717][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1443.153739][ T24] do_writepages+0xfc/0x2a0 [ 1443.168746][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 1443.169533][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1443.200566][ T24] ? do_writepages+0xfc/0x2a0 [ 1443.205246][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1443.210704][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1443.216334][ T24] ? mark_held_locks+0xf0/0xf0 [ 1443.221104][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1443.226827][ T24] ? lock_downgrade+0x880/0x880 [ 1443.231683][ T24] ? kasan_check_write+0x14/0x20 [ 1443.236637][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1443.241679][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1443.246728][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1443.247311][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1443.247326][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1443.247347][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1443.247367][ T24] writeback_sb_inodes+0x596/0xed0 [ 1443.278700][ T24] ? wbc_detach_inode+0x840/0x840 [ 1443.283725][ T24] ? lock_acquire+0x16f/0x3f0 [ 1443.288422][ T24] ? down_read_trylock+0x5d/0xa0 [ 1443.293376][ T24] ? trylock_super+0x22/0x110 [ 1443.298053][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1443.304313][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1443.309533][ T24] wb_writeback+0x87f/0xd00 [ 1443.314039][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1443.320363][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1443.326086][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1443.331805][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1443.337030][ T24] wb_workfn+0xb3a/0x1190 [ 1443.341363][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1443.346820][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1443.352507][ T24] ? process_one_work+0x8b4/0x1790 [ 1443.357632][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1443.362686][ T24] process_one_work+0x98e/0x1790 [ 1443.367629][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1443.372998][ T24] ? lock_acquire+0x16f/0x3f0 [ 1443.377702][ T24] worker_thread+0x98/0xe40 [ 1443.382204][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1443.387227][ T24] kthread+0x357/0x430 [ 1443.391288][ T24] ? process_one_work+0x1790/0x1790 [ 1443.396484][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1443.402717][ T24] ret_from_fork+0x3a/0x50 [ 1443.407440][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6c680 [ 1443.414498][ T24] page:ffffea0001b1a000 count:0 mapcount:0 mapping:ffff88808776d340 index:0xc [ 1443.423403][ T24] shmem_aops [ 1443.423407][ T24] name:"memfd:" [ 1443.426690][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1443.437036][ T24] raw: 01fffc000008000c ffffea0001b08348 ffff8880a9857200 ffff88808776d340 [ 1443.445661][ T24] raw: 000000000000000c 0000000000000000 00000000ffffffff 0000000000000000 [ 1443.454299][ T24] page dumped because: non-NULL mapping [ 1443.459888][ T24] Modules linked in: [ 1443.463835][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1443.473904][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.483963][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1443.489940][ T24] Call Trace: [ 1443.493238][ T24] dump_stack+0x172/0x1f0 [ 1443.497582][ T24] bad_page.cold+0xda/0xff [ 1443.502001][ T24] ? si_mem_available+0x320/0x320 [ 1443.507043][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1443.512758][ T24] ? kasan_check_write+0x14/0x20 [ 1443.517699][ T24] free_pages_check_bad+0x142/0x1a0 [ 1443.522904][ T24] free_unref_page_list+0x31d/0xc40 [ 1443.528131][ T24] release_pages+0x60d/0x1940 [ 1443.532813][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1443.537668][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1443.542702][ T24] ? kasan_check_read+0x11/0x20 [ 1443.547556][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1443.552666][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1443.558385][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1443.563334][ T24] lru_add_drain+0x20/0x60 [ 1443.567746][ T24] __pagevec_release+0xbf/0x120 [ 1443.572594][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1443.578483][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1443.584214][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1443.589672][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1443.594722][ T24] ext4_writepages+0x10e4/0x34e0 [ 1443.599697][ T24] ? mark_held_locks+0xc1/0xf0 [ 1443.604468][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1443.609915][ T24] ? mark_held_locks+0xf0/0xf0 [ 1443.614675][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1443.621252][ T24] ? find_held_lock+0x35/0x130 [ 1443.626007][ T24] ? find_held_lock+0x35/0x130 [ 1443.630766][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1443.636214][ T24] do_writepages+0xfc/0x2a0 [ 1443.640711][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1443.646156][ T24] ? do_writepages+0xfc/0x2a0 [ 1443.650833][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1443.656284][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1443.661908][ T24] ? mark_held_locks+0xf0/0xf0 [ 1443.666664][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1443.672373][ T24] ? lock_downgrade+0x880/0x880 [ 1443.677213][ T24] ? kasan_check_write+0x14/0x20 [ 1443.682154][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1443.687212][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1443.692837][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1443.697896][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1443.704143][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1443.710114][ T24] writeback_sb_inodes+0x596/0xed0 [ 1443.715216][ T24] ? wbc_detach_inode+0x840/0x840 [ 1443.720223][ T24] ? lock_acquire+0x16f/0x3f0 [ 1443.724888][ T24] ? down_read_trylock+0x5d/0xa0 [ 1443.729828][ T24] ? trylock_super+0x22/0x110 [ 1443.734503][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1443.740742][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1443.745932][ T24] wb_writeback+0x87f/0xd00 [ 1443.750448][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1443.756770][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1443.762496][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1443.768206][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1443.773396][ T24] wb_workfn+0xb3a/0x1190 [ 1443.777718][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1443.783174][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1443.788719][ T24] ? process_one_work+0x8b4/0x1790 [ 1443.793825][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1443.798843][ T24] process_one_work+0x98e/0x1790 [ 1443.804177][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1443.809539][ T24] ? lock_acquire+0x16f/0x3f0 [ 1443.814233][ T24] worker_thread+0x98/0xe40 [ 1443.818745][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1443.823788][ T24] kthread+0x357/0x430 [ 1443.827848][ T24] ? process_one_work+0x1790/0x1790 00:34:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:34:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:34:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000c9756713660b86c795c6bc395800000000000000000000000"], 0x0, 0x0, 0x0}) 00:34:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1443.833040][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1443.839269][ T24] ret_from_fork+0x3a/0x50 [ 1443.843745][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6c20d [ 1443.850787][ T24] page:ffffea0001b08340 count:0 mapcount:0 mapping:ffff88808776d340 index:0xb [ 1443.859640][ T24] shmem_aops [ 1443.859646][ T24] name:"memfd:" [ 1443.863001][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1443.873349][ T24] raw: 01fffc000008000c ffffea0001bc5888 ffff8880a9857200 ffff88808776d340 [ 1443.881973][ T24] raw: 000000000000000b 0000000000000000 