00001c0)=ANY=[@ANYBLOB="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"], 0x2c) [ 2519.379105] EXT4-fs (loop5): Invalid log cluster size: 4279173121 [ 2519.386365] binder: 32086:32089 ioctl c018620b 0 returned -14 [ 2519.397470] overlayfs: unrecognized mount option "lowerdkr=./file0" or missing value 05:23:39 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./filerdir=./file0,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2519.442394] binder_alloc: 32086: binder_alloc_buf, no vma [ 2519.451691] overlayfs: unrecognized mount option "lowerdkr=./file0" or missing value [ 2519.451733] binder: 32086:32091 transaction failed 29189/-3, size 0-0 line 3035 [ 2519.469505] binder: undelivered TRANSACTION_ERROR: 29189 05:23:39 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000a004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:39 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffff00000000}}, 0x18) [ 2519.648269] overlayfs: missing 'lowerdir' [ 2519.656410] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2519.679173] EXT4-fs (loop1): Invalid log cluster size: 167772161 05:23:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x11f, 0x68) [ 2519.702915] overlayfs: missing 'lowerdir' [ 2519.753611] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2519.773076] EXT4-fs (loop1): Invalid log cluster size: 167772161 05:23:40 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2d) 05:23:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x120, 0x68) 05:23:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:40 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./file1/file0\x00', 0x21) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000005c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0xfffffffffffffea0, 0xfa00, {0x0}}, 0x18) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000780)=0xe8) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file1\x00', 0x1, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="585b1ab68e6c85f01d536048dd94d00eed662049b1b57a2f01a08d4673af00705ba9beb13bde", 0x26, 0x6cf}, {&(0x7f0000000240)="910d96aaa465150451031ae942a84181228df0a20cebf824499d27cd0682ea0307305f4a8fcaed721c20c37c47ef344ef54d7a12e86e081f5a4766fff5da2451c5b66bd206e1f66423edca67072acb9a912730f8c08eb8547a161de1426864854a88bae453f1f75ea83f9a93fcf68cc2eae9a12863f16ed1", 0x78, 0x7ff}, {&(0x7f00000002c0)="631df38bba8345589a20e0e0f11029f4098b9986c9ab7551d352105f28fa2c1a51ea244ec2ecfa9fad84169a45617d9ae60cbd013cc2520dbaa04fadb647a4041d4109631b87ac7a82f9cafbdf", 0x4d, 0x80000000}], 0x2000000, &(0x7f0000000500)={[{@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@tz_utc='tz=UTC'}, {@fat=@errors_remount='errors=remount-ro'}], [{@fowner_lt={'fowner<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x3d, 0x0, 0x4c9cf3f56c9c8ae5, 0x37, 0x32, 0x32, 0x33], 0x2d, [0x77, 0x7b, 0x31, 0x31], 0x2d, [0x39, 0x64, 0x0, 0x39], 0x2d, [0x34, 0x63, 0x7c, 0x7e], 0x2d, [0x61, 0x0, 0x36, 0x73, 0x65, 0x65, 0x35]}}}, {@measure='measure'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r3}}, {@seclabel='seclabel'}, {@appraise='appraise'}]}) 05:23:40 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x10d442) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:40 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000022004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2520.242690] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2520.269123] binder: 32138:32139 ioctl c018620b 0 returned -14 [ 2520.276301] EXT4-fs (loop1): Invalid log cluster size: 570425345 05:23:40 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x10d442) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x121, 0x68) [ 2520.301542] FAT-fs (loop2): Unrecognized mount option "fowner<00000000000000000000" or missing value 05:23:40 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2e) [ 2520.361467] binder_alloc: 32138: binder_alloc_buf, no vma [ 2520.361503] binder: 32138:32142 transaction failed 29189/-3, size 0-0 line 3035 [ 2520.384892] binder: undelivered TRANSACTION_ERROR: 29189 05:23:40 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x10d442) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2520.473310] overlayfs: filesystem on './file0' not supported as upperdir 05:23:40 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000023004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x122, 0x68) 05:23:40 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x10d442) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2520.565610] FAT-fs (loop2): bogus number of reserved sectors [ 2520.585128] FAT-fs (loop2): Can't find a valid FAT filesystem 05:23:40 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2f) [ 2520.702949] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2520.711552] EXT4-fs (loop1): Invalid log cluster size: 587202561 [ 2520.814611] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2520.870085] EXT4-fs (loop1): Invalid log cluster size: 587202561 05:23:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:41 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x6d5]}, &(0x7f0000000140)=0x6) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2eac5246b52c0871ddad0465726469723d2e2f66696c65302c776f726b646972242e2f66696c65315c00"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:41 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x123, 0x68) 05:23:41 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100002c004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:41 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x30) 05:23:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x124, 0x68) [ 2521.111324] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2521.141707] EXT4-fs (loop1): Invalid log cluster size: 738197505 [ 2521.181873] overlayfs: unrecognized mount option "qݭerdir=./file0" or missing value 05:23:41 executing program 5: syz_open_dev$usb(0x0, 0x202, 0x0) 05:23:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x125, 0x68) [ 2521.245420] overlayfs: unrecognized mount option "qݭerdir=./file0" or missing value 05:23:41 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100002d004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:41 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x31) [ 2521.311888] binder: 32205:32207 ioctl c018620b 0 returned -14 05:23:41 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getpeername$netrom(r1, &(0x7f0000000240)={{}, [@netrom, @default, @remote, @netrom, @rose, @null, @null, @netrom]}, &(0x7f00000002c0)=0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xf8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0xb1, 0xd, 0x5, 0x7, 0x100, 0xffffffff, 0x4, r2}, 0x20) [ 2521.365729] binder_alloc: 32205: binder_alloc_buf, no vma [ 2521.380198] binder: 32205:32214 transaction failed 29189/-3, size 0-0 line 3035 [ 2521.397640] binder: undelivered TRANSACTION_ERROR: 29189 [ 2521.501039] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2521.561079] EXT4-fs (loop1): Invalid log cluster size: 754974721 [ 2521.597691] overlayfs: filesystem on './file0' not supported as upperdir [ 2521.660941] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2521.677083] EXT4-fs (loop1): Invalid log cluster size: 754974721 05:23:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:42 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 05:23:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x126, 0x68) 05:23:42 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x32) 05:23:42 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000240)=""/180, &(0x7f0000000040)=0xb4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:42 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000048004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2522.175005] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:42 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x147) [ 2522.226381] EXT4-fs (loop1): Invalid log cluster size: 1207959553 [ 2522.233561] binder: 32253:32254 ioctl c018620b 0 returned -14 05:23:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x127, 0x68) [ 2522.274022] overlayfs: filesystem on './file0' not supported as upperdir [ 2522.311581] binder_alloc: 32253: binder_alloc_buf, no vma 05:23:42 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x33) 05:23:42 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100004c004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2522.345230] binder: 32253:32259 transaction failed 29189/-3, size 0-0 line 3035 [ 2522.357228] binder: undelivered TRANSACTION_ERROR: 29189 05:23:42 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x6, 0x80000) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7587aa1161219b7e882e2f66696c65302c6c6f7765726469723d2e2f66696c65032c776f726b6469723d2e2f66696c65315c00"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000580)={0x5, &(0x7f0000000540)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000005c0)={r2, 0x1}) connect$x25(r1, &(0x7f0000000380)={0x9, @null=' \x00'}, 0x12) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x8af, 0x2, 0x7, 0x2}, {0x78, 0x100000001, 0x3, 0x8}, {0xf07, 0x81, 0x7, 0x918}]}) bind$netrom(r1, &(0x7f0000000300)={{0x3, @null, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) fchdir(r1) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="2dc8052970ee87718a9fe8d19998e0ddb80739d0610803b502a2d91d46e4c27ee261647ec1b24f0e54d1ad848c6f3d438d841b0c30c3090ffce082f596e24083b565889781e1d20347280864dfb9660b0a3416220fa35044908a4ed0de20748a2cd56321b268add750", 0x69, 0x7fff}], 0x80000, &(0x7f00000002c0)={[{@barrier='barrier'}, {@noacl='noacl'}, {@suiddir='suiddir'}], [{@seclabel='seclabel'}]}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) timerfd_gettime(r0, &(0x7f0000000480)) 05:23:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x128, 0x68) [ 2522.468372] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2522.505065] EXT4-fs (loop1): Invalid log cluster size: 1275068417 [ 2522.575395] overlayfs: unrecognized mount option "ua!~./file0" or missing value [ 2522.672914] overlayfs: unrecognized mount option "ua!~./file0" or missing value 05:23:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:43 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x147) 05:23:43 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x34) 05:23:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x129, 0x68) 05:23:43 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000060004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:43 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uPperdirir=.Ffile0,workdir=./file1\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2523.061961] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2523.085088] overlayfs: unrecognized mount option "uPperdirir=.Ffile0" or missing value 05:23:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x12a, 0x68) 05:23:43 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2523.113087] binder: 32306:32307 ioctl c018620b 0 returned -14 [ 2523.124293] EXT4-fs (loop1): Invalid log cluster size: 1610612737 [ 2523.149691] overlayfs: unrecognized mount option "uPperdirir=.Ffile0" or missing value 05:23:43 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="75707065726469723d2e2f66697765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c007fa31514dd4bad2b4448db4892c7fdbb2be4c927b8347639d1699da79ed987457e892fd6ed7a4c9616bdcf08daafc88580722f68716a3913c6d0374dc66d806fda5a43b6cdd722fe9bb0c4242e834ae38a2809508b8212305b671856572e360787b345effc5ddf166dc6d256879c876a21354816615b4bc6c677741f01"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockname$tipc(r0, &(0x7f0000000240)=@id, &(0x7f00000002c0)=0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x100000, &(0x7f0000000340)={0xffffffffffffffff}, 0x104}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0xfffffffffffffff9, 0xfa00, {0x0, r2, 0xef}}, 0x49) [ 2523.170674] binder_alloc: 32306: binder_alloc_buf, no vma [ 2523.176249] binder: 32306:32309 transaction failed 29189/-3, size 0-0 line 3035 [ 2523.246420] binder: undelivered TRANSACTION_ERROR: 29189 05:23:43 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x35) [ 2523.300511] overlayfs: missing 'lowerdir' 05:23:43 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000068004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:43 executing program 5 (fault-call:0 fault-nth:0): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2523.363804] overlayfs: missing 'lowerdir' [ 2523.424836] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2523.448720] EXT4-fs (loop1): Invalid log cluster size: 1744830465 [ 2523.489249] FAULT_INJECTION: forcing a failure. [ 2523.489249] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.501958] CPU: 0 PID: 32336 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2523.508899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2523.518245] Call Trace: [ 2523.520842] dump_stack+0x1db/0x2d0 [ 2523.524469] ? dump_stack_print_info.cold+0x20/0x20 [ 2523.529487] ? debug_smp_processor_id+0x1c/0x20 [ 2523.534154] ? __f_unlock_pos+0x19/0x20 [ 2523.538121] should_fail.cold+0xa/0x15 [ 2523.542014] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2523.547124] ? ___might_sleep+0x1e7/0x310 [ 2523.551304] ? arch_local_save_flags+0x50/0x50 [ 2523.555898] __should_failslab+0x121/0x190 [ 2523.560134] should_failslab+0x9/0x14 [ 2523.563931] kmem_cache_alloc+0x2be/0x710 [ 2523.568067] ? check_preemption_disabled+0x48/0x290 [ 2523.573085] getname_flags+0xd6/0x5b0 [ 2523.576883] getname+0x1a/0x20 [ 2523.580072] do_sys_open+0x3a5/0x7c0 [ 2523.583786] ? filp_open+0x80/0x80 [ 2523.587327] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2523.592698] ? trace_hardirqs_off_caller+0x300/0x300 [ 2523.597800] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2523.602552] __x64_sys_open+0x7e/0xc0 [ 2523.606352] do_syscall_64+0x1a3/0x800 [ 2523.610243] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2523.615170] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2523.620204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2523.625063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2523.630244] RIP: 0033:0x411e71 [ 2523.633456] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2523.652360] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2523.660099] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2523.667358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2523.674611] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2523.681864] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2523.689126] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 [ 2523.723088] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2523.738837] EXT4-fs (loop1): Invalid log cluster size: 1744830465 05:23:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x12b, 0x68) 05:23:44 executing program 2: mkdir(&(0x7f0000000180)='./file1\x00', 0x1a0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000240)={'system_u\x94\x00\x00\x00ectt:s0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x20, 'system_u:object_r:lib_t:s0', 0x20, 0xffffffffffffff47, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x72) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) accept(r1, &(0x7f0000000480)=@rc, &(0x7f0000000140)=0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0x93) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000002c0)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 05:23:44 executing program 5 (fault-call:0 fault-nth:1): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x36) 05:23:44 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100006c004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2523.948033] FAULT_INJECTION: forcing a failure. [ 2523.948033] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.975704] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2524.000663] CPU: 0 PID: 32351 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2524.003970] binder: release 32352:32354 transaction 210 out, still active [ 2524.007612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.007622] Call Trace: [ 2524.007646] dump_stack+0x1db/0x2d0 [ 2524.007674] ? dump_stack_print_info.cold+0x20/0x20 [ 2524.026309] binder: undelivered TRANSACTION_COMPLETE [ 2524.026618] should_fail.cold+0xa/0x15 [ 2524.044231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2524.049353] ? ___might_sleep+0x1e7/0x310 [ 2524.053530] ? arch_local_save_flags+0x50/0x50 [ 2524.058125] ? perf_trace_lock+0x750/0x750 [ 2524.062371] ? print_usage_bug+0xd0/0xd0 [ 2524.066481] __should_failslab+0x121/0x190 [ 2524.070733] should_failslab+0x9/0x14 [ 2524.074100] binder: send failed reply for transaction 210, target dead [ 2524.074540] kmem_cache_alloc+0x2be/0x710 [ 2524.085353] ? __lock_acquire+0x572/0x4a30 [ 2524.089604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.095157] __alloc_file+0x93/0x480 [ 2524.098902] ? file_free_rcu+0xe0/0xe0 [ 2524.102791] ? mark_held_locks+0x100/0x100 [ 2524.107039] alloc_empty_file+0x72/0x170 [ 2524.111111] path_openat+0x112/0x5650 [ 2524.114914] ? add_lock_to_list.isra.0+0x450/0x450 [ 2524.119865] ? __alloc_fd+0x549/0x700 [ 2524.123665] ? find_held_lock+0x35/0x120 [ 2524.127727] ? path_lookupat.isra.0+0xba0/0xba0 [ 2524.132398] ? do_dup2+0x580/0x580 [ 2524.135949] ? kasan_check_read+0x11/0x20 [ 2524.140111] ? do_raw_spin_unlock+0xa0/0x330 [ 2524.144520] ? do_raw_spin_trylock+0x270/0x270 [ 2524.149106] ? __phys_addr_symbol+0x30/0x70 [ 2524.153442] do_filp_open+0x26f/0x370 [ 2524.157273] ? may_open_dev+0x100/0x100 [ 2524.161255] ? exit_files+0xb0/0xb0 [ 2524.164899] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2524.170445] ? digsig_verify.cold+0x32/0x32 [ 2524.174778] ? get_unused_fd_flags+0x122/0x1a0 [ 2524.179397] ? __alloc_fd+0x700/0x700 [ 2524.183206] ? getname_flags+0x277/0x5b0 [ 2524.187311] do_sys_open+0x59a/0x7c0 [ 2524.191030] ? filp_open+0x80/0x80 [ 2524.194589] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2524.199955] ? trace_hardirqs_off_caller+0x300/0x300 [ 2524.205059] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2524.209818] __x64_sys_open+0x7e/0xc0 [ 2524.213645] do_syscall_64+0x1a3/0x800 [ 2524.217536] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2524.222472] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2524.227512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2524.232371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2524.237556] RIP: 0033:0x411e71 [ 2524.240761] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2524.259674] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2524.267392] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2524.274666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2524.281930] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2524.289197] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 05:23:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2524.296460] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 05:23:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x12c, 0x68) [ 2524.327695] EXT4-fs (loop1): Invalid log cluster size: 1811939329 05:23:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x37) 05:23:44 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302cff010000726469723d2e2f66696c65302c776f876b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x12d, 0x68) [ 2524.422113] binder: release 32366:32369 transaction 212 out, still active [ 2524.435332] binder: undelivered TRANSACTION_COMPLETE [ 2524.447793] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2524.499270] EXT4-fs (loop1): Invalid log cluster size: 1811939329 [ 2524.530885] binder: send failed reply for transaction 212, target dead 05:23:44 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000074004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x12e, 0x68) 05:23:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x38) [ 2524.610212] overlayfs: unrecognized mount option "" or missing value [ 2524.642776] binder: release 32383:32386 transaction 214 out, still active 05:23:44 executing program 5 (fault-call:0 fault-nth:2): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2524.664628] binder: undelivered TRANSACTION_COMPLETE [ 2524.682933] overlayfs: unrecognized mount option "" or missing value 05:23:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2524.715781] binder: send failed reply for transaction 214, target dead [ 2524.805763] FAULT_INJECTION: forcing a failure. [ 2524.805763] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.834074] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2524.839706] CPU: 0 PID: 32400 Comm: syz-executor5 Not tainted 4.20.0+ #11 05:23:45 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000300)="0ae70ecbf66ce2e7f9898ed4f6abe6701256dc37a10d0c113ab8504c2d4c1b7060460dbb180a837cc90332b93e255673fa1c098cd9817012fc02219fbd2863b50f98274368d771c93868281e00564304e759a2dac6b1675a825218c9e0fdfd123d58b281742a7553286466b236ab683646e0bf37885b3f120a094ff1f33cc364d8b458b8699f6fb6ebea9282d230ab6bc76f7c268a64d657b21baf8b9d2f1f402b5de4cb125087d01f3f7380e531d530ee0191dce9e3db7f01d9bc9dd69c04aeee869c715240c8347c7ad2074eb5", 0xce, 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='#cgroup\\\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x4, 0xb2, r2) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/190) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2524.848489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.857864] Call Trace: [ 2524.860476] dump_stack+0x1db/0x2d0 [ 2524.864120] ? dump_stack_print_info.cold+0x20/0x20 [ 2524.865026] EXT4-fs (loop1): Invalid log cluster size: 1946157057 [ 2524.869187] should_fail.cold+0xa/0x15 [ 2524.869225] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2524.869252] ? ___might_sleep+0x1e7/0x310 [ 2524.869270] ? arch_local_save_flags+0x50/0x50 [ 2524.869285] ? perf_trace_lock+0x750/0x750 [ 2524.869303] ? print_usage_bug+0xd0/0xd0 [ 2524.869326] __should_failslab+0x121/0x190 05:23:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x12f, 0x68) [ 2524.869346] should_failslab+0x9/0x14 [ 2524.869365] kmem_cache_alloc+0x2be/0x710 [ 2524.901660] ? __lock_acquire+0x572/0x4a30 [ 2524.909682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.909709] __alloc_file+0x93/0x480 [ 2524.909728] ? file_free_rcu+0xe0/0xe0 [ 2524.909748] ? mark_held_locks+0x100/0x100 [ 2524.909779] alloc_empty_file+0x72/0x170 [ 2524.909800] path_openat+0x112/0x5650 [ 2524.943321] ? add_lock_to_list.isra.0+0x450/0x450 [ 2524.948326] ? __alloc_fd+0x549/0x700 [ 2524.952152] ? find_held_lock+0x35/0x120 05:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2524.956229] ? path_lookupat.isra.0+0xba0/0xba0 [ 2524.961166] ? do_dup2+0x580/0x580 [ 2524.964744] ? kasan_check_read+0x11/0x20 [ 2524.968906] ? do_raw_spin_unlock+0xa0/0x330 [ 2524.973332] ? do_raw_spin_trylock+0x270/0x270 [ 2524.977926] ? __phys_addr_symbol+0x30/0x70 [ 2524.982280] do_filp_open+0x26f/0x370 [ 2524.986096] ? may_open_dev+0x100/0x100 [ 2524.990083] ? exit_files+0xb0/0xb0 [ 2524.993724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2524.999286] ? digsig_verify.cold+0x32/0x32 [ 2525.003644] ? get_unused_fd_flags+0x122/0x1a0 [ 2525.008245] ? __alloc_fd+0x700/0x700 [ 2525.012067] ? getname_flags+0x277/0x5b0 [ 2525.016145] do_sys_open+0x59a/0x7c0 [ 2525.019879] ? filp_open+0x80/0x80 [ 2525.023440] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2525.028815] ? trace_hardirqs_off_caller+0x300/0x300 [ 2525.033973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2525.038742] __x64_sys_open+0x7e/0xc0 [ 2525.042574] do_syscall_64+0x1a3/0x800 [ 2525.046684] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2525.051634] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2525.056680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2525.061558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2525.066767] RIP: 0033:0x411e71 [ 2525.069966] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2525.075059] overlayfs: filesystem on './file0' not supported as upperdir [ 2525.088869] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 05:23:45 executing program 5 (fault-call:0 fault-nth:3): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:45 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75705252b15469ea3d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66076c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0xaf, 0xfa00, {0x0}}, 0x8) [ 2525.088886] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2525.088896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2525.088906] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2525.088916] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2525.088926] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 05:23:45 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100007a004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:45 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x39) [ 2525.248155] FAULT_INJECTION: forcing a failure. [ 2525.248155] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.267041] binder: 32416:32417 ioctl c018620b 0 returned -14 [ 2525.340640] CPU: 0 PID: 32418 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2525.347611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2525.350589] binder: release 32416:32417 transaction 216 out, still active [ 2525.356965] Call Trace: [ 2525.356993] dump_stack+0x1db/0x2d0 [ 2525.357017] ? dump_stack_print_info.cold+0x20/0x20 [ 2525.375161] ? print_usage_bug+0xd0/0xd0 [ 2525.379244] should_fail.cold+0xa/0x15 [ 2525.383153] ? fault_create_debugfs_attr+0x1e0/0x1e0 05:23:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x130, 0x68) [ 2525.386965] overlayfs: unrecognized mount option "upRRTi=./file0" or missing value [ 2525.388272] ? ___might_sleep+0x1e7/0x310 [ 2525.400290] ? arch_local_save_flags+0x50/0x50 [ 2525.402225] binder: undelivered TRANSACTION_COMPLETE [ 2525.404887] ? debug_smp_processor_id+0x1c/0x20 [ 2525.404906] ? mark_held_locks+0x100/0x100 [ 2525.404929] __should_failslab+0x121/0x190 [ 2525.404949] should_failslab+0x9/0x14 [ 2525.418986] kmem_cache_alloc_trace+0x2d1/0x760 [ 2525.419006] ? chrdev_open+0xe2/0x7c0 [ 2525.419041] usbdev_open+0xc5/0xb10 [ 2525.419061] ? proc_submiturb_compat+0x830/0x830 [ 2525.419082] ? kasan_check_read+0x11/0x20 [ 2525.427125] ? do_raw_spin_unlock+0xa0/0x330 [ 2525.452513] ? do_raw_spin_trylock+0x270/0x270 [ 2525.457140] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2525.462699] ? refcount_inc_checked+0x2b/0x70 [ 2525.467218] ? proc_submiturb_compat+0x830/0x830 [ 2525.471987] chrdev_open+0x270/0x7c0 [ 2525.475732] ? inode_has_perm.isra.0+0x210/0x210 [ 2525.480517] ? cdev_put.part.0+0x50/0x50 [ 2525.484598] ? errseq_sample+0xe6/0x140 05:23:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x131, 0x68) [ 2525.488609] ? security_file_open+0x8d/0x2a0 [ 2525.493055] do_dentry_open+0x48a/0x1210 [ 2525.497130] ? cdev_put.part.0+0x50/0x50 [ 2525.501202] ? chown_common+0x740/0x740 [ 2525.505186] ? security_inode_permission+0xd5/0x110 [ 2525.510215] ? inode_permission+0xb4/0x570 [ 2525.514459] vfs_open+0xa0/0xd0 [ 2525.517752] path_openat+0x144f/0x5650 [ 2525.521655] ? add_lock_to_list.isra.0+0x450/0x450 [ 2525.526629] ? path_lookupat.isra.0+0xba0/0xba0 [ 2525.531323] ? do_dup2+0x580/0x580 [ 2525.534884] ? kasan_check_read+0x11/0x20 [ 2525.539047] ? do_raw_spin_unlock+0xa0/0x330 [ 2525.543470] ? do_raw_spin_trylock+0x270/0x270 [ 2525.548067] ? __phys_addr_symbol+0x30/0x70 [ 2525.552416] do_filp_open+0x26f/0x370 [ 2525.556231] ? may_open_dev+0x100/0x100 [ 2525.560233] ? digsig_verify.cold+0x32/0x32 [ 2525.564585] ? get_unused_fd_flags+0x122/0x1a0 [ 2525.569180] ? __alloc_fd+0x700/0x700 [ 2525.572077] overlayfs: unrecognized mount option "upRRTi=./file0" or missing value [ 2525.572994] ? getname_flags+0x277/0x5b0 [ 2525.585043] do_sys_open+0x59a/0x7c0 [ 2525.588775] ? filp_open+0x80/0x80 [ 2525.592363] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2525.597760] ? trace_hardirqs_off_caller+0x300/0x300 [ 2525.602895] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2525.607670] __x64_sys_open+0x7e/0xc0 [ 2525.611509] do_syscall_64+0x1a3/0x800 [ 2525.615411] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2525.620377] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2525.625419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2525.630308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2525.635542] RIP: 0033:0x411e71 05:23:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x132, 0x68) 05:23:45 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x90000, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f6c65302c776d4ca89c69372f66696c813100c3698410782f26996adabf8e45e819ced189781120323cccbdf5ca294a331e5512addd85565dab4a10046056956ab98b09ffd766daf503fc24a1b8aae5ae2c627611970d7a72e7df729ce33ee4d55ca31124e0130395c6ca88b9c2b0573be7774df7b5ecf553e16c31e79cc4102e458c5d6c8e710166713ff772dbe8cc3698818ca331b27b689baca0b9b791ef9dbcc279ff724645e6d41c3cc30d4f3ea45454a92f58133b78c1434830a41d11596c062a17f81115416c2baaace474e736109349c1e77e118a5203b327bc5c5aeb667d7d83b5d79a2f36e5dc3b2803fa1b7fb21159053e4470f53c6d39ec43072ba687874b52"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000140)=0xab) [ 2525.638762] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2525.657686] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2525.665405] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2525.672681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2525.679956] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 05:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2525.687236] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2525.694523] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 [ 2525.707749] binder: send failed reply for transaction 216, target dead [ 2525.729695] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2525.759004] EXT4-fs (loop1): Invalid log cluster size: 2046820353 [ 2525.850660] overlayfs: unrecognized mount option "lole0" or missing value [ 2525.858973] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2525.871101] binder: 32449:32453 ioctl c018620b 0 returned -14 05:23:46 executing program 5 (fault-call:0 fault-nth:4): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3a) [ 2525.906918] EXT4-fs (loop1): Invalid log cluster size: 2046820353 [ 2525.908050] binder: release 32449:32453 transaction 218 out, still active 05:23:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x133, 0x68) [ 2525.964763] overlayfs: unrecognized mount option "lole0" or missing value [ 2525.992266] binder: undelivered TRANSACTION_COMPLETE [ 2525.996497] FAULT_INJECTION: forcing a failure. [ 2525.996497] name failslab, interval 1, probability 0, space 0, times 0 05:23:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:46 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000fc004000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2526.016894] binder: send failed reply for transaction 218, target dead [ 2526.090965] CPU: 0 PID: 32462 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2526.096261] binder: 32469:32471 ioctl c018620b 0 returned -14 [ 2526.098130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2526.098139] Call Trace: [ 2526.098163] dump_stack+0x1db/0x2d0 [ 2526.098187] ? dump_stack_print_info.cold+0x20/0x20 [ 2526.098213] ? print_usage_bug+0xd0/0xd0 [ 2526.114192] binder: 32469:32471 ioctl c0306201 0 returned -14 [ 2526.116018] should_fail.cold+0xa/0x15 [ 2526.116042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2526.116067] ? ___might_sleep+0x1e7/0x310 [ 2526.116085] ? arch_local_save_flags+0x50/0x50 [ 2526.125479] binder: release 32469:32471 transaction 220 out, still active [ 2526.128774] ? debug_smp_processor_id+0x1c/0x20 [ 2526.128792] ? mark_held_locks+0x100/0x100 [ 2526.128817] __should_failslab+0x121/0x190 [ 2526.128845] should_failslab+0x9/0x14 [ 2526.128863] kmem_cache_alloc_trace+0x2d1/0x760 [ 2526.128883] ? chrdev_open+0xe2/0x7c0 [ 2526.128903] usbdev_open+0xc5/0xb10 [ 2526.128926] ? proc_submiturb_compat+0x830/0x830 [ 2526.128946] ? kasan_check_read+0x11/0x20 [ 2526.138670] binder: undelivered TRANSACTION_COMPLETE [ 2526.138712] ? do_raw_spin_unlock+0xa0/0x330 [ 2526.189746] binder: send failed reply for transaction 220, target dead [ 2526.193209] ? do_raw_spin_trylock+0x270/0x270 [ 2526.193229] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2526.193246] ? refcount_inc_checked+0x2b/0x70 [ 2526.193271] ? proc_submiturb_compat+0x830/0x830 [ 2526.193287] chrdev_open+0x270/0x7c0 [ 2526.236554] ? inode_has_perm.isra.0+0x210/0x210 [ 2526.241325] ? cdev_put.part.0+0x50/0x50 [ 2526.245400] ? errseq_sample+0xe6/0x140 [ 2526.249389] ? security_file_open+0x8d/0x2a0 [ 2526.253804] do_dentry_open+0x48a/0x1210 [ 2526.257888] ? cdev_put.part.0+0x50/0x50 [ 2526.261957] ? chown_common+0x740/0x740 [ 2526.265939] ? security_inode_permission+0xd5/0x110 [ 2526.270964] ? inode_permission+0xb4/0x570 [ 2526.275207] vfs_open+0xa0/0xd0 [ 2526.278500] path_openat+0x144f/0x5650 [ 2526.282395] ? add_lock_to_list.isra.0+0x450/0x450 [ 2526.287350] ? path_lookupat.isra.0+0xba0/0xba0 [ 2526.292046] ? do_dup2+0x580/0x580 [ 2526.295602] ? kasan_check_read+0x11/0x20 [ 2526.299754] ? do_raw_spin_unlock+0xa0/0x330 [ 2526.304167] ? do_raw_spin_trylock+0x270/0x270 [ 2526.308757] ? __phys_addr_symbol+0x30/0x70 [ 2526.313093] do_filp_open+0x26f/0x370 [ 2526.316895] ? may_open_dev+0x100/0x100 [ 2526.320893] ? digsig_verify.cold+0x32/0x32 [ 2526.325219] ? get_unused_fd_flags+0x122/0x1a0 [ 2526.329806] ? __alloc_fd+0x700/0x700 [ 2526.333614] ? getname_flags+0x277/0x5b0 [ 2526.337711] do_sys_open+0x59a/0x7c0 [ 2526.341429] ? filp_open+0x80/0x80 [ 2526.344978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2526.350342] ? trace_hardirqs_off_caller+0x300/0x300 [ 2526.355450] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2526.360211] __x64_sys_open+0x7e/0xc0 [ 2526.364013] do_syscall_64+0x1a3/0x800 [ 2526.367920] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2526.372859] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2526.377882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2526.382741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2526.387933] RIP: 0033:0x411e71 [ 2526.391137] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2526.410078] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2526.417792] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2526.425066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2526.432333] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 05:23:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2526.439604] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2526.446872] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 05:23:46 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x2c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r2, 0x7, 0xc5b9, 0x677, 0x22, 0x200, 0x3f, 0xffffffffffffffc1, {0x0, @in={{0x2, 0x4e24, @local}}, 0x10001, 0x20000000000005, 0xd800, 0x2, 0x4}}, &(0x7f0000000400)=0xb0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x1, 0x1, 0x1000000000000, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0xffff, @mcast1, 0x1}}, 0x0, 0x3}, &(0x7f0000000080)=0x90) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3b) 05:23:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x134, 0x68) [ 2526.535987] binder: 32472:32474 ioctl c018620b 0 returned -14 [ 2526.578299] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2526.609136] binder: 32472:32474 ioctl c0306201 0 returned -14 05:23:46 executing program 5 (fault-call:0 fault-nth:5): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x135, 0x68) [ 2526.624732] EXT4-fs (loop1): Invalid log cluster size: 4227858433 05:23:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:47 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x3c) [ 2526.734042] overlayfs: filesystem on './file0' not supported as upperdir [ 2526.756924] FAULT_INJECTION: forcing a failure. [ 2526.756924] name failslab, interval 1, probability 0, space 0, times 0 05:23:47 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000034000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2526.830139] binder: 32498:32500 ioctl c018620b 0 returned -14 [ 2526.844904] CPU: 1 PID: 32495 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2526.851852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2526.854179] binder: 32498:32500 ioctl c0306201 0 returned -14 [ 2526.861211] Call Trace: [ 2526.861239] dump_stack+0x1db/0x2d0 [ 2526.861262] ? dump_stack_print_info.cold+0x20/0x20 [ 2526.861298] should_fail.cold+0xa/0x15 [ 2526.872989] binder: BINDER_SET_CONTEXT_MGR already set [ 2526.873391] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2526.873417] ? ___might_sleep+0x1e7/0x310 [ 2526.878548] binder: 32498:32500 ioctl 40046207 0 returned -16 [ 2526.882316] ? arch_local_save_flags+0x50/0x50 [ 2526.882340] ? __lock_acquire+0x572/0x4a30 [ 2526.882368] __should_failslab+0x121/0x190 [ 2526.882389] should_failslab+0x9/0x14 [ 2526.882408] kmem_cache_alloc_trace+0x2d1/0x760 [ 2526.892252] binder_alloc: 32472: binder_alloc_buf, no vma [ 2526.892784] ? mark_held_locks+0x100/0x100 [ 2526.892815] usb_control_msg+0xce/0x570 [ 2526.892835] ? usb_start_wait_urb+0x370/0x370 [ 2526.897143] binder: 32498:32500 transaction failed 29189/-3, size 0-0 line 3035 [ 2526.902886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2526.902903] ? refcount_inc_not_zero_checked+0x1d9/0x2e0 [ 2526.902926] hub_ext_port_status+0x120/0x4c0 [ 2526.902956] hub_activate+0x80e/0x1980 [ 2526.902982] ? hub_power_on+0x230/0x230 [ 2526.938213] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2526.938233] ? trace_hardirqs_on+0xbd/0x310 [ 2526.938251] ? kasan_check_read+0x11/0x20 [ 2526.950171] ? hcd_bus_resume+0x3b4/0x6e0 [ 2526.950189] ? trace_hardirqs_off_caller+0x300/0x300 [ 2526.950205] ? do_raw_spin_trylock+0x270/0x270 [ 2526.950231] hub_resume+0xa3/0x420 [ 2526.950249] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2526.995365] binder: 32505:32506 ioctl c018620b 0 returned -14 [ 2526.995897] ? hub_reset_resume+0x50/0x50 [ 2527.019046] ? usb_hcd_get_frame_number+0x100/0x100 [ 2527.024075] ? __rpm_callback+0x29b/0xa90 [ 2527.028241] usb_resume_interface.isra.0+0x2fa/0x3f0 [ 2527.033364] usb_resume_both+0x26f/0x8c0 [ 2527.037450] ? usb_suspend_both+0x8c0/0x8c0 [ 2527.041778] ? __rpm_callback+0x29b/0xa90 [ 2527.045941] ? do_raw_spin_trylock+0x270/0x270 [ 2527.047235] binder: BINDER_SET_CONTEXT_MGR already set [ 2527.050547] ? perf_trace_lock+0x750/0x750 [ 2527.050588] ? lock_acquire+0x1db/0x570 [ 2527.050610] usb_runtime_resume+0x1e/0x30 [ 2527.050631] __rpm_callback+0x390/0xa90 [ 2527.056148] binder: 32505:32510 ioctl 40046207 0 returned -16 05:23:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x136, 0x68) [ 2527.060131] ? find_held_lock+0x35/0x120 [ 2527.060165] ? usb_runtime_suspend+0x210/0x210 [ 2527.060200] ? __pm_runtime_resume+0x180/0x180 [ 2527.060214] ? rpm_resume+0x967/0x1d80 [ 2527.060236] ? kasan_check_read+0x11/0x20 [ 2527.060255] ? do_raw_spin_lock+0x156/0x360 [ 2527.067398] binder_alloc: 32472: binder_alloc_buf, no vma [ 2527.068372] ? lock_release+0xc40/0xc40 [ 2527.068391] ? rwlock_bug.part.0+0x90/0x90 [ 2527.068413] ? usb_runtime_suspend+0x210/0x210 [ 2527.068430] rpm_callback+0x19c/0x240 [ 2527.068462] ? usb_runtime_suspend+0x210/0x210 [ 2527.072941] binder: 32505:32510 transaction failed 29189/-3, size 0-0 line 3035 [ 2527.078317] rpm_resume+0x1460/0x1d80 [ 2527.078353] ? pm_runtime_force_resume+0x420/0x420 [ 2527.078367] ? __pm_runtime_resume+0xff/0x180 [ 2527.078395] ? kasan_check_read+0x11/0x20 [ 2527.122358] ? do_raw_spin_lock+0x156/0x360 [ 2527.122373] ? lock_release+0xc40/0xc40 [ 2527.122391] ? rwlock_bug.part.0+0x90/0x90 [ 2527.122407] ? trace_hardirqs_on_caller+0x310/0x310 [ 2527.122439] ? klist_iter_exit+0x68/0x90 [ 2527.122465] __pm_runtime_resume+0x10d/0x180 [ 2527.130823] usb_autoresume_device+0x23/0x60 [ 2527.130840] usbdev_open+0x27f/0xb10 [ 2527.130863] ? proc_submiturb_compat+0x830/0x830 [ 2527.130887] ? kasan_check_read+0x11/0x20 [ 2527.130904] ? do_raw_spin_unlock+0xa0/0x330 [ 2527.130922] ? do_raw_spin_trylock+0x270/0x270 [ 2527.130940] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2527.130956] ? refcount_inc_checked+0x2b/0x70 [ 2527.130977] ? proc_submiturb_compat+0x830/0x830 [ 2527.155783] chrdev_open+0x270/0x7c0 [ 2527.155800] ? inode_has_perm.isra.0+0x210/0x210 05:23:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x137, 0x68) [ 2527.155822] ? cdev_put.part.0+0x50/0x50 [ 2527.155834] ? errseq_sample+0xe6/0x140 [ 2527.155862] ? security_file_open+0x8d/0x2a0 [ 2527.155881] do_dentry_open+0x48a/0x1210 [ 2527.168377] ? cdev_put.part.0+0x50/0x50 [ 2527.168398] ? chown_common+0x740/0x740 [ 2527.168415] ? security_inode_permission+0xd5/0x110 [ 2527.168436] ? inode_permission+0xb4/0x570 [ 2527.168457] vfs_open+0xa0/0xd0 [ 2527.182214] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2527.186319] path_openat+0x144f/0x5650 [ 2527.186348] ? add_lock_to_list.isra.0+0x450/0x450 [ 2527.186387] ? path_lookupat.isra.0+0xba0/0xba0 [ 2527.186404] ? do_dup2+0x580/0x580 [ 2527.206388] EXT4-fs (loop1): invalid first ino: 0 [ 2527.207977] ? kasan_check_read+0x11/0x20 [ 2527.208024] ? do_raw_spin_unlock+0xa0/0x330 [ 2527.208044] ? do_raw_spin_trylock+0x270/0x270 [ 2527.208064] ? __phys_addr_symbol+0x30/0x70 [ 2527.208096] do_filp_open+0x26f/0x370 [ 2527.318693] ? may_open_dev+0x100/0x100 [ 2527.322676] ? digsig_verify.cold+0x32/0x32 [ 2527.326992] ? get_unused_fd_flags+0x122/0x1a0 [ 2527.331579] ? __alloc_fd+0x700/0x700 [ 2527.335365] ? getname_flags+0x277/0x5b0 [ 2527.339413] do_sys_open+0x59a/0x7c0 [ 2527.343126] ? filp_open+0x80/0x80 [ 2527.346700] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.352050] ? trace_hardirqs_off_caller+0x300/0x300 [ 2527.357148] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2527.361898] __x64_sys_open+0x7e/0xc0 [ 2527.365702] do_syscall_64+0x1a3/0x800 [ 2527.369610] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2527.374535] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2527.379537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2527.384383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.389559] RIP: 0033:0x411e71 [ 2527.392773] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2527.411671] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2527.419388] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 05:23:47 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x3) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f00b50c97d367698f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) getresuid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./bus\x00', 0x2, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="379a8fd770e4161068122b22984965b45f0af4a44ac06aadea3903131300756622ef8faaccffef8d356a21713741e0d712db34ba4a1454454eb4102cc8f566191f3f6048375e39091b058f3859bdf24400f5681732f58ea391024c03d8397e746231834b42843eaeb41ecee639d4140e20ce7b86a87e0199d23fceb063fb085757d41a01c9f472fb9afc65386a8c068f01b5f8cdb357473fbb2480293d196036469e26e36e8af0cd4b9131a726355b13ce21f6d015b6251234fd3f9d78a2adc853e4acb6f55f", 0xc6, 0x7f}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000", @ANYRESHEX=r1, @ANYBLOB=',euid>', @ANYRESDEC=r2, @ANYBLOB=',smackfsfloor=overlay\x00,uid>', @ANYRESDEC=r3, @ANYBLOB=',smackfsroot=overlay\x00,obj_role=overlay\x00,uid=', @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC=r5, @ANYBLOB=',appraise_type=imasig,\x00']) creat(&(0x7f0000000800)='./file0\x00', 0x102) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "797eb02730084a4c69c19ab42f9c0a34"}, 0x11, 0x1) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2527.426703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2527.433964] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2527.441217] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2527.448478] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 [ 2527.456918] binder: undelivered TRANSACTION_ERROR: 29189 [ 2527.462509] binder: undelivered TRANSACTION_ERROR: 29189 [ 2527.468236] binder: send failed reply for transaction 222 to 32472:32474 [ 2527.473728] hub 4-0:1.0: hub_ext_port_status failed (err = -12) [ 2527.481655] binder: undelivered TRANSACTION_COMPLETE [ 2527.481671] binder: undelivered TRANSACTION_ERROR: 29189 05:23:47 executing program 5 (fault-call:0 fault-nth:6): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2527.532784] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2527.546498] EXT4-fs (loop1): invalid first ino: 0 05:23:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x138, 0x68) 05:23:47 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3d) 05:23:47 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000010044000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2527.640882] FAULT_INJECTION: forcing a failure. [ 2527.640882] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.680491] overlayfs: missing 'lowerdir' [ 2527.735806] jfs: Unrecognized mount option "" or missing value [ 2527.755553] CPU: 1 PID: 32528 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2527.762542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.771913] Call Trace: [ 2527.774517] dump_stack+0x1db/0x2d0 [ 2527.778173] ? dump_stack_print_info.cold+0x20/0x20 [ 2527.783201] ? usb_resume_both+0x26f/0x8c0 [ 2527.783220] ? usb_runtime_resume+0x1e/0x30 [ 2527.783237] ? __rpm_callback+0x390/0xa90 [ 2527.783252] ? rpm_callback+0x19c/0x240 [ 2527.783272] ? rpm_resume+0x1460/0x1d80 [ 2527.803879] ? usb_autoresume_device+0x23/0x60 [ 2527.808491] should_fail.cold+0xa/0x15 [ 2527.812393] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2527.817514] ? ___might_sleep+0x1e7/0x310 [ 2527.821675] ? arch_local_save_flags+0x50/0x50 [ 2527.821962] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2527.826258] ? usb_control_msg+0xce/0x570 [ 2527.826303] __should_failslab+0x121/0x190 [ 2527.826323] should_failslab+0x9/0x14 [ 2527.845937] __kmalloc+0x2dc/0x740 [ 2527.849479] ? rcu_read_lock_sched_held+0x110/0x130 [ 2527.849497] ? kmem_cache_alloc_trace+0x354/0x760 [ 2527.849512] ? mark_held_locks+0x100/0x100 [ 2527.849530] ? usb_alloc_urb+0x24/0x50 [ 2527.867495] usb_alloc_urb+0x24/0x50 [ 2527.871220] usb_control_msg+0x1f3/0x570 [ 2527.875297] ? usb_start_wait_urb+0x370/0x370 [ 2527.879809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2527.880223] EXT4-fs (loop1): Invalid log cluster size: 268435457 [ 2527.885355] ? refcount_inc_not_zero_checked+0x1d9/0x2e0 [ 2527.885382] hub_ext_port_status+0x120/0x4c0 [ 2527.885419] hub_activate+0x80e/0x1980 [ 2527.897015] ? hub_power_on+0x230/0x230 [ 2527.897031] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2527.897049] ? trace_hardirqs_on+0xbd/0x310 [ 2527.918170] ? kasan_check_read+0x11/0x20 [ 2527.918186] ? hcd_bus_resume+0x3b4/0x6e0 [ 2527.926490] ? trace_hardirqs_off_caller+0x300/0x300 [ 2527.931633] ? do_raw_spin_trylock+0x270/0x270 [ 2527.936238] hub_resume+0xa3/0x420 [ 2527.939816] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2527.944840] ? hub_reset_resume+0x50/0x50 [ 2527.949003] ? usb_hcd_get_frame_number+0x100/0x100 [ 2527.954039] ? __rpm_callback+0x29b/0xa90 [ 2527.958205] usb_resume_interface.isra.0+0x2fa/0x3f0 [ 2527.963408] usb_resume_both+0x26f/0x8c0 [ 2527.963469] binder: 32544:32547 ioctl c018620b 0 returned -14 [ 2527.967483] ? usb_suspend_both+0x8c0/0x8c0 [ 2527.967499] ? __rpm_callback+0x29b/0xa90 [ 2527.967519] ? do_raw_spin_trylock+0x270/0x270 05:23:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x139, 0x68) 05:23:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x13a, 0x68) [ 2527.967535] ? perf_trace_lock+0x750/0x750 [ 2527.967551] ? lock_acquire+0x1db/0x570 [ 2527.994641] usb_runtime_resume+0x1e/0x30 [ 2527.998803] __rpm_callback+0x390/0xa90 [ 2528.002794] ? find_held_lock+0x35/0x120 [ 2528.006885] ? usb_runtime_suspend+0x210/0x210 [ 2528.011468] ? __pm_runtime_resume+0x180/0x180 [ 2528.016047] ? rpm_resume+0x967/0x1d80 [ 2528.019968] ? kasan_check_read+0x11/0x20 [ 2528.024125] ? do_raw_spin_lock+0x156/0x360 [ 2528.028459] ? lock_release+0xc40/0xc40 [ 2528.032463] ? rwlock_bug.part.0+0x90/0x90 [ 2528.036713] ? usb_runtime_suspend+0x210/0x210 [ 2528.041310] rpm_callback+0x19c/0x240 [ 2528.045127] ? usb_runtime_suspend+0x210/0x210 [ 2528.049722] rpm_resume+0x1460/0x1d80 [ 2528.053530] ? pm_runtime_force_resume+0x420/0x420 [ 2528.058450] ? __pm_runtime_resume+0xff/0x180 [ 2528.062959] ? kasan_check_read+0x11/0x20 [ 2528.067099] ? do_raw_spin_lock+0x156/0x360 [ 2528.071423] ? lock_release+0xc40/0xc40 [ 2528.075395] ? rwlock_bug.part.0+0x90/0x90 [ 2528.079641] ? trace_hardirqs_on_caller+0x310/0x310 [ 2528.084669] ? klist_iter_exit+0x68/0x90 [ 2528.088442] binder: 32544:32550 transaction failed 29189/-22, size 0-0 line 2896 [ 2528.088752] __pm_runtime_resume+0x10d/0x180 [ 2528.088777] usb_autoresume_device+0x23/0x60 [ 2528.097657] binder: undelivered TRANSACTION_ERROR: 29189 [ 2528.100843] usbdev_open+0x27f/0xb10 [ 2528.100864] ? proc_submiturb_compat+0x830/0x830 [ 2528.100886] ? kasan_check_read+0x11/0x20 [ 2528.100918] ? do_raw_spin_unlock+0xa0/0x330 [ 2528.100951] ? do_raw_spin_trylock+0x270/0x270 [ 2528.100969] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2528.100985] ? refcount_inc_checked+0x2b/0x70 [ 2528.101006] ? proc_submiturb_compat+0x830/0x830 [ 2528.147156] chrdev_open+0x270/0x7c0 [ 2528.150868] ? inode_has_perm.isra.0+0x210/0x210 [ 2528.155636] ? cdev_put.part.0+0x50/0x50 [ 2528.159702] ? errseq_sample+0xe6/0x140 [ 2528.163691] ? security_file_open+0x8d/0x2a0 [ 2528.168112] do_dentry_open+0x48a/0x1210 [ 2528.172163] ? cdev_put.part.0+0x50/0x50 [ 2528.176214] ? chown_common+0x740/0x740 [ 2528.180176] ? security_inode_permission+0xd5/0x110 [ 2528.185206] ? inode_permission+0xb4/0x570 [ 2528.189468] vfs_open+0xa0/0xd0 [ 2528.192749] path_openat+0x144f/0x5650 [ 2528.196625] ? add_lock_to_list.isra.0+0x450/0x450 [ 2528.201552] ? path_lookupat.isra.0+0xba0/0xba0 [ 2528.206267] ? do_dup2+0x580/0x580 [ 2528.209889] ? kasan_check_read+0x11/0x20 [ 2528.214067] ? do_raw_spin_unlock+0xa0/0x330 [ 2528.218462] ? do_raw_spin_trylock+0x270/0x270 [ 2528.223032] ? __phys_addr_symbol+0x30/0x70 [ 2528.227351] do_filp_open+0x26f/0x370 [ 2528.231152] ? may_open_dev+0x100/0x100 [ 2528.235142] ? digsig_verify.cold+0x32/0x32 [ 2528.239471] ? get_unused_fd_flags+0x122/0x1a0 [ 2528.244051] ? __alloc_fd+0x700/0x700 [ 2528.247846] ? getname_flags+0x277/0x5b0 [ 2528.251923] do_sys_open+0x59a/0x7c0 [ 2528.255655] ? filp_open+0x80/0x80 [ 2528.259214] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2528.264582] ? trace_hardirqs_off_caller+0x300/0x300 [ 2528.269686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2528.274430] __x64_sys_open+0x7e/0xc0 [ 2528.278240] do_syscall_64+0x1a3/0x800 [ 2528.282123] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2528.287041] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2528.292054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2528.296918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2528.302105] RIP: 0033:0x411e71 [ 2528.305285] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2528.324184] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2528.331877] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2528.339129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2528.346380] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2528.353639] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2528.360916] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 [ 2528.375934] hub 4-0:1.0: hub_ext_port_status failed (err = -12) 05:23:48 executing program 5 (fault-call:0 fault-nth:7): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2528.469996] overlayfs: missing 'lowerdir' 05:23:48 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000054000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2528.500133] audit: type=1804 audit(1546752228.698:185): pid=32526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir917691117/syzkaller.LIAYMz/1077/file0/file0" dev="sda1" ino=16670 res=1 05:23:48 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3e) 05:23:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x13b, 0x68) [ 2528.559621] jfs: Unrecognized mount option "" or missing value [ 2528.588315] FAULT_INJECTION: forcing a failure. [ 2528.588315] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.601392] audit: type=1804 audit(1546752228.788:186): pid=32526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir917691117/syzkaller.LIAYMz/1077/file0/file0" dev="sda1" ino=16670 res=1 [ 2528.628419] CPU: 1 PID: 32565 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2528.635363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.644712] Call Trace: [ 2528.647296] dump_stack+0x1db/0x2d0 [ 2528.650956] ? dump_stack_print_info.cold+0x20/0x20 [ 2528.651008] ? usb_hcd_link_urb_to_ep+0x3c7/0x540 [ 2528.651055] ? find_held_lock+0x35/0x120 [ 2528.651093] should_fail.cold+0xa/0x15 [ 2528.651127] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2528.673959] ? ___might_sleep+0x1e7/0x310 [ 2528.678093] ? arch_local_save_flags+0x50/0x50 [ 2528.682671] ? mark_held_locks+0xb1/0x100 [ 2528.686822] ? _raw_spin_unlock_irq+0x28/0x90 [ 2528.691307] __should_failslab+0x121/0x190 [ 2528.695551] should_failslab+0x9/0x14 [ 2528.699359] __kmalloc+0x2dc/0x740 [ 2528.702902] ? usb_hcd_submit_urb+0x6b5/0x20a0 [ 2528.707469] usb_hcd_submit_urb+0x6b5/0x20a0 [ 2528.711878] ? hub_resume+0xa3/0x420 [ 2528.715600] ? usb_resume_interface.isra.0+0x2fa/0x3f0 [ 2528.720861] ? usb_runtime_suspend+0x190/0x210 [ 2528.725427] ? __rpm_callback+0x353/0xa90 [ 2528.729587] ? usb_create_hcd+0x40/0x40 [ 2528.733559] ? path_openat+0x144f/0x5650 [ 2528.737621] ? do_filp_open+0x26f/0x370 [ 2528.741604] ? do_sys_open+0x59a/0x7c0 [ 2528.745483] ? __x64_sys_open+0x7e/0xc0 [ 2528.749471] ? do_syscall_64+0x1a3/0x800 [ 2528.753545] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2528.758966] ? lockdep_init_map+0x10c/0x5b0 [ 2528.763306] ? lockdep_init_map+0x10c/0x5b0 [ 2528.767634] usb_submit_urb+0x6f0/0x1400 [ 2528.771702] usb_start_wait_urb+0x154/0x370 [ 2528.776010] ? sg_clean+0x240/0x240 [ 2528.779622] ? usb_init_urb+0x167/0x1e0 [ 2528.783597] ? kmem_cache_alloc_trace+0x354/0x760 [ 2528.788425] ? mark_held_locks+0x100/0x100 [ 2528.792660] ? usb_alloc_urb+0x24/0x50 [ 2528.796555] usb_control_msg+0x353/0x570 [ 2528.800614] ? usb_start_wait_urb+0x370/0x370 [ 2528.805096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2528.810619] ? refcount_inc_not_zero_checked+0x1d9/0x2e0 [ 2528.816073] hub_ext_port_status+0x120/0x4c0 [ 2528.820479] hub_activate+0x80e/0x1980 [ 2528.824361] ? hub_power_on+0x230/0x230 [ 2528.828398] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2528.832990] ? trace_hardirqs_on+0xbd/0x310 [ 2528.837312] ? kasan_check_read+0x11/0x20 [ 2528.841452] ? hcd_bus_resume+0x3b4/0x6e0 [ 2528.845604] ? trace_hardirqs_off_caller+0x300/0x300 [ 2528.850693] ? do_raw_spin_trylock+0x270/0x270 [ 2528.855293] hub_resume+0xa3/0x420 [ 2528.858821] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2528.863825] ? hub_reset_resume+0x50/0x50 [ 2528.867961] ? usb_hcd_get_frame_number+0x100/0x100 [ 2528.872980] ? __rpm_callback+0x29b/0xa90 [ 2528.877128] usb_resume_interface.isra.0+0x2fa/0x3f0 [ 2528.882229] usb_resume_both+0x26f/0x8c0 [ 2528.886294] ? usb_suspend_both+0x8c0/0x8c0 [ 2528.890616] ? __rpm_callback+0x29b/0xa90 [ 2528.894768] ? do_raw_spin_trylock+0x270/0x270 [ 2528.899340] ? perf_trace_lock+0x750/0x750 [ 2528.903562] ? lock_acquire+0x1db/0x570 [ 2528.907532] usb_runtime_resume+0x1e/0x30 [ 2528.911666] __rpm_callback+0x390/0xa90 [ 2528.915625] ? find_held_lock+0x35/0x120 [ 2528.919681] ? usb_runtime_suspend+0x210/0x210 [ 2528.924273] ? __pm_runtime_resume+0x180/0x180 [ 2528.928878] ? rpm_resume+0x967/0x1d80 [ 2528.932770] ? kasan_check_read+0x11/0x20 [ 2528.936904] ? do_raw_spin_lock+0x156/0x360 [ 2528.941218] ? lock_release+0xc40/0xc40 [ 2528.945190] ? rwlock_bug.part.0+0x90/0x90 [ 2528.949410] ? usb_runtime_suspend+0x210/0x210 [ 2528.953975] rpm_callback+0x19c/0x240 [ 2528.957759] ? usb_runtime_suspend+0x210/0x210 [ 2528.962331] rpm_resume+0x1460/0x1d80 [ 2528.966126] ? pm_runtime_force_resume+0x420/0x420 [ 2528.971071] ? __pm_runtime_resume+0xff/0x180 [ 2528.975558] ? kasan_check_read+0x11/0x20 [ 2528.979710] ? do_raw_spin_lock+0x156/0x360 [ 2528.984029] ? lock_release+0xc40/0xc40 [ 2528.987988] ? rwlock_bug.part.0+0x90/0x90 [ 2528.992209] ? trace_hardirqs_on_caller+0x310/0x310 [ 2528.997207] ? klist_iter_exit+0x68/0x90 [ 2529.001261] __pm_runtime_resume+0x10d/0x180 [ 2529.005657] usb_autoresume_device+0x23/0x60 [ 2529.010047] usbdev_open+0x27f/0xb10 [ 2529.013750] ? proc_submiturb_compat+0x830/0x830 [ 2529.018508] ? kasan_check_read+0x11/0x20 [ 2529.022665] ? do_raw_spin_unlock+0xa0/0x330 [ 2529.027089] ? do_raw_spin_trylock+0x270/0x270 [ 2529.031697] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2529.037255] ? refcount_inc_checked+0x2b/0x70 [ 2529.037281] ? proc_submiturb_compat+0x830/0x830 [ 2529.037297] chrdev_open+0x270/0x7c0 [ 2529.037312] ? inode_has_perm.isra.0+0x210/0x210 [ 2529.037338] ? cdev_put.part.0+0x50/0x50 [ 2529.046571] ? errseq_sample+0xe6/0x140 [ 2529.046616] ? security_file_open+0x8d/0x2a0 [ 2529.046637] do_dentry_open+0x48a/0x1210 [ 2529.046669] ? cdev_put.part.0+0x50/0x50 [ 2529.046702] ? chown_common+0x740/0x740 [ 2529.056645] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2529.059221] ? security_inode_permission+0xd5/0x110 [ 2529.059245] ? inode_permission+0xb4/0x570 [ 2529.059269] vfs_open+0xa0/0xd0 [ 2529.059289] path_openat+0x144f/0x5650 [ 2529.059309] ? add_lock_to_list.isra.0+0x450/0x450 [ 2529.059355] ? path_lookupat.isra.0+0xba0/0xba0 [ 2529.063970] EXT4-fs (loop1): invalid first ino: 0 [ 2529.067746] ? do_dup2+0x580/0x580 [ 2529.067775] ? kasan_check_read+0x11/0x20 [ 2529.067792] ? do_raw_spin_unlock+0xa0/0x330 [ 2529.067810] ? do_raw_spin_trylock+0x270/0x270 [ 2529.067828] ? __phys_addr_symbol+0x30/0x70 [ 2529.139018] do_filp_open+0x26f/0x370 [ 2529.142805] ? may_open_dev+0x100/0x100 [ 2529.146779] ? digsig_verify.cold+0x32/0x32 [ 2529.151093] ? get_unused_fd_flags+0x122/0x1a0 [ 2529.155668] ? __alloc_fd+0x700/0x700 [ 2529.159456] ? getname_flags+0x277/0x5b0 [ 2529.163513] do_sys_open+0x59a/0x7c0 [ 2529.167225] ? filp_open+0x80/0x80 [ 2529.170781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2529.176163] ? trace_hardirqs_off_caller+0x300/0x300 [ 2529.181270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2529.186013] __x64_sys_open+0x7e/0xc0 [ 2529.189815] do_syscall_64+0x1a3/0x800 [ 2529.193705] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2529.198648] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2529.203664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2529.208499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2529.213674] RIP: 0033:0x411e71 [ 2529.216863] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2529.246861] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2529.254578] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2529.261833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 [ 2529.269086] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2529.276340] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2529.283593] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 [ 2529.293399] hub 4-0:1.0: hub_ext_port_status failed (err = -12) 05:23:49 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffff9c, 0x40107446, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x91f8, 0xd07, 0x62c, 0x4}, {0xfffffffffffffffd, 0x1, 0x8000000000000, 0x3ff}, {0x2, 0x7fff, 0x7, 0x49f}, {0x8cd, 0x81, 0x38c, 0x1000}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x33eb}}, 0x18) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="757070657200000065307928689172661292723d2e2f66696c65302c826f726b6469723d2e2f660400f0b442eee42dccad1f66092d9b1f5af6adf04ae8198bfd65c4723ba968e9834798ef4afcd094f0e882bb1fb81ffed9cd1ef0398c5e801c8959ba9f96d599dc9375ff54e34bdea557da82dbfea46468d8deebed4325f76eeb7bcf43062df7ab0a6bbbd2e0e2fe0346ad3e0c0ff2b564110f2e8e2670754dda8f9d2420e55cfeed9d759c1094ab346ea1436dc74efe7e10bba5e9"]) r2 = open(&(0x7f0000021000)='./file1\x00', 0x0, 0x10) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:49 executing program 5 (fault-call:0 fault-nth:8): syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2529.391595] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2529.430981] binder: 32577:32578 ioctl c018620b 0 returned -14 [ 2529.455219] FAULT_INJECTION: forcing a failure. [ 2529.455219] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.460132] EXT4-fs (loop1): invalid first ino: 0 [ 2529.504524] CPU: 1 PID: 32583 Comm: syz-executor5 Not tainted 4.20.0+ #11 [ 2529.507410] binder: release 32577:32578 transaction 228 out, still active [ 2529.511512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2529.511520] Call Trace: [ 2529.511546] dump_stack+0x1db/0x2d0 [ 2529.511580] ? dump_stack_print_info.cold+0x20/0x20 [ 2529.511600] ? kfree+0xcf/0x230 [ 2529.511634] should_fail.cold+0xa/0x15 [ 2529.511658] ? fault_create_debugfs_attr+0x1e0/0x1e0 05:23:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x13c, 0x68) [ 2529.511686] ? ___might_sleep+0x1e7/0x310 [ 2529.511706] ? arch_local_save_flags+0x50/0x50 [ 2529.511726] ? lock_downgrade+0x910/0x910 [ 2529.511745] ? kfree+0x173/0x230 [ 2529.519559] binder: undelivered TRANSACTION_COMPLETE [ 2529.528026] __should_failslab+0x121/0x190 [ 2529.577004] should_failslab+0x9/0x14 [ 2529.577555] binder: send failed reply for transaction 228, target dead [ 2529.580810] kmem_cache_alloc_trace+0x2d1/0x760 [ 2529.580828] ? kasan_check_write+0x14/0x20 [ 2529.580845] ? __mutex_unlock_slowpath+0x195/0x870 [ 2529.580862] ? usb_control_msg+0x3f3/0x570 [ 2529.580883] usb_control_msg+0xce/0x570 [ 2529.580905] ? usb_start_wait_urb+0x370/0x370 [ 2529.614050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2529.619597] ? refcount_inc_not_zero_checked+0x1d9/0x2e0 [ 2529.625061] hub_ext_port_status+0x120/0x4c0 [ 2529.629487] hub_activate+0x80e/0x1980 [ 2529.633403] ? hub_power_on+0x230/0x230 [ 2529.637377] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2529.641966] ? trace_hardirqs_on+0xbd/0x310 [ 2529.646288] ? kasan_check_read+0x11/0x20 [ 2529.650435] ? hcd_bus_resume+0x3b4/0x6e0 [ 2529.654588] ? trace_hardirqs_off_caller+0x300/0x300 [ 2529.659693] ? do_raw_spin_trylock+0x270/0x270 [ 2529.664345] hub_resume+0xa3/0x420 [ 2529.667917] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2529.672935] ? hub_reset_resume+0x50/0x50 [ 2529.677094] ? usb_hcd_get_frame_number+0x100/0x100 [ 2529.682115] ? __rpm_callback+0x29b/0xa90 [ 2529.686268] usb_resume_interface.isra.0+0x2fa/0x3f0 [ 2529.691380] usb_resume_both+0x26f/0x8c0 [ 2529.695448] ? usb_suspend_both+0x8c0/0x8c0 [ 2529.699769] ? __rpm_callback+0x29b/0xa90 [ 2529.703918] ? do_raw_spin_trylock+0x270/0x270 [ 2529.708503] ? perf_trace_lock+0x750/0x750 [ 2529.712742] ? lock_acquire+0x1db/0x570 [ 2529.716724] usb_runtime_resume+0x1e/0x30 [ 2529.720877] __rpm_callback+0x390/0xa90 [ 2529.724849] ? find_held_lock+0x35/0x120 [ 2529.728915] ? usb_runtime_suspend+0x210/0x210 [ 2529.733514] ? __pm_runtime_resume+0x180/0x180 [ 2529.738099] ? rpm_resume+0x967/0x1d80 [ 2529.741996] ? kasan_check_read+0x11/0x20 [ 2529.746213] ? do_raw_spin_lock+0x156/0x360 [ 2529.750573] ? lock_release+0xc40/0xc40 [ 2529.754582] ? rwlock_bug.part.0+0x90/0x90 [ 2529.758827] ? usb_runtime_suspend+0x210/0x210 [ 2529.763411] rpm_callback+0x19c/0x240 [ 2529.767219] ? usb_runtime_suspend+0x210/0x210 [ 2529.771802] rpm_resume+0x1460/0x1d80 [ 2529.775629] ? pm_runtime_force_resume+0x420/0x420 [ 2529.780556] ? __pm_runtime_resume+0xff/0x180 [ 2529.785068] ? kasan_check_read+0x11/0x20 [ 2529.789219] ? do_raw_spin_lock+0x156/0x360 [ 2529.793555] ? lock_release+0xc40/0xc40 [ 2529.797579] ? rwlock_bug.part.0+0x90/0x90 [ 2529.801817] ? trace_hardirqs_on_caller+0x310/0x310 [ 2529.806837] ? klist_iter_exit+0x68/0x90 [ 2529.810913] __pm_runtime_resume+0x10d/0x180 [ 2529.815333] usb_autoresume_device+0x23/0x60 [ 2529.819741] usbdev_open+0x27f/0xb10 [ 2529.823460] ? proc_submiturb_compat+0x830/0x830 [ 2529.828237] ? kasan_check_read+0x11/0x20 [ 2529.832387] ? do_raw_spin_unlock+0xa0/0x330 [ 2529.836810] ? do_raw_spin_trylock+0x270/0x270 [ 2529.841393] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2529.846933] ? refcount_inc_checked+0x2b/0x70 [ 2529.851434] ? proc_submiturb_compat+0x830/0x830 [ 2529.856187] chrdev_open+0x270/0x7c0 [ 2529.859902] ? inode_has_perm.isra.0+0x210/0x210 [ 2529.864662] ? cdev_put.part.0+0x50/0x50 [ 2529.868718] ? errseq_sample+0xe6/0x140 [ 2529.872705] ? security_file_open+0x8d/0x2a0 [ 2529.877114] do_dentry_open+0x48a/0x1210 [ 2529.881190] ? cdev_put.part.0+0x50/0x50 [ 2529.885281] ? chown_common+0x740/0x740 [ 2529.889256] ? security_inode_permission+0xd5/0x110 [ 2529.894276] ? inode_permission+0xb4/0x570 [ 2529.898529] vfs_open+0xa0/0xd0 [ 2529.901810] path_openat+0x144f/0x5650 [ 2529.905717] ? add_lock_to_list.isra.0+0x450/0x450 [ 2529.910668] ? path_lookupat.isra.0+0xba0/0xba0 [ 2529.915356] ? do_dup2+0x580/0x580 [ 2529.918940] ? kasan_check_read+0x11/0x20 [ 2529.923088] ? do_raw_spin_unlock+0xa0/0x330 [ 2529.927498] ? do_raw_spin_trylock+0x270/0x270 [ 2529.932082] ? __phys_addr_symbol+0x30/0x70 [ 2529.936415] do_filp_open+0x26f/0x370 [ 2529.940220] ? may_open_dev+0x100/0x100 [ 2529.944240] ? digsig_verify.cold+0x32/0x32 [ 2529.948585] ? get_unused_fd_flags+0x122/0x1a0 [ 2529.953185] ? __alloc_fd+0x700/0x700 [ 2529.956985] ? getname_flags+0x277/0x5b0 [ 2529.961053] do_sys_open+0x59a/0x7c0 [ 2529.964774] ? filp_open+0x80/0x80 [ 2529.968322] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2529.973696] ? trace_hardirqs_off_caller+0x300/0x300 [ 2529.978804] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2529.983561] __x64_sys_open+0x7e/0xc0 [ 2529.987374] do_syscall_64+0x1a3/0x800 [ 2529.991267] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2529.996197] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2530.001219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2530.006072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2530.011264] RIP: 0033:0x411e71 [ 2530.014472] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2530.033383] RSP: 002b:00007ffbb2bab7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2530.041097] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411e71 [ 2530.048363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffbb2bab850 05:23:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:50 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000064000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2530.055626] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 2530.062891] R10: 0000000000000064 R11: 0000000000000293 R12: 00007ffbb2bac6d4 [ 2530.070158] R13: 00000000004c695b R14: 00000000004dbb48 R15: 0000000000000003 05:23:50 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x41) [ 2530.139764] binder: 32587:32590 ioctl c018620b 0 returned -14 [ 2530.151380] overlayfs: unrecognized mount option "upper" or missing value [ 2530.182411] overlayfs: unrecognized mount option "upper" or missing value 05:23:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x13d, 0x68) [ 2530.234372] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2530.245580] EXT4-fs (loop1): invalid first ino: 0 [ 2530.265157] binder: release 32587:32609 transaction 230 out, still active [ 2530.273650] binder: undelivered TRANSACTION_COMPLETE 05:23:50 executing program 2: mkdir(&(0x7f0000000440)='./bus\x00', 0x27) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xb8, "d8ad143e34eaa456e1fef4345e10e41284b83020864e870d43ac72166aaf914610eb9d2089bc7c9e00a7d583387422f2b75dcb13ea2edd14ced88ed4e7958e8692460861ae0d3703a429824d1cbb7d4f0f7fd57e2f401576df6e69fa45d228e8dfe1c330550a6f84500e8fb3a765a6d773c346fe8456482f8ba281beb2eae87f4be1cbe532ae57d2e98633c01d13699f88a940c77dac7f961d8a7d3544fb83bb98f86b7bfb6b3b4ba5cf224e99b9d1d876f9641ece59ce06"}, &(0x7f00000003c0)=0xc0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000009c0)={0x8, 0x2, 0x8009, 0x5, 0x1, 0x0, 0x2, 0x1, r1}, 0x20) fchdir(r0) syz_mount_image$minix(&(0x7f0000000400)='minix\x00', &(0x7f0000000480)='./file1\x00', 0x100000001, 0x5, &(0x7f0000000800)=[{&(0x7f00000004c0)="493c95842555a3b81f77e0aa928a685590ad6f7a4b68a9be29cf2731efe3b2ca842dbf6483439292ff06926de6444d9a50958ca803cba41cfbed0b9c0ec8c674a3cd0cdcae4d4e3512a28847f5df9c28d60225ac52397772a3c3888258bd4d08857d764e82ee5ef6a104731d75a654d83b0777617287cbcb2b9b1e58d5860fe7d340d88e1606919d811724ee6005be4d9577ab215b48796fed236b92119a30346c323cf20abc9bb5d2eab827ab6d2c2febc6a2a8d3ec3db37c1d1d880cf5edd659c0bf3c75e806ab16218d9bf68bbd4a5f4a97b2302b1bf48cb4689deeafd03b68b8b495a0b658e9f70dda", 0xeb, 0x9}, {&(0x7f00000005c0)="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", 0xfd, 0x7}, {&(0x7f00000006c0)="b40c794f088e2f53f14ca6ed89096b2e47bf32462098", 0x16, 0x6}, {&(0x7f0000000700)="3fb8377404df9addc1390119066036f3a5b6b8e9adf25455c67b9f07e4d2ad13fd8ebb47", 0x24, 0x3}, {&(0x7f0000000740)="924073d7f734a1238af0f484ee57dfb54af903394cb7caa9f913dad4d638e1a6bf64d1b3324a731ef29591ebfb0dca37be02f3bf1e5beaefdcd6b1b0f774c0c17c505bacbee7d754c0906d2cde5c60a9169c4a82ebcaa2e35d8027d2a813c54da58230ecf54adaf483612d25d76e027df55a75d40211ddbff9f92e0cdacc7fb4de8bce1996a3581f984f", 0x8a}], 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x40021, &(0x7f0000000140)={[{@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_on='xino=on'}, {@index_off='index=off'}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000040)={0xb, 0x15d, 0xfa00, {0x0}}, 0x18) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="3893e0a9ba584dc3ec0b42514796d1731907677943195d077294c1905fb0fda4ffb2c8dc126184486e5518f0b41936f0303e711250390faae1ef761b2a2c155e04d7a590dced9cec1b829c040fdb39bca513846a8c9eb57e0b5937db3ed53628cfb0b99a5e27751f3e47a4e632569dc5ac30c6142b63400500772c62aef796b0791c595e0453727c") 05:23:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x13e, 0x68) [ 2530.333886] hub 4-0:1.0: hub_ext_port_status failed (err = -12) [ 2530.342324] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2530.361421] EXT4-fs (loop1): invalid first ino: 0 05:23:50 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:50 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x42) 05:23:50 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000074000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x13f, 0x68) [ 2530.542556] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 05:23:50 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/.ev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2530.588516] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2530.627646] EXT4-fs (loop1): invalid first ino: 0 05:23:50 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x43) [ 2530.790546] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2530.823971] EXT4-fs (loop1): invalid first ino: 0 05:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x140, 0x68) 05:23:51 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='//ev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:51 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c77657264691d707c11cc723d2e2f666c65b15c0000000000000000000200"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x1) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:51 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000094000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:51 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44) [ 2530.936778] binder: send failed reply for transaction 230, target dead [ 2531.014747] overlayfs: missing 'lowerdir' 05:23:51 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/.us/usb/00#/00#\x00', 0x202, 0x0) [ 2531.047074] binder: 32666:32667 ioctl c018620b 0 returned -14 05:23:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x141, 0x68) [ 2531.095854] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2531.104680] binder: release 32666:32673 transaction 232 out, still active [ 2531.112882] binder: undelivered TRANSACTION_COMPLETE [ 2531.118677] EXT4-fs (loop1): invalid first ino: 0 [ 2531.131345] overlayfs: missing 'lowerdir' 05:23:51 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x100, 0x0) fanotify_mark(r0, 0xc0, 0x8, r1, &(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2531.194563] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:51 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev//us/usb/00#/00#\x00', 0x202, 0x0) [ 2531.245969] EXT4-fs (loop1): invalid first ino: 0 05:23:51 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x45) 05:23:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x142, 0x68) 05:23:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:52 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/b.s/usb/00#/00#\x00', 0x202, 0x0) 05:23:52 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000a4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:52 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x103000) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file2\x00', 0x8, 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000240)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x143, 0x68) 05:23:52 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x46) [ 2531.838003] binder: send failed reply for transaction 232, target dead [ 2531.903482] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2531.936195] binder: 32721:32722 ioctl c018620b 0 returned -14 05:23:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x144, 0x68) 05:23:52 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/b/s/usb/00#/00#\x00', 0x202, 0x0) [ 2531.949703] EXT4-fs (loop1): invalid first ino: 0 05:23:52 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x47) [ 2531.982298] overlayfs: filesystem on './file0' not supported as upperdir [ 2531.995710] binder: release 32721:32725 transaction 234 out, still active [ 2532.004299] binder: undelivered TRANSACTION_COMPLETE [ 2532.030239] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2532.064955] EXT4-fs (loop1): invalid first ino: 0 05:23:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x145, 0x68) 05:23:52 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/.sb/00#/00#\x00', 0x202, 0x0) 05:23:52 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000170f4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2532.501318] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2532.521039] EXT4-fs (loop1): Invalid log cluster size: 385875969 [ 2532.589925] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2532.603291] EXT4-fs (loop1): Invalid log cluster size: 385875969 05:23:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:52 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./fi\t\x00\x00\x00workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040)=0x3, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0x120, 0x220, 0x220, 0x220, 0x120, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000080), {[{{@ip={@rand_addr=0x8001, @rand_addr=0x4, 0xff, 0xffffffff, 'vxcan1\x00', 'bridge0\x00', {}, {}, 0x5c, 0x3, 0x51}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@set={0x40, 'set\x00', 0x0, {{0xfffffffffffffffe, [0x1, 0x4, 0x0, 0x0, 0x20000000000000, 0xfffffffffffffc01], 0x3, 0x2}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x4, [0x2, 0x4, 0x5, 0x3, 0x100, 0x9], 0x5, 0x1b0}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3f, [0xf5, 0x4, 0x0, 0x4, 0x7, 0x1], 0x0, 0x101}, {0x4, [0x3f, 0x1, 0x7, 0x5, 0x5, 0x2], 0x0, 0x80000000}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:52 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x48) 05:23:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x146, 0x68) 05:23:52 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus//sb/00#/00#\x00', 0x202, 0x0) 05:23:52 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000004104000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2532.736137] binder: send failed reply for transaction 234, target dead [ 2532.816576] overlayfs: missing 'workdir' 05:23:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x147, 0x68) [ 2532.839342] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2532.847361] binder: 305:306 ioctl c018620b 0 returned -14 [ 2532.870729] binder: release 305:306 transaction 236 out, still active [ 2532.875735] EXT4-fs (loop1): Invalid log cluster size: 67108865 05:23:53 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/us./00#/00#\x00', 0x202, 0x0) 05:23:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x49) [ 2532.893391] binder: undelivered TRANSACTION_COMPLETE [ 2532.927073] overlayfs: missing 'workdir' 05:23:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2532.956093] binder: send failed reply for transaction 236, target dead 05:23:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x148, 0x68) 05:23:53 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2533.015212] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2533.067370] EXT4-fs (loop1): Invalid log cluster size: 67108865 [ 2533.082359] binder: 323:325 ioctl c018620b 0 returned -14 05:23:53 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/us//00#/00#\x00', 0x202, 0x0) 05:23:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4a) [ 2533.130829] binder: release 323:325 transaction 238 out, still active [ 2533.161011] binder: undelivered TRANSACTION_COMPLETE 05:23:53 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000f174000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x149, 0x68) 05:23:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2533.246524] binder: send failed reply for transaction 238, target dead 05:23:53 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/.0#/00#\x00', 0x202, 0x0) [ 2533.318807] overlayfs: filesystem on './file0' not supported as upperdir [ 2533.372061] binder: 346:347 ioctl c018620b 0 returned -14 [ 2533.406212] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x14a, 0x68) 05:23:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4b) [ 2533.417203] binder: release 346:347 transaction 240 out, still active [ 2533.430717] binder: undelivered TRANSACTION_COMPLETE 05:23:53 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x1dc) [ 2533.467485] EXT4-fs (loop1): Invalid log cluster size: 251658241 05:23:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:53 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb//0#/00#\x00', 0x202, 0x0) [ 2533.543667] binder: send failed reply for transaction 240, target dead [ 2533.589222] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x14b, 0x68) [ 2533.642014] EXT4-fs (loop1): Invalid log cluster size: 251658241 [ 2533.660993] binder: 369:370 ioctl c018620b 0 returned -14 05:23:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4c) 05:23:53 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/0.#/00#\x00', 0x202, 0x0) [ 2533.731019] binder: release 369:370 transaction 242 out, still active [ 2533.744721] binder: undelivered TRANSACTION_COMPLETE 05:23:54 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000001f4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2533.792531] overlayfs: filesystem on './file0' not supported as upperdir [ 2533.878950] binder: send failed reply for transaction 242, target dead 05:23:54 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/0/#/00#\x00', 0x202, 0x0) 05:23:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x14c, 0x68) 05:23:54 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto='xino=auto', 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:54 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x4d) [ 2533.954320] binder: 392:393 ioctl c018620b 0 returned -14 [ 2533.972848] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2534.007840] binder: release 392:393 transaction 244 out, still active [ 2534.018855] binder: undelivered TRANSACTION_COMPLETE [ 2534.045560] EXT4-fs (loop1): invalid first ino: 0 05:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2534.108607] binder: send failed reply for transaction 244, target dead 05:23:54 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/.0#\x00', 0x202, 0x0) 05:23:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x14d, 0x68) [ 2534.173527] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2534.220436] EXT4-fs (loop1): invalid first ino: 0 05:23:54 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4e) [ 2534.263207] overlayfs: unrecognized mount option "xino=auto\" or missing value [ 2534.264924] binder: 414:420 ioctl c018620b 0 returned -14 05:23:54 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000204000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x14e, 0x68) [ 2534.319581] binder: release 414:420 transaction 246 out, still active [ 2534.344552] binder: undelivered TRANSACTION_COMPLETE [ 2534.360181] overlayfs: unrecognized mount option "xino=auto\" or missing value 05:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2534.386695] binder: send failed reply for transaction 246, target dead 05:23:54 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:54 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#//0#\x00', 0x202, 0x0) [ 2534.472162] binder: 433:435 ioctl c018620b 0 returned -14 [ 2534.502487] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x14f, 0x68) 05:23:54 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4f) [ 2534.520161] binder: release 433:440 transaction 248 out, still active [ 2534.526801] binder: undelivered TRANSACTION_COMPLETE [ 2534.546154] EXT4-fs (loop1): invalid first ino: 0 05:23:54 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/0.#\x00', 0x202, 0x0) [ 2534.607115] binder: send failed reply for transaction 248, target dead [ 2534.616517] overlayfs: filesystem on './file0' not supported as upperdir 05:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2534.660960] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2534.723786] EXT4-fs (loop1): invalid first ino: 0 05:23:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:55 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/0/#\x00', 0x202, 0x0) [ 2534.759158] binder: 456:461 ioctl c018620b 0 returned -14 05:23:55 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000224000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x150, 0x68) [ 2534.846203] binder: send failed reply for transaction 250 to 456:464 [ 2534.852995] binder: undelivered TRANSACTION_COMPLETE [ 2534.858112] binder: undelivered TRANSACTION_ERROR: 29189 05:23:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x50) 05:23:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:55 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x02', 0x202, 0x0) 05:23:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x151, 0x68) [ 2535.011172] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2535.018674] EXT4-fs (loop1): invalid first ino: 0 [ 2535.043092] binder: 480:486 ioctl c018620b 0 returned -14 05:23:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x51) 05:23:55 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x03', 0x202, 0x0) [ 2535.100182] binder: send failed reply for transaction 252 to 480:487 [ 2535.107051] binder: undelivered TRANSACTION_COMPLETE [ 2535.114307] binder: undelivered TRANSACTION_ERROR: 29189 [ 2535.124232] overlayfs: filesystem on './file0' not supported as upperdir [ 2535.159458] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2535.188528] EXT4-fs (loop1): invalid first ino: 0 05:23:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a87932573"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070657264696469723d2e2f66696c65302c776f72eb6469723d2e2f666d6c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x52) 05:23:55 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000234000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x152, 0x68) 05:23:55 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x04', 0x202, 0x0) [ 2535.352544] binder: 505:506 ioctl c018620b 0 returned -14 [ 2535.466838] binder: send failed reply for transaction 254 to 505:520 [ 2535.473721] binder: undelivered TRANSACTION_COMPLETE [ 2535.479882] binder: undelivered TRANSACTION_ERROR: 29189 05:23:55 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\a', 0x202, 0x0) 05:23:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x153, 0x68) [ 2535.511848] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2535.525514] overlayfs: unrecognized mount option "upperdidir=./file0" or missing value 05:23:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x53) [ 2535.569503] EXT4-fs (loop1): invalid first ino: 0 05:23:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a87932573"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2535.642282] overlayfs: unrecognized mount option "upperdidir=./file0" or missing value [ 2535.677890] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x154, 0x68) 05:23:55 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\xe0', 0x202, 0x0) 05:23:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x54) 05:23:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2535.722884] EXT4-fs (loop1): invalid first ino: 0 [ 2535.728290] binder: 540:541 ioctl c018620b 0 returned -14 05:23:56 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000002c4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2535.792152] binder: release 540:543 transaction 256 out, still active [ 2535.799189] binder: undelivered TRANSACTION_COMPLETE [ 2535.804386] binder: send failed reply for transaction 256, target dead 05:23:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a87932573"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:56 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x155, 0x68) [ 2535.953662] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x55) [ 2536.015646] EXT4-fs (loop1): invalid first ino: 0 [ 2536.065549] overlayfs: filesystem on './file0' not supported as upperdir [ 2536.110957] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2536.133394] binder: 571:572 ioctl c018620b 0 returned -14 05:23:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x156, 0x68) [ 2536.165876] EXT4-fs (loop1): invalid first ino: 0 05:23:56 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2536.209706] binder: send failed reply for transaction 258 to 571:580 [ 2536.216347] binder: undelivered TRANSACTION_COMPLETE [ 2536.232324] binder: undelivered TRANSACTION_ERROR: 29189 05:23:56 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000002d4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:56 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x56) 05:23:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f4"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x157, 0x68) [ 2536.418375] binder: 590:596 ioctl c018620b 0 returned -14 [ 2536.434901] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:56 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2536.472690] EXT4-fs (loop1): invalid first ino: 0 [ 2536.503942] binder: send failed reply for transaction 260 to 590:605 [ 2536.510874] binder: undelivered TRANSACTION_COMPLETE [ 2536.516134] binder: undelivered TRANSACTION_ERROR: 29189 05:23:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x158, 0x68) 05:23:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f4"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:56 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000003f4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x57) 05:23:56 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)='upperdir', 0x8, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000240)='bfs\x00', &(0x7f0000000280)='./bus\x00', 0x2, 0x5, &(0x7f0000000600)=[{&(0x7f00000002c0)="294a75ca10015e51a23778df5abdc65e558df79b3d523e03f87037b5df7dcced0f1d32ed25cf72f867d37229407856a504985c290c1e4e01d66f192fda2d20d0d93089be1d728ba44ac85f1e6dd064117795f6effedfd7f724dc0619796ba614c52cce7543d7de94a0846bdab189f2", 0x6f, 0x8}, {&(0x7f0000000340)="3a5dc50faae458cf3436acbef21b0485b74e638c149a6e0a0d872f221a9b6a76d7d5e8e4659bad1ee16d417cdfda6a58ddaa73a6ca1bebd3d0a21a2385b34e1324efe43846bd3500bdcaa75c9a4151d1cd031db3a7704285b3ded5aea6cd32277cb938ed0a1d6c110c11e5cf22709986619f8294eb8f874c9cc2fb7ff4c519078097edbe819fd5f9a422404a592bee561e27b87366e34078e71c6e48d5352f2c3c47ab2306d38625df1d647a73e3", 0xae}, {&(0x7f0000000400), 0x0, 0x100}, {&(0x7f0000000440)="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", 0xfe, 0x2}, {&(0x7f0000000540)="7caa4cd0e936d605bcc35a71d52bb552a12a2b4c87ff205c11c64a7f2f8f77a1d3aa7b6f8b69f906be0a26f09a8918f7b10e99a914b8ac213f406fc94f280fb024c7a29f7a0829b062930458b3eca434fe9aee32292f2d15e2bdf839b1f43d22fbc6cf25e2f517eda4e0bcc9569f994d22ee5cd277f0e9022aad60c45f789648c20e75a1228c70032a90a8d09f4951afe0f54479191d9d4e5770b6f085708acc8f007647caa592", 0xa7, 0x1}], 0x4, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:56 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2536.722837] binder: 615:620 ioctl c018620b 0 returned -14 05:23:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x159, 0x68) [ 2536.808882] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2536.817463] binder: send failed reply for transaction 262 to 615:632 [ 2536.824215] binder: undelivered TRANSACTION_COMPLETE [ 2536.829591] binder: undelivered TRANSACTION_ERROR: 29189 [ 2536.849233] EXT4-fs (loop1): invalid first ino: 0 05:23:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x58) 05:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f4"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:57 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#k', 0x202, 0x0) 05:23:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x15a, 0x68) [ 2536.957759] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=4caa7c3a) [ 2536.967902] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2537.023453] EXT4-fs (loop1): invalid first ino: 0 05:23:57 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000404000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2537.072756] binder: 649:650 ioctl c018620b 0 returned -14 05:23:57 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x15b, 0x68) 05:23:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x59) [ 2537.137293] overlayfs: filesystem on './file0' not supported as upperdir [ 2537.144022] binder: release 649:656 transaction 264 out, still active [ 2537.153252] binder: send failed reply for transaction 264, target dead [ 2537.164713] binder: undelivered TRANSACTION_COMPLETE [ 2537.241656] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503ca"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2537.299111] EXT4-fs (loop1): invalid first ino: 0 05:23:57 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x401, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r1, 0x80000, r2}) fcntl$setlease(r0, 0x400, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {0x0}, {&(0x7f0000005b00)=""/119, 0x77}, {0x0}], 0x5, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{0x0}, {&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x3, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r5 = accept$alg(r3, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000340)=0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="04002dbd7000fddbdf250a0000001c000500040002000c000200080001001d00000008000100756470006c00040014000700080001000000000008000300010000800c00010073797a30000000001400010062726f6164636173742d6c696e6b000034000700080001000e0000000800040001000000080003007600000008000100170000000800030000000000080001001500000020000700080002000800000008000100090000000c0004000000000000001c0010000700"], 0x1}, 0x1, 0x0, 0x0, 0x4008844}, 0x20000011) accept(r2, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x80) recvmmsg(r5, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000300)={0x7f, 0xffff, 0xfffffffffffffff8, 0xec, &(0x7f0000000200)=""/236, 0x22, &(0x7f0000000100)=""/34, 0x6b, &(0x7f0000000140)=""/107}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7509000000000000002e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c007682793066f4644ed454e6ef856793bfb5e363644e8353e3db5f82d74529fb9b30a7b7b9cecb6ed03dfc338d8ce3a679207767fd8878c443f15e94ac55279acf4d8dd2584c4a68e47138a2f55ae24b919aded33e2f35eb476e9bbe8fec7dd6edb60e8f2b8f3a58e032be903853caf90b1d40c427bb9a605661f8f8d7225db9c8d06e1db2db431641e2850f9af2ebfc28edaa1ea421b544d80f696ff5ea1f6eae8887fdf2d833f00418"]) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={0x0, @bcast, @netrom={'nr', 0x0}, 0x40, 'syz1\x00', @default, 0x1, 0x7, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @bcast]}) ioctl$KVM_NMI(r7, 0xae9a) 05:23:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x15c, 0x68) [ 2537.378916] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2537.383268] binder: 677:678 ioctl c018620b 0 returned -14 [ 2537.419620] EXT4-fs (loop1): invalid first ino: 0 05:23:57 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2537.443461] binder: send failed reply for transaction 266 to 677:681 [ 2537.450597] binder: undelivered TRANSACTION_COMPLETE [ 2537.455722] binder: undelivered TRANSACTION_ERROR: 29189 05:23:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x5a) 05:23:57 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000484000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503ca"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x15d, 0x68) 05:23:57 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2537.762216] binder: 701:702 ioctl c018620b 0 returned -14 05:23:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x5b) [ 2537.815609] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2537.851492] EXT4-fs (loop1): invalid first ino: 0 05:23:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x15e, 0x68) 05:23:58 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2537.874752] binder: release 701:713 transaction 268 out, still active [ 2537.881651] binder: send failed reply for transaction 268, target dead 05:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503ca"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2537.947485] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2537.990550] EXT4-fs (loop1): invalid first ino: 0 [ 2538.092436] binder: 722:726 ioctl c018620b 0 returned -14 [ 2538.173892] binder: send failed reply for transaction 270 to 722:730 [ 2538.180755] binder: undelivered TRANSACTION_ERROR: 29189 05:23:58 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000004c4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:23:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x5c) 05:23:58 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x15f, 0x68) 05:23:58 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() tkill(r1, 0x1000000000016) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="757070657264697217c9f454163d2e2f66296c65302c6c6f77657264050000002f66696c65302c776f726b6469723d2e2f66698267a6f8b818c340337834aa62ea3b36b8891a19a8de501f3219a3ba5441ab0be2a8c114f469c0962cc79ae390aea6de050e369f440b781ad4f9f0c8fc2f519b8de94a0aec30eee6d2e1c616938b8f79b4b7975a4ccd6f895b45b943aedb34c70d823e1526"]) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x46, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:23:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x160, 0x68) 05:23:58 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x80', 0x202, 0x0) [ 2538.446995] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2538.450676] binder: 741:742 ioctl c018620b 0 returned -14 [ 2538.484455] EXT4-fs (loop1): invalid first ino: 0 05:23:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x5d) [ 2538.555058] binder: release 741:755 transaction 272 out, still active [ 2538.583247] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2538.591359] overlayfs: unrecognized mount option "upperdirT=./f)le0" or missing value 05:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x46, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2538.656000] EXT4-fs (loop1): invalid first ino: 0 [ 2538.661587] binder: send failed reply for transaction 272, target dead 05:23:58 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x161, 0x68) 05:23:59 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000604000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2538.798630] overlayfs: unrecognized mount option "upperdirT=./f)le0" or missing value [ 2538.813670] binder: 769:772 ioctl c018620b 0 returned -14 05:23:59 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:23:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x5e) [ 2538.892071] binder: release 769:780 transaction 274 out, still active [ 2538.899543] binder: send failed reply for transaction 274, target dead 05:23:59 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="931c626d93dd69f984f84c1800") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f627573fe4a776f726b6469722023202f73656c696e75782f6d6c73000a629a069601a9763b9fe1677e"], 0x2d) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) fchdir(r0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000280)={0xb, 0x16d, 0xfa00, {0x0}}, 0x18) poll(&(0x7f00000000c0)=[{r2, 0x80}, {r1, 0x9100}, {r2, 0x10}, {r1, 0x8060}, {r2, 0x20c0}], 0x5, 0x100010000000) 05:23:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x162, 0x68) [ 2538.982613] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2539.034908] EXT4-fs (loop1): invalid first ino: 0 05:23:59 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\v', 0x202, 0x0) 05:23:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x46, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2539.117090] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2539.133864] EXT4-fs (loop1): invalid first ino: 0 05:23:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x163, 0x68) [ 2539.158697] overlayfs: filesystem on './file0' not supported as upperdir 05:23:59 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7f, 0x80000) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000240)=0xd000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6deb9cb7726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f728c6469723d2e2f66696c65315c00e1b606fb463e92b3ff033a3bcf4189d5dbaac98685a71dc13b307b853a1fb52d45e21a59c88885a644047629970f90b6f5747c635e96aad988a2"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @bcast, @netrom={'nr', 0x0}, 0x3, [@default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 05:23:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x5f) 05:23:59 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000684000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2539.216390] binder: 803:804 ioctl c018620b 0 returned -14 05:23:59 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2539.311282] binder: send failed reply for transaction 276 to 803:811 [ 2539.322599] binder: undelivered TRANSACTION_ERROR: 29189 05:23:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x47, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2539.426555] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:23:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x164, 0x68) [ 2539.469287] overlayfs: unrecognized mount option "m뜷rdir=./file0" or missing value [ 2539.487021] EXT4-fs (loop1): invalid first ino: 0 05:23:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x60) 05:23:59 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\xff', 0x202, 0x0) [ 2539.557857] overlayfs: unrecognized mount option "m뜷rdir=./file0" or missing value [ 2539.569132] binder: 829:830 ioctl c018620b 0 returned -14 [ 2539.619317] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2539.654637] binder: send failed reply for transaction 278 to 829:842 [ 2539.661543] binder_release_work: 5 callbacks suppressed 05:23:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x165, 0x68) [ 2539.661549] binder: undelivered TRANSACTION_COMPLETE [ 2539.672224] EXT4-fs (loop1): invalid first ino: 0 [ 2539.686796] binder: undelivered TRANSACTION_ERROR: 29189 05:23:59 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\xff', 0x202, 0x0) 05:23:59 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000006c4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:00 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x8101, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x61) 05:24:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x47, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x166, 0x68) [ 2539.954190] binder: 863:864 ioctl c018620b 0 returned -14 05:24:00 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x7f', 0x202, 0x0) [ 2540.011912] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2540.031246] EXT4-fs (loop1): invalid first ino: 0 [ 2540.036960] binder: send failed reply for transaction 280 to 863:871 [ 2540.043790] binder: undelivered TRANSACTION_COMPLETE [ 2540.058991] binder: undelivered TRANSACTION_ERROR: 29189 05:24:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x167, 0x68) 05:24:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x62) 05:24:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x47, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:00 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\xf3', 0x202, 0x0) [ 2540.119930] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2540.159390] EXT4-fs (loop1): invalid first ino: 0 05:24:00 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x0, 0x7}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x168, 0x68) 05:24:00 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000744000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2540.318361] binder: 892:894 ioctl c018620b 0 returned -14 05:24:00 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\xf6', 0x202, 0x0) 05:24:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x63) [ 2540.436093] binder: send failed reply for transaction 282 to 892:902 [ 2540.443861] binder: undelivered TRANSACTION_COMPLETE [ 2540.487356] binder: undelivered TRANSACTION_ERROR: 29189 05:24:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x169, 0x68) 05:24:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:00 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2540.543067] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2540.559843] overlayfs: filesystem on './file0' not supported as upperdir [ 2540.569485] EXT4-fs (loop1): invalid first ino: 0 05:24:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x64) 05:24:00 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="755b7065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6473d23d54a256a40865315c0026e440c36000eb8ccca6e13f3a6088ccf23cb4d058ab5bdd535b2d1985c9ac54c74aaa4d253f8d1f125e9c6dc01e9e5967a7675ba4e813d7e2e0231c07dccef52c2e9afb3f68c13d3d15a45926cba50590d557cf3f929ea9206cf2c78dd034e6d3f2430ccaee6a1aac68570fbed4fc5406971ce4a3c3986d35e80898362783c56c1cab737bcd2233c287ce5dd61fdca52778e86185ad44133b06b21e6c1dbd0c8f00808d4413339c"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in={{0x2, 0x4e22, @local}}, 0x7, 0x3, 0x1, 0x1000, 0x38}, 0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x3, 0x0, 0x4, 0x80000000, 0x7, 0x8, 0x7, 0x1d90, r1}, 0x20) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x10000, 0x40) fchdir(r0) getsockname$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141242, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="bfd1985458965e14cb945908860e933b0d50303b1ae53eaed37b") setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000140)={@local}, 0x7) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2540.668821] binder: 918:920 ioctl c018620b 0 returned -14 05:24:00 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000007a4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2540.725217] binder: 918:920 transaction failed 29189/-22, size 0-0 line 2896 05:24:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x16a, 0x68) [ 2540.781129] binder: undelivered TRANSACTION_ERROR: 29189 05:24:01 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2540.864883] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x65) [ 2540.928585] overlayfs: unrecognized mount option "u[perdir=./file0" or missing value [ 2540.931446] EXT4-fs (loop1): invalid first ino: 0 05:24:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x16b, 0x68) 05:24:01 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2541.011251] binder: 945:947 ioctl c018620b 0 returned -14 [ 2541.061581] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2541.072616] overlayfs: unrecognized mount option "u[perdir=./file0" or missing value [ 2541.098981] EXT4-fs (loop1): invalid first ino: 0 [ 2541.104631] binder: 945:955 transaction failed 29189/-22, size 0-0 line 2896 05:24:01 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000880)=""/4096, 0x1000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469623d2e2f62696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00fb1aba552d0ee6f92e30610540858d489cc7b7fd22007a24ba57f928d073c2d69c19174b1fec4680ba5d1700000000"]) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7175, 0x8000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/30) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/151) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, r3}}, 0x18) 05:24:01 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2541.153507] binder: undelivered TRANSACTION_ERROR: 29189 05:24:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x16c, 0x68) 05:24:01 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000fc4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x66) [ 2541.298952] overlayfs: unrecognized mount option "upperdib=./bile0" or missing value 05:24:01 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x16d, 0x68) [ 2541.384562] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2541.401361] EXT4-fs (loop1): invalid first ino: 0 [ 2541.411096] overlayfs: unrecognized mount option "upperdib=./bile0" or missing value 05:24:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x67) 05:24:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:02 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x81, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="eafffffff086ae9cee7bc5a3f830945d68e9ec8845725bfc8222759165570f68622669ceeb37216d74992ca305be3a22928599c1e5f50fb5781d1e33e872c026c60bc280ae17e93e42e3a59b099a19f388cd447185ade430bda6da434263b85c701a2ce1e79cdcad0fa56a327901d75656e56824cdda2eba2adc704b65448cafca3c2ca620fa3be59dff82759d668c3b300c45a2c30be1811b9c805600"], &(0x7f0000000240)=0x2) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:02 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000fff4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:02 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x16e, 0x68) 05:24:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x68) 05:24:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x16f, 0x68) [ 2541.914120] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2541.952882] binder: 1015:1017 ioctl c018620b 0 returned -14 05:24:02 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2541.974081] overlayfs: filesystem on './file0' not supported as upperdir [ 2541.993556] EXT4-fs (loop1): Invalid log cluster size: 251658241 05:24:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x69) 05:24:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x170, 0x68) 05:24:02 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) [ 2542.031216] binder: 1015:1026 transaction failed 29189/-22, size 0-0 line 2896 [ 2542.050967] binder: undelivered TRANSACTION_ERROR: 29189 05:24:02 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2542.152300] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2542.206894] EXT4-fs (loop1): Invalid log cluster size: 251658241 [ 2542.356431] overlayfs: filesystem on './file0' not supported as upperdir 05:24:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x171, 0x68) 05:24:02 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:02 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000040000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6a) 05:24:02 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x20) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0xa6, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2542.770073] overlayfs: failed to resolve './file1': -2 [ 2542.776774] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x172, 0x68) 05:24:03 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2542.814437] binder: 1068:1075 ioctl c018620b 0 returned -14 [ 2542.833484] overlayfs: failed to resolve './file1': -2 [ 2542.838448] EXT4-fs (loop1): invalid first ino: 0 05:24:03 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) write$selinux_create(r0, &(0x7f0000000240)=@access={'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, '/usr/sbin/ntpd'}, 0x4f) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:03 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6b) [ 2542.946662] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2542.989549] EXT4-fs (loop1): invalid first ino: 0 05:24:03 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x173, 0x68) [ 2543.053611] overlayfs: filesystem on './file0' not supported as upperdir 05:24:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:03 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000000900000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:03 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:03 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6c) 05:24:03 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='unperdir=./file0,lowerdir=./file0,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x174, 0x68) [ 2543.681783] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2543.714554] binder: 1121:1122 ioctl c018620b 0 returned -14 [ 2543.718563] overlayfs: unrecognized mount option "unperdir=./file0" or missing value 05:24:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x175, 0x68) 05:24:03 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2543.727444] EXT4-fs (loop1): invalid first ino: 0 05:24:04 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6d) [ 2543.788387] overlayfs: unrecognized mount option "unperdir=./file0" or missing value [ 2543.811069] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2543.828990] EXT4-fs (loop1): invalid first ino: 0 05:24:04 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000240)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffe) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x176, 0x68) 05:24:04 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000002500000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2544.009308] overlayfs: missing 'lowerdir' [ 2544.037610] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2544.059043] EXT4-fs (loop1): invalid first ino: 0 [ 2544.069991] overlayfs: missing 'lowerdir' [ 2544.122557] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2544.171752] EXT4-fs (loop1): invalid first ino: 0 05:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:04 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) 05:24:04 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6e) 05:24:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x177, 