00000000ffffffff 0000000000000000 [ 1443.890594][ T24] page dumped because: non-NULL mapping [ 1443.896123][ T24] Modules linked in: [ 1443.900018][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1443.910067][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.920122][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1443.926097][ T24] Call Trace: [ 1443.929385][ T24] dump_stack+0x172/0x1f0 [ 1443.933715][ T24] bad_page.cold+0xda/0xff [ 1443.938134][ T24] ? si_mem_available+0x320/0x320 [ 1443.943157][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1443.948870][ T24] ? kasan_check_write+0x14/0x20 [ 1443.953800][ T24] free_pages_check_bad+0x142/0x1a0 [ 1443.958990][ T24] free_unref_page_list+0x31d/0xc40 [ 1443.964182][ T24] release_pages+0x60d/0x1940 [ 1443.968854][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1443.973700][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1443.978715][ T24] ? kasan_check_read+0x11/0x20 [ 1443.983573][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1443.988681][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1443.994395][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1443.999333][ T24] lru_add_drain+0x20/0x60 [ 1444.003750][ T24] __pagevec_release+0xbf/0x120 [ 1444.008609][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1444.014503][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1444.020229][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1444.025685][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1444.030712][ T24] ext4_writepages+0x10e4/0x34e0 [ 1444.035671][ T24] ? mark_held_locks+0xc1/0xf0 [ 1444.040431][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.045881][ T24] ? mark_held_locks+0xf0/0xf0 [ 1444.050659][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1444.057259][ T24] ? find_held_lock+0x35/0x130 [ 1444.062017][ T24] ? find_held_lock+0x35/0x130 [ 1444.066781][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.072232][ T24] do_writepages+0xfc/0x2a0 [ 1444.076732][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.082182][ T24] ? do_writepages+0xfc/0x2a0 [ 1444.086853][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1444.092311][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1444.097944][ T24] ? mark_held_locks+0xf0/0xf0 [ 1444.102703][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1444.108426][ T24] ? lock_downgrade+0x880/0x880 [ 1444.113271][ T24] ? kasan_check_write+0x14/0x20 [ 1444.118200][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1444.123251][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1444.128882][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1444.133726][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1444.139961][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1444.145940][ T24] writeback_sb_inodes+0x596/0xed0 [ 1444.151051][ T24] ? wbc_detach_inode+0x840/0x840 [ 1444.156068][ T24] ? lock_acquire+0x16f/0x3f0 [ 1444.160755][ T24] ? down_read_trylock+0x5d/0xa0 [ 1444.165702][ T24] ? trylock_super+0x22/0x110 [ 1444.170369][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1444.176606][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1444.181806][ T24] wb_writeback+0x87f/0xd00 [ 1444.186333][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1444.192656][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1444.198378][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1444.204103][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1444.209295][ T24] wb_workfn+0xb3a/0x1190 [ 1444.213618][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1444.219069][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1444.224609][ T24] ? process_one_work+0x8b4/0x1790 [ 1444.229754][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1444.234776][ T24] process_one_work+0x98e/0x1790 [ 1444.239711][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1444.245073][ T24] ? lock_acquire+0x16f/0x3f0 [ 1444.249781][ T24] worker_thread+0x98/0xe40 [ 1444.254278][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1444.259302][ T24] kthread+0x357/0x430 [ 1444.263367][ T24] ? process_one_work+0x1790/0x1790 [ 1444.268558][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1444.274821][ T24] ret_from_fork+0x3a/0x50 [ 1444.279300][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6f162 [ 1444.286365][ T24] page:ffffea0001bc5880 count:0 mapcount:0 mapping:ffff88808776d340 index:0xa [ 1444.295257][ T24] shmem_aops [ 1444.295262][ T24] name:"memfd:" [ 1444.298551][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1444.308913][ T24] raw: 01fffc000008000c ffffea0001b06688 ffff8880a9857200 ffff88808776d340 [ 1444.317548][ T24] raw: 000000000000000a 0000000000000000 00000000ffffffff 0000000000000000 [ 1444.326157][ T24] page dumped because: non-NULL mapping [ 1444.331726][ T24] Modules linked in: [ 1444.335648][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1444.345707][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.355773][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1444.361744][ T24] Call Trace: [ 1444.365027][ T24] dump_stack+0x172/0x1f0 [ 1444.369375][ T24] bad_page.cold+0xda/0xff [ 1444.373792][ T24] ? si_mem_available+0x320/0x320 [ 1444.378815][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1444.384543][ T24] ? kasan_check_write+0x14/0x20 [ 1444.389486][ T24] free_pages_check_bad+0x142/0x1a0 [ 1444.394682][ T24] free_unref_page_list+0x31d/0xc40 [ 1444.399889][ T24] release_pages+0x60d/0x1940 [ 1444.404576][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1444.409424][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1444.414467][ T24] ? kasan_check_read+0x11/0x20 [ 1444.419352][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1444.424476][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1444.430211][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1444.435156][ T24] lru_add_drain+0x20/0x60 [ 1444.439586][ T24] __pagevec_release+0xbf/0x120 [ 1444.444435][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1444.450341][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1444.456060][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1444.461517][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1444.466543][ T24] ext4_writepages+0x10e4/0x34e0 [ 1444.471508][ T24] ? mark_held_locks+0xc1/0xf0 [ 1444.476273][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.481730][ T24] ? mark_held_locks+0xf0/0xf0 [ 1444.486494][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1444.493078][ T24] ? find_held_lock+0x35/0x130 [ 1444.497854][ T24] ? find_held_lock+0x35/0x130 [ 1444.502639][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.508089][ T24] do_writepages+0xfc/0x2a0 [ 1444.512586][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.518035][ T24] ? do_writepages+0xfc/0x2a0 [ 1444.522711][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1444.528178][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1444.533819][ T24] ? mark_held_locks+0xf0/0xf0 [ 1444.538590][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1444.544306][ T24] ? lock_downgrade+0x880/0x880 [ 1444.549159][ T24] ? kasan_check_write+0x14/0x20 [ 1444.554090][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1444.559112][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1444.564739][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1444.569595][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1444.575828][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1444.581805][ T24] writeback_sb_inodes+0x596/0xed0 [ 1444.586915][ T24] ? wbc_detach_inode+0x840/0x840 [ 1444.591958][ T24] ? lock_acquire+0x16f/0x3f0 [ 1444.596633][ T24] ? down_read_trylock+0x5d/0xa0 [ 1444.601582][ T24] ? trylock_super+0x22/0x110 [ 1444.606256][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1444.612495][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1444.617692][ T24] wb_writeback+0x87f/0xd00 [ 1444.622198][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1444.628521][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1444.634235][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1444.639949][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1444.645157][ T24] wb_workfn+0xb3a/0x1190 [ 1444.649494][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1444.654948][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1444.660492][ T24] ? process_one_work+0x8b4/0x1790 [ 1444.665601][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1444.670627][ T24] process_one_work+0x98e/0x1790 [ 1444.675570][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1444.680945][ T24] ? lock_acquire+0x16f/0x3f0 [ 1444.685621][ T24] worker_thread+0x98/0xe40 [ 1444.690122][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1444.695151][ T24] kthread+0x357/0x430 [ 1444.699232][ T24] ? process_one_work+0x1790/0x1790 [ 1444.704447][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1444.710685][ T24] ret_from_fork+0x3a/0x50 [ 1444.715148][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6c19a [ 1444.722218][ T24] page:ffffea0001b06680 count:0 mapcount:0 mapping:ffff88808776d340 index:0x9 [ 1444.731109][ T24] shmem_aops [ 1444.731114][ T24] name:"memfd:" [ 1444.734395][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1444.744736][ T24] raw: 01fffc000008000c ffffea0001d53ac8 ffff8880a9857200 ffff88808776d340 [ 1444.753368][ T24] raw: 0000000000000009 0000000000000000 00000000ffffffff 0000000000000000 [ 1444.761985][ T24] page dumped because: non-NULL mapping [ 1444.767525][ T24] Modules linked in: [ 1444.771462][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1444.781520][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.791573][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1444.797544][ T24] Call Trace: [ 1444.800861][ T24] dump_stack+0x172/0x1f0 [ 1444.805194][ T24] bad_page.cold+0xda/0xff [ 1444.809624][ T24] ? si_mem_available+0x320/0x320 [ 1444.814648][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1444.820370][ T24] ? kasan_check_write+0x14/0x20 [ 1444.825307][ T24] free_pages_check_bad+0x142/0x1a0 [ 1444.830505][ T24] free_unref_page_list+0x31d/0xc40 [ 1444.835734][ T24] release_pages+0x60d/0x1940 [ 1444.840415][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1444.845268][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1444.850287][ T24] ? kasan_check_read+0x11/0x20 [ 1444.855140][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1444.860247][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1444.865961][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1444.870892][ T24] lru_add_drain+0x20/0x60 [ 1444.875307][ T24] __pagevec_release+0xbf/0x120 [ 1444.880163][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1444.886060][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1444.891803][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1444.897257][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1444.902284][ T24] ext4_writepages+0x10e4/0x34e0 [ 1444.907228][ T24] ? mark_held_locks+0xc1/0xf0 [ 1444.911995][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.917457][ T24] ? mark_held_locks+0xf0/0xf0 [ 1444.922222][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1444.928804][ T24] ? find_held_lock+0x35/0x130 [ 1444.933567][ T24] ? find_held_lock+0x35/0x130 [ 1444.938346][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.943806][ T24] do_writepages+0xfc/0x2a0 [ 1444.948327][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1444.953786][ T24] ? do_writepages+0xfc/0x2a0 [ 1444.958460][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1444.963917][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1444.969545][ T24] ? mark_held_locks+0xf0/0xf0 [ 1444.974313][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1444.980033][ T24] ? lock_downgrade+0x880/0x880 [ 1444.984880][ T24] ? kasan_check_write+0x14/0x20 [ 1444.989811][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1444.994834][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1445.000461][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1445.005307][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1445.011548][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1445.017557][ T24] writeback_sb_inodes+0x596/0xed0 [ 1445.022668][ T24] ? wbc_detach_inode+0x840/0x840 [ 1445.027685][ T24] ? lock_acquire+0x16f/0x3f0 [ 1445.032370][ T24] ? down_read_trylock+0x5d/0xa0 [ 1445.037299][ T24] ? trylock_super+0x22/0x110 [ 1445.041966][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1445.048198][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1445.053391][ T24] wb_writeback+0x87f/0xd00 [ 1445.057890][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1445.064217][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1445.069945][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1445.075654][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1445.080845][ T24] wb_workfn+0xb3a/0x1190 [ 1445.085195][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1445.090674][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1445.096219][ T24] ? process_one_work+0x8b4/0x1790 [ 1445.101321][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1445.106367][ T24] process_one_work+0x98e/0x1790 [ 1445.111307][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1445.116681][ T24] ? lock_acquire+0x16f/0x3f0 [ 1445.121365][ T24] worker_thread+0x98/0xe40 [ 1445.125885][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1445.130924][ T24] kthread+0x357/0x430 [ 1445.134993][ T24] ? process_one_work+0x1790/0x1790 [ 1445.140189][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1445.146422][ T24] ret_from_fork+0x3a/0x50 [ 1445.150887][ T24] BUG: Bad page state in process kworker/u4:2 pfn:754eb [ 1445.157913][ T24] page:ffffea0001d53ac0 count:0 mapcount:0 mapping:ffff88808776d340 index:0x8 [ 1445.166810][ T24] shmem_aops [ 1445.166815][ T24] name:"memfd:" [ 1445.170101][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1445.180447][ T24] raw: 01fffc000008000c ffffea0001b52c08 ffff8880a9857200 ffff88808776d340 [ 1445.189035][ T24] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1445.197636][ T24] page dumped because: non-NULL mapping [ 1445.203220][ T24] Modules linked in: [ 1445.207136][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1445.217181][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.227234][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1445.233197][ T24] Call Trace: [ 1445.236474][ T24] dump_stack+0x172/0x1f0 [ 1445.240801][ T24] bad_page.cold+0xda/0xff [ 1445.245210][ T24] ? si_mem_available+0x320/0x320 [ 1445.250227][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1445.255939][ T24] ? kasan_check_write+0x14/0x20 [ 1445.260871][ T24] free_pages_check_bad+0x142/0x1a0 [ 1445.266076][ T24] free_unref_page_list+0x31d/0xc40 [ 1445.271266][ T24] release_pages+0x60d/0x1940 [ 1445.275982][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1445.280840][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1445.285856][ T24] ? kasan_check_read+0x11/0x20 [ 1445.290705][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1445.295819][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1445.301538][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1445.306481][ T24] lru_add_drain+0x20/0x60 [ 1445.310895][ T24] __pagevec_release+0xbf/0x120 [ 1445.315743][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1445.321639][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1445.327368][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1445.332825][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1445.337852][ T24] ext4_writepages+0x10e4/0x34e0 [ 1445.342791][ T24] ? mark_held_locks+0xc1/0xf0 [ 1445.347551][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1445.353008][ T24] ? mark_held_locks+0xf0/0xf0 [ 1445.357771][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1445.364354][ T24] ? find_held_lock+0x35/0x130 [ 