0x68) 05:24:04 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x20, 0x9, 0x4, 0x5}, 0x8) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt(r0, 0x9b5, 0x5400, &(0x7f0000000240)="23dee5b18ff6e8f4db5407c41567ff5f882c14e9f0c51b17ebf2fcd114275e9b59422de1c3bdda852fee18dca9781aa6170a989fd5b7f4fccb476b1d8c2c2ddfb2c956b7d7a29ffc738a803b5619087afb6cbc72d47f371aca40879ff6839ab041729a11be91957aafcb72115f6cf89a7f474507c5b478a2760a3202a6a30bf89554ba618793d59937765c75d25442987f99f4df5ba9a106019aa7fcf770fe772ebd749c2d1baf75e12d812ba52bddb5344c6809b16317360e93d4b611c8f6a5857740904575bda7117131ec51091fa33c2bb3087a1b006ded1a55c53db11b6c51b5259f53c1b0db6da2c239b3a54ad324ae7dab9dbecb2caa", 0xf9) 05:24:04 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000003f00000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x178, 0x68) 05:24:04 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x204, 0x0) [ 2544.576407] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2544.609321] binder: 1179:1180 ioctl c018620b 0 returned -14 [ 2544.617983] EXT4-fs (loop1): invalid first ino: 0 05:24:04 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x6f) [ 2544.690534] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2544.728953] EXT4-fs (loop1): invalid first ino: 0 05:24:05 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e21, @local}}) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:05 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000024000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:05 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x207, 0x0) [ 2544.944682] overlayfs: failed to resolve './file1': -2 [ 2544.952816] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2544.986806] overlayfs: failed to resolve './file1': -2 [ 2544.998860] EXT4-fs (loop1): invalid first ino: 0 [ 2545.055676] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2545.070712] EXT4-fs (loop1): invalid first ino: 0 05:24:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x179, 0x68) 05:24:05 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x208, 0x0) 05:24:05 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x70) 05:24:05 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bridge_slave_0\x00', 0x100000001}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:05 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000034000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:05 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x2) 05:24:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x17a, 0x68) [ 2545.424195] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2545.432310] EXT4-fs (loop1): invalid first ino: 0 [ 2545.444077] binder: 1226:1234 ioctl c018620b 0 returned -14 [ 2545.526348] binder: 1226:1239 ioctl c0306201 0 returned -14 [ 2545.540989] overlayfs: filesystem on './file0' not supported as upperdir [ 2545.565645] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:05 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x71) 05:24:05 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x3) [ 2545.616619] EXT4-fs (loop1): invalid first ino: 0 05:24:05 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@reserved}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:05 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000044000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2545.844283] overlayfs: unrecognized mount option "0xffffffffffffffff" or missing value [ 2545.859602] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2545.878783] EXT4-fs (loop1): invalid first ino: 0 [ 2545.907981] overlayfs: unrecognized mount option "0xffffffffffffffff" or missing value [ 2545.933026] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2545.958480] EXT4-fs (loop1): invalid first ino: 0 05:24:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x17b, 0x68) 05:24:06 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x4) 05:24:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x72) 05:24:06 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x3a9b0ee6dfd4eac4) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000040)='./bus\x00', 0x101040, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000500)=0x7f, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x2, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto='xino=auto'}], [{@pcr={'pcr', 0x3d, 0x6}}, {@euid_gt={'euid>', r2}}]}) 05:24:06 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000054000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2546.312004] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2546.345502] binder: 1284:1287 ioctl c018620b 0 returned -14 05:24:06 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x7) 05:24:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x17c, 0x68) [ 2546.359559] audit: type=1804 audit(1546752246.568:187): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir917691117/syzkaller.LIAYMz/1111/file0/bus" dev="sda1" ino=16898 res=1 [ 2546.367114] EXT4-fs (loop1): invalid first ino: 0 [ 2546.414286] binder: 1284:1293 ioctl c0306201 0 returned -14 05:24:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x73) [ 2546.459279] audit: type=1804 audit(1546752246.638:188): pid=1295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir917691117/syzkaller.LIAYMz/1111/file0/file0/bus" dev="sda1" ino=16566 res=1 [ 2546.488519] overlayfs: failed to resolve './file0': -2 [ 2546.512532] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2546.544290] EXT4-fs (loop1): invalid first ino: 0 05:24:06 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000064000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:06 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xe0) 05:24:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x17d, 0x68) [ 2546.739923] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2546.749723] EXT4-fs (loop1): invalid first ino: 0 [ 2546.845336] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2546.864127] EXT4-fs (loop1): invalid first ino: 0 05:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:07 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = geteuid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x1900) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:07 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x74) 05:24:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x17e, 0x68) 05:24:07 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x300) 05:24:07 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000074000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:07 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x700) 05:24:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x17f, 0x68) [ 2547.228957] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2547.247163] binder: 1342:1343 ioctl c018620b 0 returned -14 [ 2547.257967] EXT4-fs (loop1): invalid first ino: 0 [ 2547.293108] overlayfs: filesystem on './file0' not supported as upperdir [ 2547.308059] binder: 1342:1343 ioctl c0306201 0 returned -14 05:24:07 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x75) [ 2547.334587] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2547.364034] EXT4-fs (loop1): invalid first ino: 0 05:24:07 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000084000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:07 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdib=./file0,lowerdir=./file0,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x180, 0x68) 05:24:07 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x3f00) [ 2547.575747] binder: 1361:1368 ioctl c018620b 0 returned -14 [ 2547.589050] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2547.638164] EXT4-fs (loop1): invalid first ino: 0 05:24:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x181, 0x68) 05:24:07 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x76) 05:24:07 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xe000) [ 2547.731167] overlayfs: unrecognized mount option "upperdib=./file0" or missing value 05:24:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:08 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000094000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2547.816634] overlayfs: unrecognized mount option "upperdib=./file0" or missing value 05:24:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x182, 0x68) 05:24:08 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x6b6b6b) [ 2547.890672] binder: 1392:1393 ioctl c018620b 0 returned -14 [ 2547.958427] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2547.989602] EXT4-fs (loop1): invalid first ino: 0 05:24:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x77) 05:24:08 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065723f0000002e2f66696c65302c6c6f7765726469723d012f66696c6bc1293a6f726b6469723d2e2f66696c65315c0059110b56e0187a943ad1f34e3be12cfe2ca0e5f66cdf6668c414ddee7b31746dda5b444f815523684190051d39c8ba8a25f09faaa4ad5d35b5d5d064cc25212b121d7c2230009de4a53bb8b380fcbb0c954b139ed6642b712a6bb1d1b8f764172b5b2f34dac6f98c3eb884d1616b0c1fdcdfddf96364242e7747c9e99b4a61f458b5b5c756901c4c7e5853c8a874be024d18cbde5ef48c87e425052997a14dd6a4c7a4f98d8e3a89ac20b3cf5b8af38b5023ac84ca9dabad67d6329bf559ac53524a71ca910997314b0a22a22dd165f1747cf5387cd8fd91fd016a5031947659e15ccbfeaf47a364be297d7be2396566aca115256e0e05292784ffdca7538f578a1e4ddfe79d2e33f5007290ad550354e476784470fea449aee23b27a0432ef51decd7ebc80432877f57392e65ba02e3fbcda038334e9e53edba4031f05a64387ceb60796a39e1e0f3e95f841058834c04a6db469384ecb184787fc9d3c578ce023f2211545c1d15cf1dc83766194cfbc29968825aa34416a313d1eae5b4eee4b6a0a51e2eb771f662de9a7ecca7242edec29c39e47ab09ef96aac"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0x43, "0c70bf6e82cd532205804bf480727c6d1f70d659deb9ccb35f3f7a5408eeb93f6782d3b5cad73b60bae5895661d25ce659983bdad997ea181968ba0036023d3595d34a"}) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:08 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1000000) 05:24:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x183, 0x68) [ 2548.082256] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2548.166935] EXT4-fs (loop1): invalid first ino: 0 [ 2548.170596] binder: 1418:1420 ioctl c018620b 0 returned -14 [ 2548.206007] overlayfs: unrecognized mount option "upper?" or missing value 05:24:08 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000a4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:08 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x2000000) 05:24:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x184, 0x68) [ 2548.293987] overlayfs: unrecognized mount option "upper?" or missing value 05:24:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x78) [ 2548.387639] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:08 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./bus\x00', 0x820, 0x41) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2548.427986] EXT4-fs (loop1): invalid first ino: 0 05:24:08 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x3000000) 05:24:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x185, 0x68) [ 2548.534657] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2548.596280] EXT4-fs (loop1): invalid first ino: 0 05:24:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x79) 05:24:08 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x4000000) [ 2548.650357] overlayfs: filesystem on './file0' not supported as upperdir [ 2548.673636] audit: type=1804 audit(1546752248.878:189): pid=1457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir917691117/syzkaller.LIAYMz/1115/bus" dev="sda1" ino=16802 res=1 [ 2548.704629] audit: type=1804 audit(1546752248.908:190): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir917691117/syzkaller.LIAYMz/1115/bus" dev="sda1" ino=16802 res=1 05:24:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x186, 0x68) 05:24:09 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000224000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:09 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x400000001, 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x7}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:09 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x7000000) 05:24:09 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x7a) [ 2549.042792] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2549.076229] EXT4-fs (loop1): invalid first ino: 0 05:24:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x187, 0x68) 05:24:09 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xbd00180) 05:24:09 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000240)='@+vboxnet1GPL\x00', &(0x7f0000000280)='workdir', &(0x7f00000002c0)='user\xb9vboxnet1vboxnet0*)\x00', &(0x7f0000000300)='workdir'], &(0x7f0000000400)=[&(0x7f0000000380)='overlay\x00', &(0x7f00000003c0)='workdir']) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x40820, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}], [{@subj_role={'subj_role', 0x3d, 'user\xb9vboxnet1vboxnet0*)\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@pcr={'pcr', 0x3d, 0x21}}, {@subj_role={'subj_role', 0x3d, 'user\xb9vboxnet1vboxnet0*)\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xd8!]selinux'}}, {@fsname={'fsname', 0x3d, 'GPLloppp1'}}, {@euid_lt={'euid<', r3}}]}}) [ 2549.094952] binder: 1497:1498 ioctl c018620b 0 returned -14 [ 2549.167099] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:09 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7b) [ 2549.213307] EXT4-fs (loop1): invalid first ino: 0 05:24:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x188, 0x68) 05:24:09 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x3f000000) [ 2549.317363] overlayfs: filesystem on './file0' not supported as upperdir 05:24:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:10 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000234000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:10 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on', 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x80) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:10 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x6b6b6b00) 05:24:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x189, 0x68) 05:24:10 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7c) 05:24:10 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x8001d00b) [ 2549.941825] overlayfs: unrecognized mount option "nfs_export=on\" or missing value [ 2549.957983] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2549.978139] binder: 1547:1548 ioctl c018620b 0 returned -14 05:24:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x18a, 0x68) [ 2550.009605] overlayfs: unrecognized mount option "nfs_export=on\" or missing value [ 2550.022598] EXT4-fs (loop1): invalid first ino: 0 05:24:10 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7d) 05:24:10 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xe0000000) [ 2550.101893] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2550.127952] EXT4-fs (loop1): invalid first ino: 0 05:24:10 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2b2f66696c65302c776f726b6469723d2e2f66696c65315c00e0e4c1f18d45f98f43"]) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xf05, 0x20000) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="fe6403f1acb820ff6c9d2b05eee155979756", 0x12}, {&(0x7f00000004c0)="7ebc798842102c58e17d3b97d12098384424e63b152dfcd689d0b674ed65db2e08883722336bbbc3535c95439fa9c98f1841593304295846494387b77915062474158bda89c10fd6244755f0f78e2c400f546a9f16da0c01bcd99fe282f585c83c06c9390fd2f0b516973d2dc0a9e72c64a3dfea3182ed64450eaaa5577c06be1f821cb56d2b0b63a3b2ffa872a25a3e79aef64698a52f3a9dc7a4b8a05e3862d8be002437aa339f1b9d64a24bef307d21e86b3071", 0xb5}, {&(0x7f0000000580)="2548b325760381ce81bf91fbdb3422", 0xf}, {&(0x7f00000005c0)="e8b4a68ae3b9eefc72405206ecacdbcf8b2d7bca99a0d24e524d00876cf2eae51f4ae189d53f3985ea95075087c0996f7f7f10f7321cf42ced24c0c8c5496cc43d4e1942951c92a66cb53aff2321a11c3ceaf5bb85c70dbe884eca0406ecc529b563392fd615f9bfbb380e4614dde8988132b179ad20b7497eca5468b54b0b84b2410bf2b9e906133e839e27a3570e7ee3e0b5e64d780fe12643749a6fa67144b92f7a3ff12c52bd985564b7788aa93b8f2fab4b331ae6de35f2cba8c93e0aa79f19cb05a223e6adc7dedad6f5677571208eb2625cbf09a9a6", 0xd9}, {&(0x7f00000006c0)="ff9857eeb7c41bdff555f2767cb798467bb888f90579582f6bf09f2ef88a44a8c56b4a4a3bb8f147bc5e6c40b8119803f5309619e44f025403ff7a23d3b9", 0x3e}, {&(0x7f0000000700)="f880cf8540038e368a44e7afa9e6173f0b7bb82c85a59b23bde5d90c63ccb89870f2dec44f9cbf82ccf4cbae64798f4fe927f0d31e32db3322628c36af307c67989c3c9b3fa6c4635878af8b0ebbd83ed35d264608306d47a02d7d44a39838d41207fb96e636a3256641b6b61bf65a5696a0a21b0855f7a837a67f9c8193ca7f85d44915b5004d1e929cf6", 0x8b}, {&(0x7f00000007c0)="7071f97728b9a694566ef9b58ae0ccc11f7acbe73f7e2fd975db4b5b3f12391c23ee1381915e192ed2291738728851a0eaac1aafcb61181ddea36c137448bcc1673fbc72f6d13ab9a0a8325cbbaf8b8a88fc914fc527c6223f5bd0947f182a0c320c0b79f4f09335f706dbe089f6263ca4", 0x71}, {&(0x7f0000000880)="96c257f25d927dae70696c5f044a29c02488259f3bf00e48450be75319b65ba8e05a7775d61945a5510a7d0049c8bdb9a5033b521d8e048b86c68a989bb197c30fa57aa91695221fd5cd89b51c2942682869160a3f6536a7cbfd8b9627cb29b97c70279105ad802617134bf41ff86e81877aa6dd69c019922edb76e4bca3c35bdef1354bea143add1335d680b7ec20a211340a7086142b502445e740775d36232d8cf2d66b6c67b971c2ee12d5fc6263697230a886969294da0a66a2d16ffa9834d3690be7bc302a77f626794441bb9893ab16fe6a57b34d3ab7bd57310eb1002b25", 0xe2}, {&(0x7f0000000980)="cdfbeff41113430213a6ccdff4d311555941aec972e4d2d67016b2190dbb98d81bed88a867d0fd320bdd0a032574b94f1c9c265458c4aa5f9da11777e9a3059590e384c5fca42ecfd23f54ae59b2a7e0c6b9739ddb4f25c6b41208f45ef5820e7bfa4443975f8d8ecb47b0a75fa8cfad160f46f38fa1994115a912ed696da540c9a91e5774e3a3d53346e1e50216c3b4c3935a327bdf038c8fea4d45d616666035b5e54192540634a5cbb4", 0xab}], 0x9, &(0x7f0000000b00)=[{0x68, 0x115, 0x1ff, "daced4de8ddbdc3301bf7f4bba5c6935bc5f1d0c99e5fe145a26e7e7045dfa4fa8d3ceecd7494bf501c0f968109db43c2861b41e63b0c6f889f1f9c91505ad48ac641cfcf3a96a76292ec82b85dab9d2ba"}, {0x20, 0x11b, 0x3ff, "ce48eda0b581c1028f07c1e9f1a8"}, {0x60, 0x18d, 0x28d, "bba86c1b42535dbc30106e111a2bea1b0f97e8b2a244aec7ec9f3351872d2a6022047c747cf202b05a388cc8e78131d12e06f88893ec89ea5c833b6ad403f527aede73fe5106612ac480af5f"}], 0xe8}, 0x4841) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x400000000420000, 0x0) fchdir(r1) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000c40)=""/219) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x90}}, 0xf342, 0x1, 0x7, 0x3, 0x1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x63cd, 0x6, 0x4, 0xe8, 0x10}, &(0x7f0000000080)=0x98) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:10 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000002c4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2550.284102] overlayfs: failed to resolve '+/file0': -2 [ 2550.361933] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2550.363237] overlayfs: failed to resolve '+/file0': -2 [ 2550.408015] EXT4-fs (loop1): invalid first ino: 0 [ 2550.469294] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2550.488929] EXT4-fs (loop1): invalid first ino: 0 05:24:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x18b, 0x68) 05:24:10 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xf3ffffff) 05:24:10 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7e) 05:24:10 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) chdir(0x0) 05:24:10 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000002d4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2550.829930] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x18c, 0x68) 05:24:11 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xf6ffffff) [ 2550.877459] EXT4-fs (loop1): invalid first ino: 0 [ 2550.891107] binder: 1619:1620 ioctl c018620b 0 returned -14 [ 2550.925038] overlayfs: filesystem on './file0' not supported as upperdir 05:24:11 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x82) 05:24:11 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1/file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0xfffffffffffffe86, 0xfa00, {0x0}}, 0x18) [ 2551.010025] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2551.087188] EXT4-fs (loop1): invalid first ino: 0 05:24:11 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xffffff7f) 05:24:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x18d, 0x68) [ 2551.228865] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 2551.237153] overlayfs: missing 'lowerdir' [ 2551.296787] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 2551.349410] overlayfs: missing 'lowerdir' 05:24:11 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x83) 05:24:11 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000484000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:11 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='xfs\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="199ca0f298fd5dcc65cc81d33f8fb2fabc", 0x11, r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getegid() prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee", 0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0xfffffffffffffe05) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0xffff, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="01010ba20ee66765ae", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x7, 0x4d3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/133, 0x85) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:11 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xfffffff3) 05:24:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x18e, 0x68) 05:24:12 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xfffffff6) 05:24:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x18f, 0x68) [ 2551.734947] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2551.765157] binder: 1669:1670 ioctl c018620b 0 returned -14 [ 2551.773547] EXT4-fs (loop1): invalid first ino: 0 [ 2551.863279] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:12 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x84) [ 2551.939470] EXT4-fs (loop1): invalid first ino: 0 05:24:12 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1000000000000) 05:24:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x190, 0x68) 05:24:12 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000004c4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:12 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x85) 05:24:12 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x6b6b6b00000000) [ 2552.141660] XFS (loop2): Invalid superblock magic number [ 2552.168266] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2552.177976] EXT4-fs (loop1): invalid first ino: 0 [ 2552.355872] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2552.373491] EXT4-fs (loop1): invalid first ino: 0 05:24:12 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065926469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c25302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:random_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xfffffffffffffffd}, 0x49) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) rt_sigsuspend(&(0x7f0000000140)={0x6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x88, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x99a5, @mcast1, 0x79a5}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x6f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe7b}, @in={0x2, 0x4e22, @rand_addr=0x1000}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r2, @in={{0x2, 0x4e23, @loopback}}, 0x7f, 0x6}, 0x90) 05:24:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x191, 0x68) 05:24:12 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x100000000000000) 05:24:12 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000604000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:12 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x86) 05:24:12 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x200000000000000) 05:24:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x192, 0x68) [ 2552.721455] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2552.731473] binder: 1741:1746 ioctl c018620b 0 returned -14 [ 2552.743611] EXT4-fs (loop1): invalid first ino: 0 05:24:13 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x87) [ 2552.914112] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2552.942917] overlayfs: unrecognized mount option "uppedir=./file0" or missing value [ 2552.957381] EXT4-fs (loop1): invalid first ino: 0 05:24:13 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x300000000000000) 05:24:13 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000684000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x193, 0x68) [ 2553.155083] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2553.167407] EXT4-fs (loop1): invalid first ino: 0 [ 2553.224760] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2553.233225] EXT4-fs (loop1): invalid first ino: 0 [ 2553.694955] overlayfs: unrecognized mount option "uppedir=./file0" or missing value 05:24:13 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) gettid() mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x20, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000240)={0x2, 0x8, 0x3, 0x609, [], [], [], 0x4, 0x6, 0x2, 0x9, "0b73e46ea80e4ee16bddef0f8a08db7e"}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) setxattr(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000400)='\x00', 0x1, 0x1) 05:24:13 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x88) 05:24:13 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x400000000000000) 05:24:13 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000006c4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x194, 0x68) 05:24:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:14 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x700000000000000) [ 2553.817416] binder: 1792:1798 ioctl c018620b 0 returned -14 [ 2553.828892] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2553.836398] EXT4-fs (loop1): invalid first ino: 0 05:24:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x195, 0x68) [ 2553.930561] overlayfs: failed to resolve './file0': -2 [ 2553.944230] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2553.959392] EXT4-fs (loop1): invalid first ino: 0 05:24:14 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x3f00000000000000) 05:24:14 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x89) 05:24:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x196, 0x68) 05:24:14 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x8000000000000028) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f77658c6469723d2e2f66692f66696c65315c00000000000000000000000000004c5b8e75e81febb752e13e24887d3d2107868239a3495033607ff8b7a9c79692e631c572dd82b59de46352887845752baa728a9d0ef4c71c77f4a8915048cc9bee19280a6c10b9738ed576282dbb7340c3763718cf21e8f3e62567bdd6eb933fda91858ed99e2aa896721e08c94dbffd3c6925f3975184ce2c4b683379274f9855f9ffe6ee3b0394115eefd6af1d20131de0d7c72b2bd9ce2f0f0b8916209fa7"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:14 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000744000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:14 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x8001d00b00000000) 05:24:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x197, 0x68) 05:24:14 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x8a) [ 2554.251849] overlayfs: unrecognized mount option "lowedir=./fi/file1\" or missing value [ 2554.335024] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2554.340493] overlayfs: unrecognized mount option "lowedir=./fi/file1\" or missing value 05:24:14 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xe000000000000000) [ 2554.396887] EXT4-fs (loop1): invalid first ino: 0 [ 2554.506011] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2554.553109] EXT4-fs (loop1): invalid first ino: 0 05:24:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:14 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) connect$x25(r1, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) 05:24:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x198, 0x68) 05:24:14 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x8b) 05:24:14 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xf3ffffff00000000) 05:24:14 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000007a4000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x68) 05:24:15 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x8c) [ 2554.723397] binder: 1869:1871 ioctl c018620b 0 returned -14 [ 2554.744781] overlayfs: filesystem on './file0' not supported as upperdir 05:24:15 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xf6ffffff00000000) [ 2554.810252] binder: 1869:1878 unknown command 25361 05:24:15 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x40, 0x3) unlink(&(0x7f0000000040)='.