1445.369113][ T24] ? find_held_lock+0x35/0x130 [ 1445.373868][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1445.379314][ T24] do_writepages+0xfc/0x2a0 [ 1445.383821][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1445.389278][ T24] ? do_writepages+0xfc/0x2a0 [ 1445.393941][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1445.399497][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1445.405144][ T24] ? mark_held_locks+0xf0/0xf0 [ 1445.409910][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1445.415620][ T24] ? lock_downgrade+0x880/0x880 [ 1445.420465][ T24] ? kasan_check_write+0x14/0x20 [ 1445.425413][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1445.430435][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1445.436063][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1445.440910][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1445.447145][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1445.453153][ T24] writeback_sb_inodes+0x596/0xed0 [ 1445.458273][ T24] ? wbc_detach_inode+0x840/0x840 [ 1445.463289][ T24] ? lock_acquire+0x16f/0x3f0 [ 1445.467967][ T24] ? down_read_trylock+0x5d/0xa0 [ 1445.472908][ T24] ? trylock_super+0x22/0x110 [ 1445.477582][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1445.483821][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1445.489019][ T24] wb_writeback+0x87f/0xd00 [ 1445.493538][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1445.499876][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1445.505604][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1445.511317][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1445.516515][ T24] wb_workfn+0xb3a/0x1190 [ 1445.520840][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1445.526301][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1445.531845][ T24] ? process_one_work+0x8b4/0x1790 [ 1445.536950][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1445.541978][ T24] process_one_work+0x98e/0x1790 [ 1445.546919][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1445.552283][ T24] ? lock_acquire+0x16f/0x3f0 [ 1445.556964][ T24] worker_thread+0x98/0xe40 [ 1445.561464][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1445.566505][ T24] kthread+0x357/0x430 [ 1445.570578][ T24] ? process_one_work+0x1790/0x1790 [ 1445.575770][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1445.582010][ T24] ret_from_fork+0x3a/0x50 [ 1445.586505][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6d4b0 [ 1445.593584][ T24] page:ffffea0001b52c00 count:0 mapcount:0 mapping:ffff88808776d340 index:0x7 [ 1445.602474][ T24] shmem_aops [ 1445.602479][ T24] name:"memfd:" [ 1445.605759][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1445.616359][ T24] raw: 01fffc000008000c ffffea0001ad7b08 ffff8880a9857200 ffff88808776d340 [ 1445.625003][ T24] raw: 0000000000000007 0000000000000000 00000000ffffffff 0000000000000000 [ 1445.633619][ T24] page dumped because: non-NULL mapping [ 1445.639164][ T24] Modules linked in: [ 1445.643108][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1445.653168][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.663249][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1445.669221][ T24] Call Trace: [ 1445.672520][ T24] dump_stack+0x172/0x1f0 [ 1445.676857][ T24] bad_page.cold+0xda/0xff [ 1445.681297][ T24] ? si_mem_available+0x320/0x320 [ 1445.686348][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1445.692074][ T24] ? kasan_check_write+0x14/0x20 [ 1445.697231][ T24] free_pages_check_bad+0x142/0x1a0 [ 1445.702442][ T24] free_unref_page_list+0x31d/0xc40 [ 1445.707641][ T24] release_pages+0x60d/0x1940 [ 1445.712325][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1445.717175][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1445.722192][ T24] ? kasan_check_read+0x11/0x20 [ 1445.727052][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1445.732164][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1445.737882][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1445.742820][ T24] lru_add_drain+0x20/0x60 [ 1445.747247][ T24] __pagevec_release+0xbf/0x120 [ 1445.752097][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1445.758005][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1445.763733][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1445.769193][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1445.774257][ T24] ext4_writepages+0x10e4/0x34e0 [ 1445.779199][ T24] ? mark_held_locks+0xc1/0xf0 [ 1445.783972][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1445.789427][ T24] ? mark_held_locks+0xf0/0xf0 [ 1445.794190][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1445.800777][ T24] ? find_held_lock+0x35/0x130 [ 1445.806054][ T24] ? find_held_lock+0x35/0x130 [ 1445.810820][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1445.816289][ T24] do_writepages+0xfc/0x2a0 [ 1445.820799][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1445.826291][ T24] ? do_writepages+0xfc/0x2a0 [ 1445.830965][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1445.837080][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1445.842711][ T24] ? mark_held_locks+0xf0/0xf0 [ 1445.847467][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1445.853177][ T24] ? lock_downgrade+0x880/0x880 [ 1445.858050][ T24] ? kasan_check_write+0x14/0x20 [ 1445.862982][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1445.868025][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1445.873649][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1445.878494][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1445.884730][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1445.890706][ T24] writeback_sb_inodes+0x596/0xed0 [ 1445.895816][ T24] ? wbc_detach_inode+0x840/0x840 [ 1445.900838][ T24] ? lock_acquire+0x16f/0x3f0 [ 1445.905515][ T24] ? down_read_trylock+0x5d/0xa0 [ 1445.910446][ T24] ? trylock_super+0x22/0x110 [ 1445.915119][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1445.921367][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1445.926576][ T24] wb_writeback+0x87f/0xd00 [ 1445.931093][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1445.937416][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1445.943133][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1445.948846][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1445.954040][ T24] wb_workfn+0xb3a/0x1190 [ 1445.958381][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1445.963840][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1445.969383][ T24] ? process_one_work+0x8b4/0x1790 [ 1445.974494][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1445.979530][ T24] process_one_work+0x98e/0x1790 [ 1445.984486][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1445.989851][ T24] ? lock_acquire+0x16f/0x3f0 [ 1445.994539][ T24] worker_thread+0x98/0xe40 [ 1445.999047][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1446.004072][ T24] kthread+0x357/0x430 [ 1446.008136][ T24] ? process_one_work+0x1790/0x1790 [ 1446.013331][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1446.019579][ T24] ret_from_fork+0x3a/0x50 [ 1446.024042][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6b5ec [ 1446.031097][ T24] page:ffffea0001ad7b00 count:0 mapcount:0 mapping:ffff88808776d340 index:0x6 [ 1446.039949][ T24] shmem_aops [ 1446.039966][ T24] name:"memfd:" [ 1446.043280][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1446.053613][ T24] raw: 01fffc000008000c ffffea0001b53508 ffff8880a9857200 ffff88808776d340 [ 1446.062233][ T24] raw: 0000000000000006 0000000000000000 00000000ffffffff 0000000000000000 [ 1446.070839][ T24] page dumped because: non-NULL mapping [ 1446.076380][ T24] Modules linked in: [ 1446.080304][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1446.090388][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.100445][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1446.106412][ T24] Call Trace: [ 1446.109695][ T24] dump_stack+0x172/0x1f0 [ 1446.114024][ T24] bad_page.cold+0xda/0xff [ 1446.118436][ T24] ? si_mem_available+0x320/0x320 [ 1446.123458][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1446.129190][ T24] ? kasan_check_write+0x14/0x20 [ 1446.134127][ T24] free_pages_check_bad+0x142/0x1a0 [ 1446.139320][ T24] free_unref_page_list+0x31d/0xc40 [ 1446.144522][ T24] release_pages+0x60d/0x1940 [ 1446.149195][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1446.154042][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1446.159062][ T24] ? kasan_check_read+0x11/0x20 [ 1446.163908][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1446.169017][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1446.174739][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1446.179671][ T24] lru_add_drain+0x20/0x60 [ 1446.184083][ T24] __pagevec_release+0xbf/0x120 [ 1446.188931][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1446.194839][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1446.200574][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1446.206037][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1446.211089][ T24] ext4_writepages+0x10e4/0x34e0 [ 1446.216044][ T24] ? mark_held_locks+0xc1/0xf0 [ 1446.220826][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1446.226296][ T24] ? mark_held_locks+0xf0/0xf0 [ 1446.231059][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1446.237682][ T24] ? find_held_lock+0x35/0x130 [ 1446.242445][ T24] ? find_held_lock+0x35/0x130 [ 1446.247228][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1446.252677][ T24] do_writepages+0xfc/0x2a0 [ 1446.257174][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1446.262653][ T24] ? do_writepages+0xfc/0x2a0 [ 1446.267329][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1446.272794][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1446.278414][ T24] ? mark_held_locks+0xf0/0xf0 [ 1446.283168][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1446.288894][ T24] ? lock_downgrade+0x880/0x880 [ 1446.293738][ T24] ? kasan_check_write+0x14/0x20 [ 1446.298668][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1446.303690][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1446.309315][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1446.314162][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1446.320396][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1446.326378][ T24] writeback_sb_inodes+0x596/0xed0 [ 1446.331490][ T24] ? wbc_detach_inode+0x840/0x840 [ 1446.336505][ T24] ? lock_acquire+0x16f/0x3f0 [ 1446.341180][ T24] ? down_read_trylock+0x5d/0xa0 [ 1446.346123][ T24] ? trylock_super+0x22/0x110 [ 1446.350793][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1446.357055][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1446.362251][ T24] wb_writeback+0x87f/0xd00 [ 1446.366804][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1446.373136][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1446.378868][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1446.384589][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1446.389784][ T24] wb_workfn+0xb3a/0x1190 [ 1446.394108][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1446.399589][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1446.405136][ T24] ? process_one_work+0x8b4/0x1790 [ 1446.410255][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1446.415277][ T24] process_one_work+0x98e/0x1790 [ 1446.420208][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1446.425577][ T24] ? lock_acquire+0x16f/0x3f0 [ 1446.430260][ T24] worker_thread+0x98/0xe40 [ 1446.434764][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1446.439791][ T24] kthread+0x357/0x430 [ 1446.443853][ T24] ? process_one_work+0x1790/0x1790 [ 1446.449046][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1446.455281][ T24] ret_from_fork+0x3a/0x50 [ 1446.459754][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6d4d4 [ 1446.466804][ T24] page:ffffea0001b53500 count:0 mapcount:0 mapping:ffff88808776d340 index:0x5 [ 1446.475682][ T24] shmem_aops [ 1446.475687][ T24] name:"memfd:" [ 1446.478993][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1446.489350][ T24] raw: 01fffc000008000c ffffea0001b07b08 ffff8880a9857200 ffff88808776d340 [ 1446.498000][ T24] raw: 0000000000000005 0000000000000000 00000000ffffffff 0000000000000000 [ 1446.506621][ T24] page dumped because: non-NULL mapping [ 1446.512187][ T24] Modules linked in: [ 1446.516104][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1446.526177][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.536244][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1446.542211][ T24] Call Trace: [ 1446.545493][ T24] dump_stack+0x172/0x1f0 [ 1446.549820][ T24] bad_page.cold+0xda/0xff [ 1446.554248][ T24] ? si_mem_available+0x320/0x320 [ 1446.559271][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1446.565010][ T24] ? kasan_check_write+0x14/0x20 [ 1446.569951][ T24] free_pages_check_bad+0x142/0x1a0 [ 1446.575148][ T24] free_unref_page_list+0x31d/0xc40 [ 1446.580388][ T24] release_pages+0x60d/0x1940 [ 1446.585090][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1446.589933][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1446.594963][ T24] ? kasan_check_read+0x11/0x20 [ 1446.599814][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1446.604963][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1446.610700][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1446.615650][ T24] lru_add_drain+0x20/0x60 [ 1446.620074][ T24] __pagevec_release+0xbf/0x120 [ 1446.624946][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1446.630844][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1446.636573][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1446.642197][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1446.647238][ T24] ext4_writepages+0x10e4/0x34e0 [ 1446.652194][ T24] ? mark_held_locks+0xc1/0xf0 [ 1446.656960][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1446.662412][ T24] ? mark_held_locks+0xf0/0xf0 [ 1446.667177][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1446.673758][ T24] ? find_held_lock+0x35/0x130 [ 1446.678516][ T24] ? find_held_lock+0x35/0x130 [ 1446.683288][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1446.688736][ T24] do_writepages+0xfc/0x2a0 [ 1446.693245][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1446.698695][ T24] ? do_writepages+0xfc/0x2a0 [ 1446.703370][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1446.708823][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1446.714530][ T24] ? mark_held_locks+0xf0/0xf0 [ 1446.719289][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1446.725002][ T24] ? lock_downgrade+0x880/0x880 [ 1446.729845][ T24] ? kasan_check_write+0x14/0x20 [ 1446.734789][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1446.739810][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1446.745437][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1446.750304][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1446.756580][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1446.762555][ T24] writeback_sb_inodes+0x596/0xed0 [ 1446.767672][ T24] ? wbc_detach_inode+0x840/0x840 [ 1446.772688][ T24] ? lock_acquire+0x16f/0x3f0 [ 1446.777380][ T24] ? down_read_trylock+0x5d/0xa0 [ 1446.782310][ T24] ? trylock_super+0x22/0x110 [ 1446.787000][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1446.793246][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1446.798438][ T24] wb_writeback+0x87f/0xd00 [ 1446.803445][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1446.809764][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1446.815486][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1446.821210][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1446.826409][ T24] wb_workfn+0xb3a/0x1190 [ 1446.830739][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1446.836194][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1446.841742][ T24] ? process_one_work+0x8b4/0x1790 [ 1446.846875][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1446.851899][ T24] process_one_work+0x98e/0x1790 [ 1446.856837][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1446.862208][ T24] ? lock_acquire+0x16f/0x3f0 [ 1446.866885][ T24] worker_thread+0x98/0xe40 [ 1446.871390][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1446.876413][ T24] kthread+0x357/0x430 [ 1446.880479][ T24] ? process_one_work+0x1790/0x1790 [ 1446.885676][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1446.891913][ T24] ret_from_fork+0x3a/0x50 [ 1446.896397][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6c1ec [ 1446.903455][ T24] page:ffffea0001b07b00 count:0 mapcount:0 mapping:ffff88808776d340 index:0x4 [ 1446.912355][ T24] shmem_aops [ 1446.912360][ T24] name:"memfd:" [ 1446.915662][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1446.926076][ T24] raw: 01fffc000008000c ffffea0001e3fbc8 ffff8880a9857200 ffff88808776d340 [ 1446.934726][ T24] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1446.943336][ T24] page dumped because: non-NULL mapping [ 1446.948886][ T24] Modules linked in: [ 1446.952817][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1446.962880][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.972934][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1446.978905][ T24] Call Trace: [ 1446.982194][ T24] dump_stack+0x172/0x1f0 [ 1446.986521][ T24] bad_page.cold+0xda/0xff [ 1446.990932][ T24] ? si_mem_available+0x320/0x320 [ 1446.995975][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1447.001701][ T24] ? kasan_check_write+0x14/0x20 [ 1447.006638][ T24] free_pages_check_bad+0x142/0x1a0 [ 1447.011837][ T24] free_unref_page_list+0x31d/0xc40 [ 1447.017050][ T24] release_pages+0x60d/0x1940 [ 1447.021739][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1447.026592][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1447.031615][ T24] ? kasan_check_read+0x11/0x20 [ 1447.036475][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1447.041591][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1447.047313][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1447.052257][ T24] lru_add_drain+0x20/0x60 [ 1447.056701][ T24] __pagevec_release+0xbf/0x120 [ 1447.061553][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1447.067458][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1447.073178][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1447.078633][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1447.083659][ T24] ext4_writepages+0x10e4/0x34e0 [ 1447.088600][ T24] ? mark_held_locks+0xc1/0xf0 [ 1447.093378][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.098833][ T24] ? mark_held_locks+0xf0/0xf0 [ 1447.103601][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1447.110194][ T24] ? find_held_lock+0x35/0x130 [ 1447.114952][ T24] ? find_held_lock+0x35/0x130 [ 1447.119710][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.125159][ T24] do_writepages+0xfc/0x2a0 [ 1447.129663][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.135117][ T24] ? do_writepages+0xfc/0x2a0 [ 1447.139788][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1447.145258][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1447.150886][ T24] ? mark_held_locks+0xf0/0xf0 [ 1447.155648][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1447.161370][ T24] ? lock_downgrade+0x880/0x880 [ 1447.166227][ T24] ? kasan_check_write+0x14/0x20 [ 1447.171199][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1447.176234][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1447.181859][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1447.186717][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1447.192952][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1447.198930][ T24] writeback_sb_inodes+0x596/0xed0 [ 1447.204087][ T24] ? wbc_detach_inode+0x840/0x840 [ 1447.209104][ T24] ? lock_acquire+0x16f/0x3f0 [ 1447.213783][ T24] ? down_read_trylock+0x5d/0xa0 [ 1447.218713][ T24] ? trylock_super+0x22/0x110 [ 1447.223391][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1447.229626][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1447.234830][ T24] wb_writeback+0x87f/0xd00 [ 1447.239333][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1447.245664][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1447.251396][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1447.257107][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1447.262313][ T24] wb_workfn+0xb3a/0x1190 [ 1447.266643][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1447.272100][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1447.277646][ T24] ? process_one_work+0x8b4/0x1790 [ 1447.282751][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1447.287777][ T24] process_one_work+0x98e/0x1790 [ 1447.292715][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1447.298080][ T24] ? lock_acquire+0x16f/0x3f0 [ 1447.302760][ T24] worker_thread+0x98/0xe40 [ 1447.307255][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1447.312281][ T24] kthread+0x357/0x430 [ 1447.316353][ T24] ? process_one_work+0x1790/0x1790 [ 1447.321545][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1447.327786][ T24] ret_from_fork+0x3a/0x50 [ 1447.332262][ T24] BUG: Bad page state in process kworker/u4:2 pfn:78fef [ 1447.339294][ T24] page:ffffea0001e3fbc0 count:0 mapcount:0 mapping:ffff88808776d340 index:0x3 [ 1447.348196][ T24] shmem_aops [ 1447.348201][ T24] name:"memfd:" [ 1447.351501][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1447.361841][ T24] raw: 01fffc000008000c ffffea0001b2c948 ffff8880a9857200 ffff88808776d340 [ 1447.370478][ T24] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 1447.379086][ T24] page dumped because: non-NULL mapping [ 1447.384662][ T24] Modules linked in: [ 1447.388604][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1447.398655][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.408712][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1447.414684][ T24] Call Trace: [ 1447.417972][ T24] dump_stack+0x172/0x1f0 [ 1447.422301][ T24] bad_page.cold+0xda/0xff [ 1447.426734][ T24] ? si_mem_available+0x320/0x320 [ 1447.431761][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1447.437478][ T24] ? kasan_check_write+0x14/0x20 [ 1447.442413][ T24] free_pages_check_bad+0x142/0x1a0 [ 1447.447606][ T24] free_unref_page_list+0x31d/0xc40 [ 1447.452800][ T24] release_pages+0x60d/0x1940 [ 1447.457479][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1447.462326][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1447.467359][ T24] ? kasan_check_read+0x11/0x20 [ 1447.472225][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1447.477375][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1447.483104][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1447.488062][ T24] lru_add_drain+0x20/0x60 [ 1447.492471][ T24] __pagevec_release+0xbf/0x120 [ 1447.497318][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1447.503213][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1447.508929][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1447.514389][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1447.519412][ T24] ext4_writepages+0x10e4/0x34e0 [ 1447.524356][ T24] ? mark_held_locks+0xc1/0xf0 [ 1447.529131][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.534604][ T24] ? mark_held_locks+0xf0/0xf0 [ 1447.539380][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1447.545966][ T24] ? find_held_lock+0x35/0x130 [ 1447.550740][ T24] ? find_held_lock+0x35/0x130 [ 1447.555501][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.560951][ T24] do_writepages+0xfc/0x2a0 [ 1447.565447][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.570926][ T24] ? do_writepages+0xfc/0x2a0 [ 1447.575620][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1447.581099][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1447.586729][ T24] ? mark_held_locks+0xf0/0xf0 [ 1447.591490][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1447.597207][ T24] ? lock_downgrade+0x880/0x880 [ 1447.602067][ T24] ? kasan_check_write+0x14/0x20 [ 1447.607003][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1447.612033][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1447.617664][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1447.622512][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1447.628745][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1447.634722][ T24] writeback_sb_inodes+0x596/0xed0 [ 1447.639833][ T24] ? wbc_detach_inode+0x840/0x840 [ 1447.644849][ T24] ? lock_acquire+0x16f/0x3f0 [ 1447.649525][ T24] ? down_read_trylock+0x5d/0xa0 [ 1447.654453][ T24] ? trylock_super+0x22/0x110 [ 1447.659124][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1447.665364][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1447.670578][ T24] wb_writeback+0x87f/0xd00 [ 1447.675086][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1447.681409][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1447.687129][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1447.692841][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1447.698241][ T24] wb_workfn+0xb3a/0x1190 [ 1447.702588][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1447.708044][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1447.713587][ T24] ? process_one_work+0x8b4/0x1790 [ 1447.718695][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1447.723719][ T24] process_one_work+0x98e/0x1790 [ 1447.728669][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1447.734034][ T24] ? lock_acquire+0x16f/0x3f0 [ 1447.738714][ T24] worker_thread+0x98/0xe40 [ 1447.743215][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1447.748242][ T24] kthread+0x357/0x430 [ 1447.752304][ T24] ? process_one_work+0x1790/0x1790 [ 1447.757502][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1447.763754][ T24] ret_from_fork+0x3a/0x50 [ 1447.768246][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6cb25 [ 1447.775330][ T24] page:ffffea0001b2c940 count:0 mapcount:0 mapping:ffff88808776d340 index:0x2 [ 1447.784221][ T24] shmem_aops [ 1447.784226][ T24] name:"memfd:" [ 1447.787525][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1447.797848][ T24] raw: 01fffc000008000c ffffea0001b47a48 ffff8880a9857200 ffff88808776d340 [ 1447.806647][ T24] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 1447.815262][ T24] page dumped because: non-NULL mapping [ 1447.820838][ T24] Modules linked in: [ 1447.824740][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1447.834788][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.844854][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1447.850835][ T24] Call Trace: [ 1447.854124][ T24] dump_stack+0x172/0x1f0 [ 1447.858459][ T24] bad_page.cold+0xda/0xff [ 1447.862870][ T24] ? si_mem_available+0x320/0x320 [ 1447.867893][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1447.873644][ T24] ? kasan_check_write+0x14/0x20 [ 1447.878583][ T24] free_pages_check_bad+0x142/0x1a0 [ 1447.883781][ T24] free_unref_page_list+0x31d/0xc40 [ 1447.888984][ T24] release_pages+0x60d/0x1940 [ 1447.893662][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1447.898510][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1447.903552][ T24] ? kasan_check_read+0x11/0x20 [ 1447.908415][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1447.913524][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1447.919250][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1447.924184][ T24] lru_add_drain+0x20/0x60 [ 1447.928602][ T24] __pagevec_release+0xbf/0x120 [ 1447.933454][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1447.939371][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1447.945086][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1447.950543][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1447.955583][ T24] ext4_writepages+0x10e4/0x34e0 [ 1447.960522][ T24] ? mark_held_locks+0xc1/0xf0 [ 1447.965283][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.970751][ T24] ? mark_held_locks+0xf0/0xf0 [ 1447.975522][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1447.982100][ T24] ? find_held_lock+0x35/0x130 [ 1447.986863][ T24] ? find_held_lock+0x35/0x130 [ 1447.991627][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1447.997086][ T24] do_writepages+0xfc/0x2a0 [ 1448.001586][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.007042][ T24] ? do_writepages+0xfc/0x2a0 [ 1448.011717][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1448.017172][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1448.022813][ T24] ? mark_held_locks+0xf0/0xf0 [ 1448.027569][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1448.033286][ T24] ? lock_downgrade+0x880/0x880 [ 1448.038170][ T24] ? kasan_check_write+0x14/0x20 [ 1448.043104][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1448.048127][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1448.053759][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1448.058606][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1448.064841][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1448.070818][ T24] writeback_sb_inodes+0x596/0xed0 [ 1448.075928][ T24] ? wbc_detach_inode+0x840/0x840 [ 1448.080945][ T24] ? lock_acquire+0x16f/0x3f0 [ 1448.085643][ T24] ? down_read_trylock+0x5d/0xa0 [ 1448.090569][ T24] ? trylock_super+0x22/0x110 [ 1448.095241][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1448.101503][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1448.106693][ T24] wb_writeback+0x87f/0xd00 [ 1448.111197][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1448.117528][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1448.124110][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1448.129821][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1448.135039][ T24] wb_workfn+0xb3a/0x1190 [ 1448.139378][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1448.144850][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1448.150428][ T24] ? process_one_work+0x8b4/0x1790 [ 1448.155539][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1448.160562][ T24] process_one_work+0x98e/0x1790 [ 1448.165499][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1448.170866][ T24] ? lock_acquire+0x16f/0x3f0 [ 1448.175560][ T24] worker_thread+0x98/0xe40 [ 1448.180062][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1448.185091][ T24] kthread+0x357/0x430 [ 1448.189154][ T24] ? process_one_work+0x1790/0x1790 [ 1448.194357][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1448.200596][ T24] ret_from_fork+0x3a/0x50 [ 1448.205069][ T24] BUG: Bad page state in process kworker/u4:2 pfn:6d1e9 [ 1448.212154][ T24] page:ffffea0001b47a40 count:0 mapcount:0 mapping:ffff88808776d340 index:0x1 [ 1448.221065][ T24] shmem_aops [ 1448.221070][ T24] name:"memfd:" [ 1448.224375][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1448.234709][ T24] raw: 01fffc000008000c ffffea0001d68b48 ffff8880a9857200 ffff88808776d340 [ 1448.243326][ T24] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 1448.251949][ T24] page dumped because: non-NULL mapping [ 1448.257492][ T24] Modules linked in: [ 1448.261431][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1448.271493][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.281554][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1448.287948][ T24] Call Trace: [ 1448.291243][ T24] dump_stack+0x172/0x1f0 [ 1448.295577][ T24] bad_page.cold+0xda/0xff [ 1448.299993][ T24] ? si_mem_available+0x320/0x320 [ 1448.305017][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1448.310731][ T24] ? kasan_check_write+0x14/0x20 [ 1448.315685][ T24] free_pages_check_bad+0x142/0x1a0 [ 1448.320886][ T24] free_unref_page_list+0x31d/0xc40 [ 1448.326086][ T24] release_pages+0x60d/0x1940 [ 