\x00') fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2554.835620] binder: 1869:1878 ioctl c0306201 20000180 returned -22 [ 2554.911525] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:15 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0xffffff7f00000000) 05:24:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x19a, 0x68) [ 2554.982522] EXT4-fs (loop1): invalid first ino: 0 [ 2555.089235] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2555.097957] overlayfs: filesystem on './file0' not supported as upperdir [ 2555.108883] EXT4-fs (loop1): invalid first ino: 0 05:24:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:15 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x8d) 05:24:15 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:15 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000005300000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x19b, 0x68) 05:24:15 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000040)={0x8, 0x9}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2555.577392] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) 05:24:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x19c, 0x68) [ 2555.639099] overlayfs: filesystem on './file0' not supported as upperdir [ 2555.641897] binder: 1925:1926 ioctl c018620b 0 returned -14 [ 2555.646150] EXT4-fs (loop1): invalid first ino: 0 05:24:15 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065726469723d2e2f7e6d11edacb566696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6468723d2e2f66d6e0c9afd0081f9e85dfdd9dc846c5b699085b9b51743e9b2ba3a5aa4cc81255761f9e045ee9f8412e10895ab3e1c60c0b402dd04942c84a98da181153b7e703e79bb1eb"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x20, 0x0, r0, &(0x7f0000000080)='./file1\x00') fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141047, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2555.715493] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2555.721306] binder: 1925:1932 unknown command 25361 [ 2555.728117] binder: 1925:1932 ioctl c0306201 20000180 returned -22 05:24:15 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x8e) [ 2555.763336] EXT4-fs (loop1): invalid first ino: 0 05:24:16 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x80000) recvfrom$rose(r0, &(0x7f00000000c0)=""/75, 0x4b, 0x40000122, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x68) [ 2555.936511] overlayfs: unrecognized mount option "workdhr=./fɯݝFŶ[Qt>+LUv^A.Z @-IBJS盱" or missing value [ 2555.955804] overlayfs: unrecognized mount option "workdhr=./fɯݝFŶ[Qt>+LUv^A.Z @-IBJS盱" or missing value 05:24:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:16 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000000200000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:16 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x3, '\x00\x00\x00\x00\x00\xbc\xae\x00', 0x3}, 0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x80, 0x812, 0x12, 0x8, 0x8, 0xc7, 0x0, 0x1000, 0xad1d, 0xb7e, 0x81, 0x1, 0x7, 0x0, 0xffffffffffffffff, 0x1], 0x2000, 0x100}) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1, "03"}, &(0x7f0000000200)=0x9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r3, 0x105}, &(0x7f0000000280)=0x8) ioctl$KDMKTONE(r2, 0x4b30, 0x8) 05:24:16 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) socket$xdp(0x2c, 0x3, 0x0) 05:24:16 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x8f) 05:24:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x19e, 0x68) [ 2556.493857] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2556.518241] EXT4-fs (loop1): invalid first ino: 0 05:24:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x19f, 0x68) [ 2556.541711] overlayfs: filesystem on './file0' not supported as upperdir [ 2556.542884] binder: 1975:1978 ioctl c018620b 0 returned -14 [ 2556.577784] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5b}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000140)=0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x4803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x7}, {0xa, 0x4e21, 0x0, @mcast2, 0xfffffffffffffff7}, r2, 0x6}}, 0x48) [ 2556.592562] EXT4-fs (loop1): invalid first ino: 0 05:24:16 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x90) 05:24:16 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x4e8, 0x160, 0x0, 0x2c0, 0x400, 0x400, 0x400, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x8, 0x2, 0x1, 0x0, "a9564f875808641694bf730586ae662e236adfcaa05b3db7dc31070b8678a8aad5ad66ce5c63b2b20c19d08a497c869721f489bc9b2777e2fe10a4da29fc873c"}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff, 0xff, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0xe18, 0x1, 0xffff, 0x3, 0xf4, 0x4, 'syz_tun\x00', 'lapb0\x00', {}, {}, 0x0, 0x20}, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x203, 0x80, 0x4, 0x1, 0x0, "0c452c506c3e9942d47c3bf8aac37aeebc6d52b1ae5273ad3d1db5fa01cd33829f3478f47e9f398e30bb7d18669115d81d381febfd04dc70e0e371736490824f"}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x538) 05:24:16 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000000400000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2556.649402] binder: 1975:1982 unknown command 25361 [ 2556.684828] binder: 1975:1982 ioctl c0306201 20000180 returned -22 05:24:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80080) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) [ 2556.813744] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2556.836030] EXT4-fs (loop1): invalid first ino: 0 [ 2556.903722] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2556.924586] EXT4-fs (loop1): invalid first ino: 0 [ 2556.934346] overlayfs: filesystem on './file0' not supported as upperdir 05:24:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a0, 0x68) 05:24:17 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x1, 0x100, "6b0360e6aa39c3f99ac2042ba0b5378816379992cc7ce975d9541f1a5d0f293a", 0x7fff, 0x4, 0x7, 0x1ff}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:17 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x91) 05:24:17 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c9383be2b35720c65302c6c6f7765726469723d2e16513152762f66696c65302c7792726b6469723d2e2f66696c65d043b840237dffda5983f96779f51b21315c00c18c579a7b53f39f3d1477e6d8fa91764cf7994aa17e2544bfd6"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:17 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000000900000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2557.392964] overlayfs: unrecognized mount option "wrkdir=./fileC@#}Ygy!1\" or missing value [ 2557.408952] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2557.428174] binder: 2029:2033 ioctl c018620b 0 returned -14 05:24:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x68) [ 2557.443124] EXT4-fs (loop1): invalid first ino: 0 05:24:17 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) 05:24:17 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x92) [ 2557.490959] overlayfs: unrecognized mount option "wrkdir=./fileC@#}Ygy!1\" or missing value [ 2557.507606] binder: 2029:2036 unknown command 4743953 [ 2557.521820] binder: 2029:2036 ioctl c0306201 20000180 returned -22 [ 2557.565086] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2557.599003] EXT4-fs (loop1): invalid first ino: 0 05:24:17 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000240)={0x30001, 0x0, [0x81, 0x401, 0x3, 0x7, 0x4, 0x2, 0x7ff, 0xfffffffffffffffc]}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0xfffffffffffffbff, 0x7f7f775f, 0x7, 0xe94c, 0x2, @discrete={0x100, 0xffffffff}}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x202, 0x8000000000100001) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r0, 0x0, 0x1, &(0x7f0000000040)='\x00', r2}, 0x30) 05:24:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x68) [ 2557.729927] QAT: Invalid ioctl [ 2557.843918] QAT: Invalid ioctl [ 2557.848281] overlayfs: filesystem on './file0' not supported as upperdir 05:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:18 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000002500000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:18 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x93) 05:24:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) 05:24:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x68) 05:24:18 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570706572983c2d3f1ba5556469723d2e2f66696c65302c556f7765726469723d2e2f66696c65302c771774ed0cc8236f726b"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) fchdir(r0) ioctl$KDDELIO(r0, 0x4b35, 0x576d) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x20000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x49a0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0xa8f7, @mcast2, 0xb8ad}}}, 0x84) 05:24:18 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) [ 2558.276110] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2558.305187] overlayfs: unrecognized mount option "upper<-?Udir=./file0" or missing value [ 2558.305602] binder: 2083:2084 ioctl c018620b 0 returned -14 05:24:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x68) 05:24:18 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x94) [ 2558.375936] EXT4-fs (loop1): invalid first ino: 0 [ 2558.392377] overlayfs: unrecognized mount option "upper<-?Udir=./file0" or missing value [ 2558.406631] binder: 2083:2088 unknown command 4743953 [ 2558.443325] binder: 2083:2088 ioctl c0306201 20000180 returned -22 [ 2558.489950] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:18 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) recvfrom(r0, &(0x7f0000000880)=""/4096, 0x1000, 0x2041, &(0x7f0000000040)=@ethernet={0x307, @remote}, 0x80) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x521500) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x8001004, 0x401, 0x1}) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x80000001, 0x2, r1}) [ 2558.538952] EXT4-fs (loop1): invalid first ino: 0 05:24:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a5, 0x68) 05:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:18 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000005300000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:18 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x95) [ 2558.702487] binder: 2108:2113 ioctl c018620b 0 returned -14 05:24:18 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="000802000180030014a170231ca324d7a6fa47fbed05d903255d2626a013caf95d5a070cd99409b9dcc29ef5e11090b05ce8b68594645f48c4123c55"], &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x12000000000}, 0x8) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffe6f) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a6, 0x68) [ 2558.752954] overlayfs: filesystem on './file0' not supported as upperdir [ 2558.780389] binder: 2108:2118 unknown command 4743953 [ 2558.795194] binder: 2108:2118 ioctl c0306201 20000180 returned -22 05:24:19 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x3, 0x9, 0x5, {}, 0x5, 0x1}) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2558.861552] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2558.933775] EXT4-fs (loop1): invalid first ino: 0 05:24:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a7, 0x68) 05:24:19 executing program 5: openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:19 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x96) [ 2559.021187] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2559.064218] overlayfs: filesystem on './file0' not supported as upperdir [ 2559.088909] EXT4-fs (loop1): invalid first ino: 0 05:24:19 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x81ef, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="9674bb743ccbe4650879f3f2fc2be28b2787e99ee68c73b0d057e8d6dc759a3c6602c02fa43fbe7af3b9", 0x2a, 0x3ff}, {&(0x7f0000000240)="d4e23fbd77", 0x5, 0x3}, {&(0x7f0000000280)="3efa729d4489fd5c3f84476e2251142a653b62d8a38b079ccb5e32492a23e14109bb58ff1fb99dbdb95787df178935df2cdfec4f10dc9deedb0ccfaf4a8fd11b476b125e806b274b868ae4ca9c50533c188e94798740c22a02d6bb97680020a62573e6eb39cb3b2fce828d3bb44a732fda4fc598b46df8334279e81e7da5ab2629e9e9ab2ced319e24fe2fcb23fefa8f8614", 0x92, 0x9d05}, {&(0x7f0000000340)="e8abbc9264ffd45504ee60e09dc6f84a184e58e880d5838750d8d8c13d252612eb31d14d9cb91cb1ba1ee88ff1d6f34593d16137a9784294fbfc7fdd8522da90d9214e2be9d974d8d5be57f2817d3d5c6a6eb21f2d1606e2eecb311bf2728028d1719e77422a6305e40779710d648fcd08349116beaf347be769f4d030e093b656aa2d6b09ee39abede24aab4400677a809ca7", 0x93, 0xffffffff80000000}, {&(0x7f0000000400)="35bd3d52defd3542f7603c1da4c0e66173b5f8e3cbfe5a621167e3e82c0c5a667c7a61ad4ffd8a1914e760390f1b80db21fb0836a54b7cd511d8c3d89e8ffea5683068233d9926b9546c440b52fa6397fa11b6be25010df1dff1eefb684f9002e0d0fc6b2067e7acabbb765667e2b6084b692e05b9bf68823000c63c7334f5c48f8414df77492ae0f72d03d4b9", 0x8d, 0x27}, {&(0x7f00000004c0)="b40ad10a88fdc2b35552990af5d116f48665e5b5a1dde92951b122197fae9f1362fba64ce88409a8536658b69b7961dc8fde28dd2afcc304ae829f86c3ad01417b46d0c98988a61261a3bd853b875e278b7a247146cbcffd4924d28fe2393555f3f28c203760931a022dd743ef1bd80ecac30e5a514b404595a3e970d687dd890547cb427cdb1b37529617b9f67609f8cd0055f1e0", 0x95, 0x8001}], 0x8, &(0x7f00000006c0)={[{@nouser_xattr='nouser_xattr'}, {@nombcache='nombcache'}, {@errors_remount='errors=remount-ro'}], [{@euid_gt={'euid>', r2}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) 05:24:19 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000400000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a8, 0x68) [ 2559.313855] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2559.380620] EXT4-fs (loop1): invalid first ino: 0 [ 2559.481727] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2559.483595] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:19 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97) 05:24:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a9, 0x68) [ 2559.544791] EXT4-fs (loop1): invalid first ino: 0 [ 2559.582931] overlayfs: filesystem on './file0' not supported as upperdir 05:24:19 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000001000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1aa, 0x68) [ 2559.699889] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2559.707771] binder: 2180:2182 ioctl c018620b 0 returned -14 05:24:19 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x98) 05:24:20 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) accept$nfc_llcp(r0, &(0x7f0000000240), &(0x7f0000000080)=0x60) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66ff6c65302c776f726b6469723d2e2f66696c65315c00"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2559.800007] binder: release 2180:2184 transaction 308 out, still active [ 2559.806807] binder: undelivered TRANSACTION_COMPLETE [ 2559.919790] binder: release 2180:2182 transaction 308 in, still active [ 2559.926546] binder: send failed reply for transaction 308, target dead [ 2559.937102] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2559.971807] EXT4-fs (loop1): invalid first ino: 0 [ 2560.047052] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2560.068869] EXT4-fs (loop1): invalid first ino: 0 [ 2560.093061] overlayfs: failed to resolve './fle0': -2 [ 2560.145353] overlayfs: failed to resolve './fle0': -2 05:24:20 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5f, 0x10000) 05:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ab, 0x68) 05:24:20 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x99) 05:24:20 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000002000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:20 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ac, 0x68) [ 2560.227821] binder: 2210:2216 ioctl c018620b 0 returned -14 [ 2560.299266] binder: release 2210:2221 transaction 310 out, still active [ 2560.306041] binder: undelivered TRANSACTION_COMPLETE 05:24:20 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9a) [ 2560.352172] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2560.402675] EXT4-fs (loop1): invalid first ino: 0 05:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2560.453879] binder: release 2210:2216 transaction 310 in, still active [ 2560.465312] binder: send failed reply for transaction 310, target dead 05:24:20 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x80000000002, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x88, 0x0, 0x7fffffff, 0xfff, 0x0, 0x2d, 0x67}, 0x8) 05:24:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ad, 0x68) [ 2560.501652] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2560.520947] overlayfs: filesystem on './file0' not supported as upperdir [ 2560.543347] EXT4-fs (loop1): invalid first ino: 0 [ 2560.574522] binder: 2241:2244 ioctl c018620b 0 returned -14 05:24:20 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000280)=""/121) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', r0}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000240)=0xc) 05:24:20 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000004000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:20 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x9b) [ 2560.653168] binder: release 2241:2251 transaction 312 out, still active [ 2560.678806] binder: undelivered TRANSACTION_COMPLETE 05:24:20 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 05:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ae, 0x68) [ 2560.721258] binder: release 2241:2244 transaction 312 in, still active [ 2560.727945] binder: send failed reply for transaction 312, target dead [ 2560.863381] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2560.886130] EXT4-fs (loop1): invalid first ino: 0 [ 2560.913005] binder: 2270:2274 ioctl c018620b 0 returned -14 05:24:21 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) [ 2560.937438] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2560.955766] overlayfs: filesystem on './file0' not supported as upperdir [ 2560.982402] EXT4-fs (loop1): invalid first ino: 0 05:24:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1af, 0x68) 05:24:21 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9c) [ 2560.989191] binder: release 2270:2274 transaction 314 out, still active [ 2561.026869] binder: undelivered TRANSACTION_COMPLETE 05:24:21 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$capi20_data(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1012) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:21 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000009000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:21 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x4, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0, r2}}, 0x18) 05:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b0, 0x68) [ 2561.144721] binder: send failed reply for transaction 314, target dead [ 2561.233808] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2561.249001] EXT4-fs (loop1): invalid first ino: 0 05:24:21 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x4, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xca83, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) accept4(r1, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80, 0x800) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000140)={@broadcast, @broadcast, r2}, 0xc) 05:24:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b1, 0x68) [ 2561.300067] binder: 2302:2304 ioctl c018620b 0 returned -14 05:24:21 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9d) [ 2561.376551] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2561.382483] binder: release 2302:2310 transaction 316 out, still active [ 2561.405348] overlayfs: failed to resolve './file0': -2 [ 2561.411828] EXT4-fs (loop1): invalid first ino: 0 [ 2561.417810] binder: undelivered TRANSACTION_COMPLETE 05:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b2, 0x68) [ 2561.470960] overlayfs: failed to resolve './file1': -2 [ 2561.474105] binder: release 2302:2304 transaction 316 in, still active [ 2561.497359] binder: send failed reply for transaction 316, target dead 05:24:21 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x70fc193b, 0x6, 0xfe98, 0x6, 0x40, 0x3, 0x3e, 0x5, 0x245, 0x38, 0x37c, 0x1, 0x2, 0x20, 0x2, 0x6, 0x4, 0x100000001}, [{0x1, 0x3, 0xfff, 0xf31, 0x3, 0x0, 0xfc8a5dd, 0x4}], "e6ef0d585e896001a0d4710fabdd1fd286ee57e2e363c4901582787cb9b74aa9c9f82a459fd6c302ba0cda27b51ba84f62097aa0b022ac3c1be1e457adf4d8ee6b59041f6392510eb9c2816ee86570b0c43a0366ae4f7d6dbf8e5a6231a6af1165e957a780940bc7bf8d97ba96b5a8d13680c6cdcf1be72d4e006f5c514c5dadab777a28a2707d9a5134ed0a3701097fd170b9a26def9b2a42ae22e4a513cf8970e5be3a692ab2f1eb2770312cf955508c63b3736e947de876fbb7f9c8068722484287fbc7c1df622a1cc8", [[], [], []]}, 0x423) timerfd_create(0x0, 0x800) 05:24:21 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000025000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2561.561897] binder: 2325:2326 ioctl c018620b 0 returned -14 05:24:21 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x9e) 05:24:21 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./fmle0,,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x100, 0x0) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./bus\x00', 0x6, 0x2, &(0x7f0000000300)=[{&(0x7f0000000240)="acb031641f2e67cb62df8e531497408941b2a13b0525d1a5fd26836733b816cbbae174fe20b4694cb049f64d289ce16420ed888cc7a8027b3d5ad5169c71358cf577a343bf27269da556b1811f7a1a9fcdbb9141b1e68be7bd58b372e51d43c1d3979b38ac70744582eca2e1907ae83f286c8534cf7e8733488822a25557ef2f2a704d32520a63866c0a540145db6da8ea0e9928b4442632436a916ae71fb268670c21350aed5cbdb6edf66b93cc293dab9fe622", 0xb4, 0x5}, {&(0x7f0000000140), 0x0, 0x5}], 0x2, &(0x7f0000000340)='overlay\x00') write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000003c0)={0xb, 0xffffffffffffff4d, 0xfa00, {0x0, 0xffffffffffffffff, 0x3f}}, 0xfffffffffffffec8) [ 2561.647987] binder: release 2325:2333 transaction 318 out, still active [ 2561.662875] binder: undelivered TRANSACTION_COMPLETE 05:24:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b3, 0x68) 05:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 2561.716510] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2561.750626] binder: send failed reply for transaction 318, target dead 05:24:22 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc0002, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) [ 2561.795336] EXT4-fs (loop1): invalid first ino: 0 [ 2561.880326] overlayfs: missing 'lowerdir' [ 2561.890178] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2561.899089] binder: 2352:2356 ioctl c018620b 0 returned -14 05:24:22 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9f) 05:24:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x68) 05:24:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000240)={{0x200, 0x9}, {0x8000000000, 0xc000000000000000}, 0x9, 0x6, 0x9}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) [ 2561.924593] EXT4-fs (loop1): invalid first ino: 0 [ 2561.966422] binder: undelivered TRANSACTION_COMPLETE [ 2561.984153] binder: send failed reply for transaction 320, target dead [ 2562.000652] ceph: device name is missing path (no : separator in /dev/loop2) 05:24:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) connect$x25(r1, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) 05:24:22 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000400000003f000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2562.084181] overlayfs: missing 'lowerdir' 05:24:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b5, 0x68) 05:24:22 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x0) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2a87316dc52d1b4d}, 0x40000) [ 2562.185429] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2562.207859] EXT4-fs (loop1): invalid first ino: 0 05:24:22 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa0) 05:24:22 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66695665302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00828fd0905f82c1bd68d07fc31ae81b3c55527b432c4c9e41f1a6b4b6166a1cddcbc6dbf1bda6e0f573a0ee0f088cfb74e15c70f45e787ab25bb27b3967c22ebe29d0df5993cd7aac88c65bb5c4adad671b157ab31ac615d00a2a2c40cb0174898fff6f7a64ae77f371835d7dd2260f3574d5ddcb91da5dbc"]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x1ffffe, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x3e, 0x1, 0x67, 0x6, 0x0, 0x1, 0x80, 0x8, 0x8, 0x400, 0x7ac, 0xffffffffffffff3e, 0x40, 0x4, 0x5, 0x80000000, 0x100000001, 0x2, 0x800, 0x6, 0x0, 0x9, 0x0, 0x6, 0x3, 0x0, 0x9, 0x10001, 0x1, 0xfffffffffa90dd58, 0x1324000000, 0xff, 0x1, 0x1bb, 0x7ac, 0x2, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x80, 0x5, 0x7, 0x0, 0x101, 0x0, 0x78ca67c5}, r0, 0xd, r1, 0x1) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x3) fchdir(r2) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000340)=0xfffffffffffffff8) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x7c6239e2080d2e84, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x800000000000, 0x7, 0x0, 0x0, @irqchip={0x3ff, 0x3}}]}) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000300)=0x100000001, 0x4) [ 2562.303457] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2562.324410] EXT4-fs (loop1): invalid first ino: 0 05:24:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b6, 0x68) 05:24:22 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000025000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:22 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004002000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x410240) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x7, 0xff, 0x6, 0x8, 0xfffffffffffffffa}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='nlmon0\x00'}) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x3f}, 0x1) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x600200) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x1000}, &(0x7f00000002c0)=0x8) openat$cgroup_type(r3, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000300)=r4, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000100)=0x1ff) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0xffffffff, &(0x7f00000001c0)='team0\x00', 0x8, 0xfff, 0x5}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2562.404267] overlayfs: failed to resolve './fiVe0': -2 [ 2562.468286] overlayfs: failed to resolve './fiVe0': -2 05:24:22 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa1) 05:24:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b7, 0x68) 05:24:22 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @ipv4={[], [], @rand_addr=0x3}, 0x9}, 0x1c) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.+file0,workdir=./file1\\\x00']) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000140)={0x1f, 0x9, 0x0, 0x6, 0x8, 0x9}) 05:24:22 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x3b, @local, 0x4e24, 0x4, 'sh\x00', 0x20, 0x0, 0x1a}, 0x2c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000000c0)=""/125) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3}, 0x10) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000000202, 0x0) [ 2562.660738] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2562.687934] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2562.705743] EXT4-fs (loop3): invalid first ino: 0 [ 2562.712317] EXT4-fs (loop1): invalid first ino: 0 05:24:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b8, 0x68) 05:24:22 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) poll(&(0x7f0000000000)=[{r0, 0x1000}, {r0, 0x808e}, {r0, 0x400}, {r0, 0x8090}, {r0, 0x4000}, {r0, 0x2000}, {r0, 0x1000}], 0x7, 0x7) [ 2562.875350] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:23 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa2) [ 2562.922320] EXT4-fs (loop1): invalid first ino: 0 05:24:23 executing program 5: syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x80000002000000e0, 0x4000) 05:24:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b9, 0x68) [ 2562.977209] overlayfs: failed to resolve '.+file0': -2 05:24:23 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004003000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:23 executing program 5: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2563.087993] binder: 2448:2451 ioctl c018620b 0 returned -14 [ 2563.122315] overlayfs: failed to resolve '.+file0': -2 05:24:23 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xa3) [ 2563.147178] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ba, 0x68) 05:24:23 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 2563.205132] EXT4-fs (loop1): invalid first ino: 0 05:24:23 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) ptrace$setregs(0xd, r1, 0x101, &(0x7f0000000240)="32e594a6b55b4b356ab4e005f848b157032bf2b467cde3da4193baf70461aeb3fef19ea1aae1e1e3481bb69c5bb8979bdec25e01375f6b0aaca32cece4c891c6c58fe3f125236f6b80985cf23be87f950b595449cf1acfa637388cf23aa6d1f780ad922bd67defcd11fffab6e2df8966b189013ceaa856f7ea6eb65c0ba8af0e0c62f2326509c25bd93eb0149505fabacc780e8f97c6fdfa2c1937f463e96f4da932a3148662818b637435da7d0dc0dc1adad3678b7ac59a6c62b1472d3e7cfb127f0ca4482cb498cf6774") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1a020000000, 0x4, "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", 0xfe, 0x7, 0x7, 0x1, 0x5, 0x1, 0x7f}, r2}}, 0x120) [ 2563.304047] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2563.336818] EXT4-fs (loop1): invalid first ino: 0 05:24:23 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa4) 05:24:23 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004004000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1bb, 0x68) [ 2563.442204] overlayfs: filesystem on './file0' not supported as upperdir 05:24:23 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x200, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f0000000440)) r1 = semget$private(0x0, 0x4, 0x404) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0xa22, 0x0, 0x5, 0x6, 0x9, 0x80]) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x400000000000205, 0x405) [ 2563.606165] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2563.668995] EXT4-fs (loop1): invalid first ino: 0 [ 2563.741147] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2563.768223] EXT4-fs (loop1): invalid first ino: 0 05:24:24 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='xfs\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="199ca0f298fd5dcc65cc81d33f8fb2fabc", 0x11, r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getegid() prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee", 0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0xfffffffffffffe05) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0xffff, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="01010ba20ee66765ae", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x7, 0x4d3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/133, 0x85) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2, 0x6, 0x3fffc00000000, 0x89, 0x1, 0xf9}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1bc, 0x68) 05:24:24 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa5) 05:24:24 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x400000) 05:24:24 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004005000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2563.975013] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:24 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) recvfrom$x25(r0, &(0x7f00000000c0)=""/240, 0xf0, 0x40002040, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 2564.017783] EXT4-fs (loop1): invalid first ino: 0 05:24:24 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa6) 05:24:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1bd, 0x68) [ 2564.083039] overlayfs: filesystem on './file0' not supported as upperdir [ 2564.112319] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2564.153228] EXT4-fs (loop1): invalid first ino: 0 05:24:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:24 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={r0, 0x7f, 0x8000, "e98c8d494c236d8274daa88c96ebf7522088eda0536e76f5acd341c864abbfea4efbb42c83eae8992ba0dcd043df02012bcc24f54fb0d526ab9005be58a88ac3b43fd4f5d1f200341f3eae4ea52f8fe5ba3e8ce8c8c3c79af437e3812d810814ed4b87241df821e3d36d57d3f3b4111c02c6dc67bfbcfbd944d1ac2bc475b718b9a4649b3e403937507323a5d65bf0b8"}) 05:24:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1be, 0x68) [ 2564.568080] overlayfs: filesystem on './file0' not supported as upperdir [ 2564.643178] XFS (loop3): Invalid superblock magic number 05:24:24 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa7) 05:24:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_open_pts(r0, 0x2040) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:24 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004006000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1bf, 0x68) 05:24:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:24 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0x0, 0x7, 0x0, 0x697, 0x7, 0xfff}, 0x9, 0x7e, 0x0, 0x40, 0x3, "703fb56b8ea6f336b565842292133f5ae80fdf88cf4dbb7a8d491d8acfce9aa1224e47de3afb8369405293e5236c587d5089c3bc20284fe8c82ae536235f83d5323943c70274ff08684b08796f64dc145134ccabe7a5b7354deb0d405a2b28305b209aae4f3bc61c524ac772ec6c85f4191a7f1423ce6e05fbcd9d56434482a6"}) [ 2564.821605] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2564.858856] EXT4-fs (loop1): invalid first ino: 0 05:24:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x68) 05:24:25 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/184) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfff8, 0x3ff) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={{0x6, 0x2, 0xffff, 0x8, 0x4, 0xfffffffffffffff9}, 0x8001, 0x100000001, 0x5}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @broadcast}, &(0x7f0000000200)=0xc) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001700)=""/153, 0x99}, 0xa3}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000017c0)=""/66, 0x42}, {&(0x7f0000001840)=""/99, 0x63}, {&(0x7f00000018c0)=""/66, 0x42}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/177, 0xb1}, {&(0x7f0000002a00)=""/94, 0x5e}], 0x6, &(0x7f0000002b00)=""/194, 0xc2}, 0x6}, {{&(0x7f0000002c00)=@ipx, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/137, 0x89}], 0x1, &(0x7f0000002d80)=""/224, 0xe0}, 0xffff}, {{&(0x7f0000002e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002f00)=""/34, 0x22}, {&(0x7f0000002f40)=""/132, 0x84}, {&(0x7f0000003000)=""/199, 0xc7}], 0x3, &(0x7f0000003140)=""/83, 0x53}, 0x8}, {{&(0x7f00000031c0)=@un=@abs, 0x80, &(0x7f0000006540)=[{&(0x7f0000003240)=""/219, 0xdb}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/242, 0xf2}, {&(0x7f0000006500)=""/11, 0xb}], 0x7, &(0x7f00000065c0)=""/16, 0x10}, 0xe6d}], 0x5, 0x2, &(0x7f0000006740)={0x77359400}) accept4$packet(r0, &(0x7f0000006780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000067c0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000068c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f00000069c0)=0xe8) getsockname$packet(r0, &(0x7f0000006ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006b00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000006d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006d00)={&(0x7f0000006b40)={0x1a8, r1, 0x25, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xc4, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x200000000000000, 0x4a, 0x81, 0x35c7f523}, {0x1b, 0x1, 0x5, 0x3e34}, {0x2, 0xfffffffffffffffc, 0xffff, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff87}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xec}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r7 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='nodev[-{@,posix_acl_access\x00', 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000006840)='keyring\x00', &(0x7f0000006880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r7, &(0x7f0000006800)=[{&(0x7f0000000300)="9e792f6197fffc22f08dd2d500e0d8a79f5a7ba4f8f844db0196f9bedd7f75e1e09d0f2c702a64eb614132440665897a9e79dd4d89bcf1d375834cb3c40b85dabdb01792ccc5c8fc911bb8cef1c1a6e17799dcccaf1d651d79c5f149f2fdd284766179bd1d4df8925e70b70d205d6d1ec58dd50a1863ffcc8c53cce13cbb4a7a4032e8bb00171b7d5ec7", 0x8a}, {&(0x7f0000006d80)="a87e9b8a3a95207176c58dfc3483dab57128bebf128cca92a613032390d276a5be48b7c2b2e9891b059864c27b84cef29f90351474e0128bde94e3bac19a8f9aa642a1106527d2e7db5c1667369f292f6e32150a1f6856642f2088c9c95459b091f482514b736661ff319ec1600aa4ce9d05617ee98494679fe020e33610fbd036c306111dc91ec886e0e2321cf2ee64c7c4d779527653b43971c5de9c13dcae198b662ee6139bd32da331170fb3682d1d8c9338d86494bd0fd9676066e8fb72756eabbe288c282bdd1669e026cd7726181311a5c62a2eb0c83b818b67f89737ab6d6ed556d8342c", 0xe8}, {&(0x7f00000003c0)="d33986c103f670cf3c82f9130f236be1808e715d1b6159ac2cf5b33d88e4d4437b68a12cdf2fcbe321752c3fd07dbb772b0d135b3b044fd9a6e628b8b3ff7a6a904796fbce72fd0d5e3a6f34ade2ee2f99a89c59e713a5d4de6917d7fed17d7907a1f605cd1d9e07dd0b8e1407ff179b8a0b8269c5668906a8258903164f2eb29a33a94e4b25b9fe72eb6c3a4f3693c19a6240e349858607a7c5c97192613888a1801730", 0xa4}], 0x3, r8) [ 2564.905235] binder: 2596:2597 ioctl c018620b 0 returned -14 [ 2564.945133] overlayfs: filesystem on './file0' not supported as upperdir 05:24:25 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa8) [ 2564.968410] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2565.056339] EXT4-fs (loop1): invalid first ino: 0 05:24:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c1, 0x68) 05:24:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:25 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x0) 05:24:25 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004007000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2565.321600] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2565.378498] overlayfs: filesystem on './file0' not supported as upperdir [ 2565.385497] EXT4-fs (loop1): invalid first ino: 0 [ 2565.431079] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2565.438860] EXT4-fs (loop1): invalid first ino: 0 05:24:25 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_open_pts(r0, 0x2040) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c2, 0x68) 05:24:25 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='securit{.SMACK64\x00', &(0x7f0000000140)='\x10%.\x00', 0x4, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f00000000c0)=0x68) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000100)={0x8c, 0x2, 0x6, 0x6, 0x101, 0x100, 0x8000}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) 05:24:25 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x20) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./fildir=./file1\\\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:25 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xa9) 05:24:25 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004008000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:26 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x40400) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)=0x7) 05:24:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c3, 0x68) [ 2565.799883] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2565.820552] overlayfs: missing 'workdir' [ 2565.829140] EXT4-fs (loop1): invalid first ino: 0 [ 2565.888312] overlayfs: missing 'workdir' [ 2565.896669] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xaa) [ 2565.938154] EXT4-fs (loop1): invalid first ino: 0 05:24:26 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x8a) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x10000, 0x400000) socket$tipc(0x1e, 0x7, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x8, 0x400) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000000)={0x2, 0x1, [0x5f68, 0x100, 0x43f, 0x4, 0x7fffffff, 0x2, 0x101, 0x10001]}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x5}, 0x18) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x5e, 0xa9b, 0x2, 0x7, 0x80000000, 0x9}) 05:24:26 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000003f00000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:26 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004009000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c4, 0x68) 05:24:26 executing program 5: 05:24:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xab) [ 2566.242779] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2566.278117] overlayfs: failed to resolve './file1': -2 05:24:26 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="3d73948931e27f6e643404aa177022208bc3450e8a5e92ee9cc2473dcadb966d6c8c62d8bec1d885338cce3c9cb45981b22d3175be2c51c13c72e2e8c6dbcdfce5704f71ce306bbb262a95c947", 0x4d) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x3b2, 0x4) 05:24:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c5, 0x68) 05:24:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'nlmon0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'team_slave_1\x00', 0x0}) accept4(r0, &(0x7f0000000940)=@hci={0x1f, 0x0}, &(0x7f00000009c0)=0x80, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000b00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006d40)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000006e40)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006e80)={0x0, @initdev, @dev}, &(0x7f0000006ec0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006f00)={0x0, @dev, @local}, &(0x7f0000006f40)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000006f80)={@empty, 0x0}, &(0x7f0000006fc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000007000)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000007100)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000007140)={@dev, @broadcast, 0x0}, &(0x7f0000007180)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000007980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007940)={&(0x7f00000071c0)={0x774, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x248, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xf67}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x81, 0xe812, 0xffffffff, 0xbb38}, {0x7f, 0x8, 0x0, 0x8}, {0x1, 0xda, 0x100000000, 0xd2}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x9, 0x1, 0x20}, {0x6, 0x1, 0x5, 0xfff}, {0x800, 0x0, 0x8, 0x7}, {0xde, 0x0, 0x7fff, 0xfff}, {0xffffffffffffffff, 0xfffffffffffffff7, 0x6, 0xd0}, {0x7ff, 0x9, 0x3f, 0x8}, {0x1000, 0x4, 0x7fff, 0x1000}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xbc, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x82c}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xb0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x220, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xd6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x828}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x164, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}]}, 0x774}, 0x1, 0x0, 0x0, 0x80}, 0x0) r15 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r15, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2566.306487] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2566.320370] overlayfs: failed to resolve './file1': -2 [ 2566.327961] EXT4-fs (loop1): invalid first ino: 0 [ 2566.340045] EXT4-fs (loop3): invalid first ino: 0 05:24:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xac) [ 2566.479131] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2566.529065] EXT4-fs (loop1): invalid first ino: 0 05:24:26 executing program 5: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8001, 0x101000) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/40) 05:24:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c6, 0x68) 05:24:26 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000604000000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2566.610763] overlayfs: filesystem on './file0' not supported as upperdir 05:24:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xad) 05:24:26 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000400a000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:26 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x94) 05:24:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="6765460f30c74424008af00000c7442402ffffff7fc7442406000000000f011c2443f436660f3882ae996b0000c74424008e000000c744240238cf0000ff2c24360f01c866baf80cb889bd968eef66bafc0cb01eee3e0f35410f0d94e1e0380000c4e1f85a11", 0x66}], 0x1, 0x1, &(0x7f0000000240), 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:24:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c7, 0x68) [ 2566.815043] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2566.869860] EXT4-fs (loop3): invalid first ino: 0 [ 2566.872288] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:27 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xae) [ 2566.934395] EXT4-fs (loop1): invalid first ino: 0 05:24:27 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) recvfrom$llc(r0, &(0x7f0000000000)=""/252, 0xfc, 0x2000, &(0x7f0000000100)={0x1a, 0x337, 0x7, 0x5, 0x100000000, 0x7}, 0x10) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xeabe) 05:24:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c8, 0x68) [ 2567.005127] overlayfs: filesystem on './file0' not supported as upperdir 05:24:27 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x401, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r1, 0x80000, r2}) fcntl$setlease(r0, 0x400, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {0x0}, {&(0x7f0000005b00)=""/119, 0x77}, {0x0}], 0x5, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{0x0}, {&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x3, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r5 = accept$alg(r3, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000340)=0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="04002dbd7000fddbdf250a0000001c000500040002000c000200080001001d00000008000100756470006c00040014000700080001000000000008000300010000800c00010073797a30000000001400010062726f6164636173742d6c696e6b000034000700080001000e0000000800040001000000080003007600000008000100170000000800030000000000080001001500000020000700080002000800000008000100090000000c0004000000000000001c0010000700"], 0x1}, 0x1, 0x0, 0x0, 0x4008844}, 0x20000011) accept(r2, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x80) recvmmsg(r5, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000300)={0x7f, 0xffff, 0xfffffffffffffff8, 0xec, &(0x7f0000000200)=""/236, 0x22, &(0x7f0000000100)=""/34, 0x6b, &(0x7f0000000140)=""/107}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7509000000000000002e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c007682793066f4644ed454e6ef856793bfb5e363644e8353e3db5f82d74529fb9b30a7b7b9cecb6ed03dfc338d8ce3a679207767fd8878c443f15e94ac55279acf4d8dd2584c4a68e47138a2f55ae24b919aded33e2f35eb476e9bbe8fec7dd6edb60e8f2b8f3a58e032be903853caf90b1d40c427bb9a605661f8f8d7225db9c8d06e1db2db431641e2850f9af2ebfc28edaa1ea421b544d80f696ff5ea1f6eae8887fdf2d833f00418"]) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={0x0, @bcast, @netrom={'nr', 0x0}, 0x40, 'syz1\x00', @default, 0x1, 0x7, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @bcast]}) ioctl$KVM_NMI(r7, 0xae9a) [ 2567.070473] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2567.118437] EXT4-fs (loop1): invalid first ino: 0 05:24:27 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir==./dir=./fild1\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)=""/186, &(0x7f0000000040)=0xba) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) r2 = getuid() lstat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f0000000140)='./file1\x00', 0xffffffffffffd770, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="76e2d1f6b58bfa761e4e6c5c274e5ce69fa1571c108a3228cf73a2da0003f64156c508f5b8e10ec2b0d353c9f47a9c7caefc18bff6dd7dc511bfdbd7f20a958329836a09a1daf23ff08f3a617c492abe6ad0ac70db9a9c09278aa886da2806014b5e04826cbd9133d6148c426c2e1a46d32629f36548d88b03516e24c7f3e8dab4481f063c9c92ed9828dc4a96d8921a7c9b8ab92972d678fc7cf35336101ba52aa97fe4b8db5c95e524d362ba05", 0xae, 0x2}, {&(0x7f00000003c0)="a437020d3a337326a228c27a5efef09f265f1c6138081dee612181fb6915f7062d148fc1ebd5ba03c93948f0a18b4fc8f906", 0x32, 0xfffffffffffffff8}], 0x9004, &(0x7f0000000500)={[{@acl='acl'}, {@acl='acl'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@acl='acl'}], [{@hash='hash'}, {@fowner_lt={'fowner<', r2}}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}, {@uid_gt={'uid>', r3}}]}) 05:24:27 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x2) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x9, 0x9, "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", 0xa1, 0x17, 0xed, 0x5, 0x1, 0x0, 0x7}, r3}}, 0x120) write$P9_RGETATTR(r0, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x3, 0x4}, 0x20, r1, r2, 0x9, 0x4, 0xb9, 0x0, 0x20, 0xd9, 0xfffffffffffffffa, 0x80000000, 0x100000000, 0x9, 0x1, 0x100000000, 0xffff, 0x8d23, 0x7fffffff}}, 0xa0) ioctl$void(r0, 0x40000000005451) 05:24:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c9, 0x68) 05:24:27 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004022000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:27 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xaf) 05:24:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ca, 0x68) [ 2567.331318] overlayfs: missing 'lowerdir' [ 2567.511629] overlayfs: missing 'lowerdir' [ 2567.516467] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1cb, 0x68) 05:24:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa0400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @random="c3e58eea1aa9"}) flock(r0, 0x8) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1004501, 0x5) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip6_vti0\x00', @broadcast}) [ 2567.583428] EXT4-fs (loop1): invalid first ino: 0 05:24:27 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xb0) 05:24:27 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2567.671393] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2567.719705] EXT4-fs (loop1): invalid first ino: 0 05:24:28 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004023000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2567.954813] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2567.959121] overlayfs: filesystem on './file0' not supported as upperdir [ 2567.999058] EXT4-fs (loop1): invalid first ino: 0 05:24:28 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x401, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r1, 0x80000, r2}) fcntl$setlease(r0, 0x400, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {0x0}, {&(0x7f0000005b00)=""/119, 0x77}, {0x0}], 0x5, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{0x0}, {&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x3, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r5 = accept$alg(r3, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000340)=0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="04002dbd7000fddbdf250a0000001c000500040002000c000200080001001d00000008000100756470006c00040014000700080001000000000008000300010000800c00010073797a30000000001400010062726f6164636173742d6c696e6b000034000700080001000e0000000800040001000000080003007600000008000100170000000800030000000000080001001500000020000700080002000800000008000100090000000c0004000000000000001c0010000700"], 0x1}, 0x1, 0x0, 0x0, 0x4008844}, 0x20000011) accept(r2, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x80) recvmmsg(r5, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000300)={0x7f, 0xffff, 0xfffffffffffffff8, 0xec, &(0x7f0000000200)=""/236, 0x22, &(0x7f0000000100)=""/34, 0x6b, &(0x7f0000000140)=""/107}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7509000000000000002e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c007682793066f4644ed454e6ef856793bfb5e363644e8353e3db5f82d74529fb9b30a7b7b9cecb6ed03dfc338d8ce3a679207767fd8878c443f15e94ac55279acf4d8dd2584c4a68e47138a2f55ae24b919aded33e2f35eb476e9bbe8fec7dd6edb60e8f2b8f3a58e032be903853caf90b1d40c427bb9a605661f8f8d7225db9c8d06e1db2db431641e2850f9af2ebfc28edaa1ea421b544d80f696ff5ea1f6eae8887fdf2d833f00418"]) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={0x0, @bcast, @netrom={'nr', 0x0}, 0x40, 'syz1\x00', @default, 0x1, 0x7, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @bcast]}) ioctl$KVM_NMI(r7, 0xae9a) 05:24:28 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) fallocate(r0, 0x2, 0x6, 0xa69a) 05:24:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1cc, 0x68) 05:24:28 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xb1) 05:24:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f4"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2568.079044] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:28 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x204, 0x0) [ 2568.146627] EXT4-fs (loop1): invalid first ino: 0 05:24:28 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000402c000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1cd, 0x68) 05:24:28 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xb2) [ 2568.247180] binder: 2848:2849 ioctl c018620b 0 returned -14 [ 2568.310694] binder_thread_release: 3 callbacks suppressed [ 2568.310706] binder: release 2848:2849 transaction 324 out, still active 05:24:28 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf303, 0x20000) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0x8) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2568.388897] binder: undelivered TRANSACTION_COMPLETE [ 2568.400718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ce, 0x68) [ 2568.445785] binder: send failed reply for transaction 324, target dead [ 2568.478427] EXT4-fs (loop1): invalid first ino: 0 [ 2568.557764] binder: 2871:2873 ioctl c018620b 0 returned -14 [ 2568.609739] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2568.648224] binder: send failed reply for transaction 326 to 2871:2878 [ 2568.654905] EXT4-fs (loop1): invalid first ino: 0 [ 2568.655105] binder: undelivered TRANSACTION_COMPLETE [ 2568.666020] binder: undelivered TRANSACTION_ERROR: 29189 05:24:29 executing program 3 (fault-call:8 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:29 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb3) 05:24:29 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x400) 05:24:29 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000402d000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1cf, 0x68) [ 2569.019481] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2569.045851] EXT4-fs (loop1): invalid first ino: 0 [ 2569.062090] binder: 