1448.330763][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1448.335614][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1448.340631][ T24] ? kasan_check_read+0x11/0x20 [ 1448.345494][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1448.350613][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1448.356330][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1448.361266][ T24] lru_add_drain+0x20/0x60 [ 1448.365684][ T24] __pagevec_release+0xbf/0x120 [ 1448.370527][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1448.376419][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1448.382135][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1448.387593][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1448.392629][ T24] ext4_writepages+0x10e4/0x34e0 [ 1448.397592][ T24] ? mark_held_locks+0xc1/0xf0 [ 1448.402386][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.407840][ T24] ? mark_held_locks+0xf0/0xf0 [ 1448.412606][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1448.419184][ T24] ? find_held_lock+0x35/0x130 [ 1448.423943][ T24] ? find_held_lock+0x35/0x130 [ 1448.428702][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.434149][ T24] do_writepages+0xfc/0x2a0 [ 1448.438668][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.444117][ T24] ? do_writepages+0xfc/0x2a0 [ 1448.448828][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1448.454315][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1448.459942][ T24] ? mark_held_locks+0xf0/0xf0 [ 1448.464699][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1448.470409][ T24] ? lock_downgrade+0x880/0x880 [ 1448.475252][ T24] ? kasan_check_write+0x14/0x20 [ 1448.480202][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1448.485216][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1448.490836][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1448.495672][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1448.501898][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1448.507882][ T24] writeback_sb_inodes+0x596/0xed0 [ 1448.512997][ T24] ? wbc_detach_inode+0x840/0x840 [ 1448.518006][ T24] ? lock_acquire+0x16f/0x3f0 [ 1448.522674][ T24] ? down_read_trylock+0x5d/0xa0 [ 1448.527604][ T24] ? trylock_super+0x22/0x110 [ 1448.532272][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1448.538506][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1448.543697][ T24] wb_writeback+0x87f/0xd00 [ 1448.548198][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1448.554515][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1448.560242][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1448.565957][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1448.571151][ T24] wb_workfn+0xb3a/0x1190 [ 1448.575488][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1448.580943][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1448.586487][ T24] ? process_one_work+0x8b4/0x1790 [ 1448.591599][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1448.597250][ T24] process_one_work+0x98e/0x1790 [ 1448.602187][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1448.608308][ T24] ? lock_acquire+0x16f/0x3f0 [ 1448.612997][ T24] worker_thread+0x98/0xe40 [ 1448.617492][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1448.622515][ T24] kthread+0x357/0x430 [ 1448.626587][ T24] ? process_one_work+0x1790/0x1790 [ 1448.631780][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1448.638131][ T24] ret_from_fork+0x3a/0x50 [ 1448.642640][ T24] BUG: Bad page state in process kworker/u4:2 pfn:75a2d [ 1448.649672][ T24] page:ffffea0001d68b40 count:0 mapcount:0 mapping:ffff88808776d340 index:0x0 [ 1448.658545][ T24] shmem_aops [ 1448.658562][ T24] name:"memfd:" [ 1448.661885][ T24] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 1448.672585][ T24] raw: 01fffc000008000c ffff8880a9857200 ffff8880a9857200 ffff88808776d340 [ 1448.681210][ T24] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1448.689781][ T24] page dumped because: non-NULL mapping [ 1448.695328][ T24] Modules linked in: [ 1448.699446][ T24] CPU: 1 PID: 24 Comm: kworker/u4:2 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1448.709519][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.719723][ T24] Workqueue: writeback wb_workfn (flush-8:0) [ 1448.726171][ T24] Call Trace: [ 1448.729457][ T24] dump_stack+0x172/0x1f0 [ 1448.733784][ T24] bad_page.cold+0xda/0xff [ 1448.738193][ T24] ? si_mem_available+0x320/0x320 [ 1448.743220][ T24] ? mem_cgroup_uncharge_list+0x108/0x180 [ 1448.748931][ T24] ? kasan_check_write+0x14/0x20 [ 1448.753865][ T24] free_pages_check_bad+0x142/0x1a0 [ 1448.759059][ T24] free_unref_page_list+0x31d/0xc40 [ 1448.764258][ T24] release_pages+0x60d/0x1940 [ 1448.768981][ T24] ? put_pages_list+0x2e0/0x2e0 [ 1448.773826][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1448.778848][ T24] ? kasan_check_read+0x11/0x20 [ 1448.783703][ T24] pagevec_lru_move_fn+0x218/0x2a0 [ 1448.788808][ T24] ? lru_deactivate_file_fn+0x1a30/0x1a30 [ 1448.794552][ T24] lru_add_drain_cpu+0x3b1/0x520 [ 1448.799490][ T24] lru_add_drain+0x20/0x60 [ 1448.803900][ T24] __pagevec_release+0xbf/0x120 [ 1448.808754][ T24] mpage_prepare_extent_to_map+0xebb/0x1110 [ 1448.814646][ T24] ? ext4_block_write_begin+0x12b0/0x12b0 [ 1448.820373][ T24] ? setup_kmem_cache_node+0x2b2/0x410 [ 1448.825832][ T24] ? kmem_cache_alloc+0x2fa/0x6f0 [ 1448.830856][ T24] ext4_writepages+0x10e4/0x34e0 [ 1448.835800][ T24] ? mark_held_locks+0xc1/0xf0 [ 1448.840580][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.846036][ T24] ? mark_held_locks+0xf0/0xf0 [ 1448.850801][ T24] ? fprop_reflect_period_percpu.isra.0+0x1c8/0x2f0 [ 1448.857381][ T24] ? find_held_lock+0x35/0x130 [ 1448.862141][ T24] ? find_held_lock+0x35/0x130 [ 1448.866937][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.872413][ T24] do_writepages+0xfc/0x2a0 [ 1448.876912][ T24] ? ext4_mark_inode_dirty+0x940/0x940 [ 1448.882387][ T24] ? do_writepages+0xfc/0x2a0 [ 1448.887061][ T24] ? fprop_fraction_percpu+0x102/0x430 [ 1448.892518][ T24] ? page_writeback_cpu_online+0x20/0x20 [ 1448.898148][ T24] ? mark_held_locks+0xf0/0xf0 [ 1448.902903][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1448.908619][ T24] ? lock_downgrade+0x880/0x880 [ 1448.913478][ T24] ? kasan_check_write+0x14/0x20 [ 1448.918411][ T24] ? do_raw_spin_lock+0x12a/0x2e0 [ 1448.923462][ T24] __writeback_single_inode+0x11d/0x12f0 [ 1448.929096][ T24] ? _raw_spin_unlock+0x2d/0x50 [ 1448.933964][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1448.940208][ T24] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1448.946212][ T24] writeback_sb_inodes+0x596/0xed0 [ 1448.951323][ T24] ? wbc_detach_inode+0x840/0x840 [ 1448.956370][ T24] ? lock_acquire+0x16f/0x3f0 [ 1448.961056][ T24] ? down_read_trylock+0x5d/0xa0 [ 1448.965992][ T24] ? trylock_super+0x22/0x110 [ 1448.970664][ T24] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1448.976896][ T24] __writeback_inodes_wb+0xc3/0x260 [ 1448.982088][ T24] wb_writeback+0x87f/0xd00 [ 1448.986600][ T24] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1448.992930][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1448.998643][ T24] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1449.004360][ T24] ? get_nr_dirty_inodes+0xe2/0x140 [ 1449.009552][ T24] wb_workfn+0xb3a/0x1190 [ 1449.013878][ T24] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1449.019333][ T24] ? inode_wait_for_writeback+0x40/0x40 [ 1449.024884][ T24] ? process_one_work+0x8b4/0x1790 [ 1449.029989][ T24] ? trace_hardirqs_on+0x5e/0x230 [ 1449.035033][ T24] process_one_work+0x98e/0x1790 [ 1449.040002][ T24] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1449.045366][ T24] ? lock_acquire+0x16f/0x3f0 [ 1449.050039][ T24] worker_thread+0x98/0xe40 [ 1449.054533][ T24] ? trace_hardirqs_on+0x67/0x230 [ 1449.059553][ T24] kthread+0x357/0x430 [ 1449.063614][ T24] ? process_one_work+0x1790/0x1790 [ 1449.068802][ T24] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1449.075080][ T24] ret_from_fork+0x3a/0x50