2892:2895 ioctl c018620b 0 returned -14 05:24:29 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x62, 0x200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x88e, @local, 0x393}, 0x1c) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x20c880) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000001c0)=""/93) 05:24:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x68) [ 2569.071172] binder: 2900:2902 ioctl c018620b 0 returned -14 [ 2569.147994] binder: release 2900:2906 transaction 328 out, still active [ 2569.154973] binder: release 2900:2902 transaction 328 in, still active [ 2569.159382] binder: BINDER_SET_CONTEXT_MGR already set [ 2569.167052] binder: undelivered TRANSACTION_COMPLETE 05:24:29 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb4) [ 2569.194315] binder: 2892:2908 ioctl 40046207 0 returned -16 [ 2569.204617] binder: send failed reply for transaction 328, target dead 05:24:29 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004048000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:29 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2569.290989] binder: release 2892:2915 transaction 329 out, still active [ 2569.297788] binder: undelivered TRANSACTION_COMPLETE 05:24:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:24:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d1, 0x68) [ 2569.349314] binder: send failed reply for transaction 329, target dead [ 2569.373194] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:29 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb5) [ 2569.450155] EXT4-fs (loop1): invalid first ino: 0 05:24:29 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) [ 2569.502149] binder: 2930:2932 ioctl c018620b 0 returned -14 [ 2569.523622] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2569.563978] EXT4-fs (loop1): invalid first ino: 0 05:24:29 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000404c000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2569.594225] binder: release 2930:2932 transaction 331 in, still active [ 2569.601305] binder: release 2930:2941 transaction 331 out, still active [ 2569.611827] binder: undelivered TRANSACTION_COMPLETE [ 2569.626148] binder: send failed reply for transaction 331, target dead [ 2569.741095] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2569.748931] EXT4-fs (loop1): invalid first ino: 0 [ 2569.795098] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2569.803368] EXT4-fs (loop1): invalid first ino: 0 05:24:30 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') r2 = getpgrp(0xffffffffffffffff) waitid(0x3, r2, &(0x7f0000000400), 0x80000001, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="6ef97ea3a9a68456ac205f1e10ff46c298adf7b26fe425cb9638d6da6efe7624a06d56b20961d6a630c8a7aaba0ee47865fafd0ef23ae6da430b7257b471676400db7a8d2df9fc6e63ecc3cc3a81ed554a59da2876af194c35784eeb581a036f89836affda68fcdb1ec17a94d412e736f17e411f6813b74d7cbcde0311b69523773a22a49b21d2adcaf9993ad415d44de6014e8b9451b2154396accf40e52f2ecc6d2c25b2ac9dc6f9f4189cf445") exit(0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0xffffff1d, 0x3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x0f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x00\x00\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\xd4Kn\x97}\x13\xa3Sk\xdbDn\x05\x92\xcb\xdc\xa4\x1f\xff\xcc\xd1\x8e(\x82&{f\xae)\x10\x14\x87\xc3\x8a\xeeE\xbaj\xd9\xd5F\xeaw\xa6\xcb:\xdc\x9e\x19\x01z%\xf3\xb6Yh') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000001c0)={0xff, 0x5}) accept(r0, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000200)=0x80) accept$inet6(r4, 0x0, &(0x7f0000000540)) 05:24:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x68) 05:24:30 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) 05:24:30 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb6) 05:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x2, 0x0) 05:24:30 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004060000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2569.910818] binder: 2958:2959 ioctl c018620b 0 returned -14 05:24:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d3, 0x68) 05:24:30 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xa0, 0x0) [ 2569.996708] binder: release 2958:2972 transaction 333 out, still active [ 2570.003859] binder_alloc: binder_alloc_mmap_handler: 2958 20010000-20013000 already mapped failed -16 [ 2570.006188] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2570.017518] binder: undelivered TRANSACTION_COMPLETE [ 2570.060873] EXT4-fs (loop1): invalid first ino: 0 [ 2570.075723] binder: 2958:2979 ioctl c018620b 0 returned -14 05:24:30 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb7) [ 2570.116664] binder: BINDER_SET_CONTEXT_MGR already set [ 2570.124867] binder: 2958:2972 ioctl 40046207 0 returned -16 [ 2570.150577] binder_alloc: 2958: binder_alloc_buf, no vma 05:24:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d4, 0x68) 05:24:30 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x1000000) [ 2570.176856] binder: 2958:2979 transaction failed 29189/-3, size 0-0 line 3035 [ 2570.181749] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2570.223731] binder: release 2958:2959 transaction 333 in, still active [ 2570.225009] EXT4-fs (loop1): invalid first ino: 0 [ 2570.246778] binder: send failed reply for transaction 333, target dead 05:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4b47, 0x0) [ 2570.286455] binder: undelivered TRANSACTION_ERROR: 29189 [ 2570.390553] binder: 3000:3001 ioctl c018620b 0 returned -14 [ 2570.470077] binder: 3000:3001 ioctl 4b47 0 returned -22 [ 2570.475899] binder: release 3000:3005 transaction 336 out, still active [ 2570.483233] binder: undelivered TRANSACTION_COMPLETE [ 2570.489759] binder_alloc: binder_alloc_mmap_handler: 3000 20010000-20013000 already mapped failed -16 [ 2570.520800] binder: 3000:3001 ioctl c018620b 0 returned -14 [ 2570.534904] binder: BINDER_SET_CONTEXT_MGR already set [ 2570.543496] binder_alloc: 3000: binder_alloc_buf, no vma [ 2570.549886] binder: 3000:3005 ioctl 40046207 0 returned -16 [ 2570.555734] binder: 3000:3008 transaction failed 29189/-3, size 0-0 line 3035 [ 2570.563475] binder: 3000:3005 ioctl 4b47 0 returned -22 [ 2570.569309] binder: undelivered TRANSACTION_ERROR: 29189 [ 2570.576310] binder: release 3000:3001 transaction 336 in, still active [ 2570.589438] binder: send failed reply for transaction 336, target dead 05:24:30 executing program 2: syz_open_dev$vivid(0x0, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$KDENABIO(r0, 0x4b36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r1, 0x5424, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x0, [0x7]}, 0x2c) semget$private(0x0, 0x3, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, 0x0, &(0x7f0000000080)) getdents64(r1, &(0x7f0000000380)=""/220, 0xdc) 05:24:30 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004068000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d5, 0x68) 05:24:30 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xb8) 05:24:30 executing program 5: gettid() msgget$private(0x0, 0x12) 05:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4b49, 0x0) [ 2570.819280] binder: 3018:3025 ioctl c018620b 0 returned -14 [ 2570.822267] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d6, 0x68) 05:24:31 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) write$P9_RSYMLINK(0xffffffffffffff9c, &(0x7f0000000000)={0x14, 0x11, 0x2, {0xe, 0x4, 0x7}}, 0x14) [ 2570.867956] EXT4-fs (loop1): invalid first ino: 0 05:24:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x1000, @dev}}, 0x0, 0x0, 0x0, 0x2}, 0x98) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdd9, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 2570.890898] binder: 3018:3025 ioctl 4b49 0 returned -22 [ 2570.896357] binder: undelivered TRANSACTION_COMPLETE [ 2570.902660] binder_alloc: binder_alloc_mmap_handler: 3018 20010000-20013000 already mapped failed -16 [ 2570.917143] binder: 3018:3035 ioctl c018620b 0 returned -14 05:24:31 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb9) [ 2570.963981] binder: BINDER_SET_CONTEXT_MGR already set [ 2570.979700] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:31 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2571.029084] EXT4-fs (loop1): invalid first ino: 0 [ 2571.034314] binder_alloc: 3018: binder_alloc_buf, no vma [ 2571.043515] binder: 3018:3025 ioctl 40046207 0 returned -16 [ 2571.085520] binder: 3018:3045 transaction failed 29189/-3, size 0-0 line 3035 [ 2571.092513] binder: 3018:3054 ioctl 4b49 0 returned -22 05:24:31 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000406c000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d7, 0x68) 05:24:31 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2571.165294] binder: send failed reply for transaction 339, target dead [ 2571.175149] binder: undelivered TRANSACTION_ERROR: 29189 05:24:31 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xba) 05:24:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x541b, 0x0) [ 2571.349513] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:31 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2571.401257] EXT4-fs (loop1): invalid first ino: 0 05:24:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d8, 0x68) [ 2571.452078] binder: 3080:3083 ioctl c018620b 0 returned -14 [ 2571.510043] binder: 3080:3083 ioctl 541b 0 returned -22 [ 2571.515619] binder: undelivered TRANSACTION_COMPLETE [ 2571.526166] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2571.546302] binder_alloc: binder_alloc_mmap_handler: 3080 20010000-20013000 already mapped failed -16 05:24:31 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xbb) [ 2571.584816] EXT4-fs (loop1): invalid first ino: 0 05:24:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d9, 0x68) [ 2571.615653] binder: 3080:3102 ioctl c018620b 0 returned -14 05:24:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x1000, @dev}}, 0x0, 0x0, 0x0, 0x2}, 0x98) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdd9, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 2571.661542] binder: BINDER_SET_CONTEXT_MGR already set 05:24:31 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x9d, 0x6b65}, 0x2) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x18cb089f) [ 2571.683737] binder: 3080:3083 ioctl 40046207 0 returned -16 05:24:31 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004074000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2571.729918] binder_alloc: 3080: binder_alloc_buf, no vma [ 2571.731117] binder: 3080:3110 ioctl 541b 0 returned -22 [ 2571.758503] binder: 3080:3102 transaction failed 29189/-3, size 0-0 line 3035 05:24:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1da, 0x68) [ 2571.809543] binder: send failed reply for transaction 342, target dead 05:24:32 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x202, 0x4) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f00000000c0)="b0b1312491a2b7c5c8c12d9b6a4e6ac96826b0d0a9306ec95d0a55cb15d374e42c4279fd591545824aae300efb8aec8ba686132a5605788bded053a159819e9a40b4cffc4655eca3c1fccaddc20a2f1887ca2499d7695b13bb43045e05ee9a648d8d76109f24b4889d004616874f7dc0c22574f2c000d149a141fec48f3a90280af30eaa83115cfb1817e40fbe6a1eb58cfc502e691e4b8ed2307ae51ffd3e", 0x9f, 0x400, 0x0, 0x1, r0}]) [ 2571.884308] binder: undelivered TRANSACTION_ERROR: 29189 [ 2571.908214] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5421, 0x0) 05:24:32 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xbc) [ 2571.958895] EXT4-fs (loop1): invalid first ino: 0 05:24:32 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000407a000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1db, 0x68) [ 2572.122442] binder: 3144:3146 ioctl c018620b 0 returned -14 05:24:32 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockname$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @null, @bcast, @netrom, @remote, @netrom]}, &(0x7f0000000040)=0x48) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x70, 0x7, 0x5, 0x8dd, 0x1, 0x0, 0x0, 0x20400, 0x2, 0x0, 0x0, 0x4, 0x1, 0x10001, 0xa19f879, 0x7, 0x9, 0x7, 0x4, 0x7, 0x8, 0x4, 0x1d23, 0xfff, 0x7, 0x449a, 0x101, 0xffb, 0x4, 0x8, 0x2, 0xffffffffffff0001, 0x4, 0x6d82, 0xe3d, 0x2, 0x7e38, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x104, 0x400, 0x0, 0xb, 0x0, 0x81, 0x5}, r1, 0x0, r0, 0x7) sendto$rose(r0, &(0x7f0000000200)="a63c88c60a05e11677af65e9ee660fdadc63943506dfb5625aa86bb7384a547ae6a4c4936e246f9f7d1f40a71d1f2383e99573aa7d1c249ad4d27b8f6728019fe64d80b2263d96b0bf6badb4115e5543f44edad4ae56f9fc383a3892280b09e37976bb0a602202c6988c36df1a215d73f54e11947e53622473c6c089627bd8014e2491f7e55442f0156213089efab98998cca79f45c348137ab5dc0e3b9ecd5a532d89e9f744ac974fbf7bd41c1f2be4cf4dc74e47f234e3e9c9e9d8fb32e13182e95d", 0xc3, 0x0, &(0x7f0000000300)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) [ 2572.187413] binder_alloc: binder_alloc_mmap_handler: 3144 20010000-20013000 already mapped failed -16 [ 2572.206209] binder: undelivered TRANSACTION_COMPLETE [ 2572.233676] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2572.242195] binder: 3144:3158 ioctl c018620b 0 returned -14 [ 2572.268883] EXT4-fs (loop1): invalid first ino: 0 05:24:32 executing program 2: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000880)='syz0\x00', 0x200002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close(r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) getpeername(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000c000000a78600000400000009000000757a480990fe6fffdd5ebec7fefb49d38ef325a47a044094d0e80db7bd6e4e30a6f5779ce5cf52f433"]) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x0, @win={{0x400, 0x100000001, 0xffff, 0xb8}, 0x9, 0x9, &(0x7f0000000380)={{0x1, 0x1, 0x7ff, 0x63907be4}, &(0x7f0000000280)={{0x7, 0x80000001, 0x3f, 0x7fffffff}, &(0x7f0000000040)={{0x3c800000000, 0xc, 0x4, 0x4}}}}, 0x6, &(0x7f00000003c0)="fe399bc4a7774597cd5cafa8fca7079fd3c5df63303941559f69fac2def64772bf0958d3bb2ca41759935abcee71d580c385bbfdaf31cfbb168fbb5c37704a5e578771f138a2e504384dd2988de81b87fd7fce337573a1189da9b2ebfe1a3296f469e7be7c06c455f4542e", 0x4}}) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em0\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000780)) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x7, 0x200000) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000680)={@null=' \x00', 0x2, 'bridge_slave_1\x00'}) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) rmdir(&(0x7f0000000340)='./file0//ile0\x00') creat(&(0x7f0000000d00)='./file0//ile0\x00', 0x0) 05:24:32 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xbd) [ 2572.287962] binder: BINDER_SET_CONTEXT_MGR already set [ 2572.299316] binder: 3144:3149 ioctl 40046207 0 returned -16 [ 2572.332476] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2572.341276] binder_alloc: 3144: binder_alloc_buf, no vma [ 2572.342178] binder: send failed reply for transaction 345, target dead [ 2572.371795] EXT4-fs (loop1): invalid first ino: 0 05:24:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1dc, 0x68) 05:24:32 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$SIOCRSACCEPT(r0, 0x89e3) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80060202}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1800000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x29}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x33}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdf}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x9f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) [ 2572.397892] binder: 3144:3158 transaction failed 29189/-3, size 0-0 line 3035 [ 2572.433641] binder: undelivered TRANSACTION_ERROR: 29189 05:24:32 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040fc000040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5450, 0x0) 05:24:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1dd, 0x68) 05:24:32 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xbe) [ 2572.669002] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2572.703518] binder: 3199:3206 ioctl c018620b 0 returned -14 05:24:32 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000000)) [ 2572.716960] EXT4-fs (loop1): invalid first ino: 0 05:24:33 executing program 2: 05:24:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1de, 0x68) [ 2572.788820] binder_alloc: binder_alloc_mmap_handler: 3199 20010000-20013000 already mapped failed -16 [ 2572.805102] binder: 3199:3206 ioctl c018620b 0 returned -14 [ 2572.812081] binder: BINDER_SET_CONTEXT_MGR already set [ 2572.817414] binder: 3199:3206 ioctl 40046207 0 returned -16 [ 2572.827615] binder_alloc: 3199: binder_alloc_buf, no vma [ 2572.846808] binder: 3199:3214 transaction failed 29189/-3, size 0-0 line 3035 [ 2572.872707] binder: send failed reply for transaction 348, target dead [ 2572.873054] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2572.889704] binder: undelivered TRANSACTION_ERROR: 29189 05:24:33 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xbf) [ 2572.912032] EXT4-fs (loop1): invalid first ino: 0 05:24:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5451, 0x0) 05:24:33 executing program 2: 05:24:33 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x100000000000002f, @local, 0x4e23, 0x4, 'nq\x00', 0x800000000031, 0x87, 0x2}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4e1d, 0x12000, 0x0, 0x8, 0x80000001}}, 0x44) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x4) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@local}, &(0x7f0000000040)=0xc) 05:24:33 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000030040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1df, 0x68) 05:24:33 executing program 2: [ 2573.163805] binder: 3246:3251 ioctl c018620b 0 returned -14 05:24:33 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xc0) 05:24:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e0, 0x68) [ 2573.254867] binder_alloc: binder_alloc_mmap_handler: 3246 20010000-20013000 already mapped failed -16 [ 2573.303847] binder: 3246:3251 ioctl c018620b 0 returned -14 [ 2573.304413] binder: BINDER_SET_CONTEXT_MGR already set [ 2573.336242] binder_alloc: 3246: binder_alloc_buf, no vma [ 2573.342550] binder: 3246:3261 ioctl 40046207 0 returned -16 05:24:33 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x202000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x8, 0x100000001, 0x100000000, 0x0, 0xff, 0x6, 0x4, 0x6, 0x4, 0x6, 0x2, 0x1, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffa, 0xfff, 0x2, 0xef99, 0x7fff}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2573.348559] binder: 3246:3262 transaction failed 29189/-3, size 0-0 line 3035 [ 2573.399363] binder_thread_release: 9 callbacks suppressed [ 2573.399374] binder: release 3246:3251 transaction 351 in, still active [ 2573.438905] binder: undelivered TRANSACTION_ERROR: 29189 05:24:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5452, 0x0) 05:24:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e1, 0x68) 05:24:33 executing program 5: keyctl$session_to_parent(0x12) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) memfd_create(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xfffffffffffffffd, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000100)={0x1, 0xfffffffffffffffb, 0x8}) ioctl$VT_RELDISP(r1, 0x5605) 05:24:33 executing program 2: [ 2573.572459] binder: 3276:3279 ioctl c018620b 0 returned -14 [ 2573.584350] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:33 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xc1) [ 2573.648065] EXT4-fs (loop1): invalid first ino: 0 [ 2573.672077] binder: release 3276:3279 transaction 354 out, still active [ 2573.682091] binder_release_work: 2 callbacks suppressed [ 2573.682097] binder: undelivered TRANSACTION_COMPLETE [ 2573.694124] binder_alloc: binder_alloc_mmap_handler: 3276 20010000-20013000 already mapped failed -16 05:24:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e2, 0x68) [ 2573.722499] binder: 3276:3279 ioctl c018620b 0 returned -14 [ 2573.761680] binder: BINDER_SET_CONTEXT_MGR already set [ 2573.791829] binder_alloc: 3276: binder_alloc_buf, no vma [ 2573.798165] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2573.821210] binder: 3276:3279 ioctl 40046207 0 returned -16 [ 2573.856737] binder: 3276:3285 transaction failed 29189/-3, size 0-0 line 3035 [ 2573.859807] EXT4-fs (loop1): invalid first ino: 0 [ 2573.889501] binder_send_failed_reply: 1 callbacks suppressed [ 2573.889508] binder: send failed reply for transaction 354, target dead [ 2573.926407] binder: undelivered TRANSACTION_ERROR: 29189 05:24:34 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1fe, 0x8000) 05:24:34 executing program 2: 05:24:34 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc2) 05:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5460, 0x0) 05:24:34 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004010040040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e3, 0x68) 05:24:34 executing program 2: 05:24:34 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2000000000000008, 0x400) [ 2574.089296] binder: 3322:3333 ioctl c018620b 0 returned -14 [ 2574.150015] binder: release 3322:3338 transaction 357 out, still active [ 2574.156891] binder: undelivered TRANSACTION_COMPLETE [ 2574.163781] binder_alloc: binder_alloc_mmap_handler: 3322 20010000-20013000 already mapped failed -16 [ 2574.186334] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e4, 0x68) 05:24:34 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc3) [ 2574.211809] EXT4-fs (loop1): invalid first ino: 0 [ 2574.228272] binder: 3322:3333 ioctl c018620b 0 returned -14 [ 2574.256488] binder: BINDER_SET_CONTEXT_MGR already set [ 2574.275203] binder_alloc: 3322: binder_alloc_buf, no vma 05:24:34 executing program 2: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000880)='syz0\x00', 0x200002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close(r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) getpeername(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000c000000a78600000400000009000000757a480990fe6fffdd5ebec7fefb49d38ef325a47a044094d0e80db7bd6e4e30a6f5779ce5cf52f433"]) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x0, @win={{0x400, 0x100000001, 0xffff, 0xb8}, 0x9, 0x9, &(0x7f0000000380)={{0x1, 0x1, 0x7ff, 0x63907be4}, &(0x7f0000000280)={{0x7, 0x80000001, 0x3f, 0x7fffffff}, &(0x7f0000000040)={{0x3c800000000, 0xc, 0x4, 0x4}}}}, 0x6, &(0x7f00000003c0)="fe399bc4a7774597cd5cafa8fca7079fd3c5df63303941559f69fac2def64772bf0958d3bb2ca41759935abcee71d580c385bbfdaf31cfbb168fbb5c37704a5e578771f138a2e504384dd2988de81b87fd7fce337573a1189da9b2ebfe1a3296f469e7be7c06c455f4542e", 0x4}}) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em0\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000780)) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x7, 0x200000) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000680)={@null=' \x00', 0x2, 'bridge_slave_1\x00'}) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) rmdir(&(0x7f0000000340)='./file0//ile0\x00') creat(&(0x7f0000000d00)='./file0//ile0\x00', 0x0) [ 2574.315181] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2574.353394] binder: 3322:3333 ioctl 40046207 0 returned -16 05:24:34 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000140)=0x4) dup2(r0, r0) sendto$ax25(r0, &(0x7f0000000040)="0ef5b55f99ded83628b207d8cdc76fb7403d9d5bb06acbcd0300b8b69655dfcc70b3b36d597a245274afe1c74e9ab1726b8c92165f9229e77db500bef806e3f16c44c8d7d82ea411bc3795446f0aca8b7b7f3706d668458dfec4b5785b0df55c24a421e57ffa27584ccff62e7615b60bac6879b74ae8fedf8a1e7ffaaaa12ca96f25a8667332783eff62d15c82b2a68fb77f27274e6737ea9f43497db077bccd983371e5a327d41d7226469c4390abfc1132887ab7b4a7edd79288b7f944bf598a19229ecc", 0xc5, 0x4, 0x0, 0x0) 05:24:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e5, 0x68) [ 2574.353985] binder: release 3322:3333 transaction 357 in, still active [ 2574.367339] EXT4-fs (loop1): invalid first ino: 0 [ 2574.397969] binder: send failed reply for transaction 357, target dead [ 2574.403225] binder: 3322:3338 transaction failed 29189/-3, size 0-0 line 3035 05:24:34 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000050040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2574.458533] binder: undelivered TRANSACTION_ERROR: 29189 05:24:34 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xc4) 05:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 05:24:34 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x6, 0x8001, 0x6}) [ 2574.627614] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e6, 0x68) 05:24:34 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x301002, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x3, 0x0, 0x1f, 0x0, 0x4c4}, 0x27d07e20, 0x8, 0x9}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0xffff, 0x7}}, 0x30) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) [ 2574.704244] EXT4-fs (loop1): invalid first ino: 0 [ 2574.708950] binder: 3375:3381 ioctl c018620b 0 returned -14 05:24:34 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000060040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2574.786410] binder: release 3375:3384 transaction 360 out, still active [ 2574.794508] binder: 3375:3381 ioctl 40046205 0 returned -22 [ 2574.805982] binder: undelivered TRANSACTION_COMPLETE 05:24:35 executing program 2: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000880)='syz0\x00', 0x200002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close(r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) getpeername(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000c000000a78600000400000009000000757a480990fe6fffdd5ebec7fefb49d38ef325a47a044094d0e80db7bd6e4e30a6f5779ce5cf52f433"]) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x0, @win={{0x400, 0x100000001, 0xffff, 0xb8}, 0x9, 0x9, &(0x7f0000000380)={{0x1, 0x1, 0x7ff, 0x63907be4}, &(0x7f0000000280)={{0x7, 0x80000001, 0x3f, 0x7fffffff}, &(0x7f0000000040)={{0x3c800000000, 0xc, 0x4, 0x4}}}}, 0x6, &(0x7f00000003c0)="fe399bc4a7774597cd5cafa8fca7079fd3c5df63303941559f69fac2def64772bf0958d3bb2ca41759935abcee71d580c385bbfdaf31cfbb168fbb5c37704a5e578771f138a2e504384dd2988de81b87fd7fce337573a1189da9b2ebfe1a3296f469e7be7c06c455f4542e", 0x4}}) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em0\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000780)) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x7, 0x200000) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000680)={@null=' \x00', 0x2, 'bridge_slave_1\x00'}) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) rmdir(&(0x7f0000000340)='./file0//ile0\x00') creat(&(0x7f0000000d00)='./file0//ile0\x00', 0x0) [ 2574.827351] binder_alloc: binder_alloc_mmap_handler: 3375 20010000-20013000 already mapped failed -16 05:24:35 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xc5) [ 2574.904333] binder: BINDER_SET_CONTEXT_MGR already set 05:24:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e7, 0x68) [ 2574.926365] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2574.944064] binder: 3375:3391 ioctl c018620b 0 returned -14 [ 2574.988132] binder: 3375:3381 ioctl 40046207 0 returned -16 [ 2575.008988] binder: 3375:3403 ioctl 40046205 0 returned -22 [ 2575.030276] binder_alloc: 3375: binder_alloc_buf, no vma 05:24:35 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x200002) socket$bt_hidp(0x1f, 0x3, 0x6) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x33d, 0x1ff, 0x5, 0x101, 0x0, @local}, 0x10) [ 2575.050209] EXT4-fs (loop1): invalid first ino: 0 [ 2575.101298] binder: release 3375:3381 transaction 360 in, still active [ 2575.110764] binder: send failed reply for transaction 360, target dead [ 2575.118071] binder: 3375:3384 transaction failed 29189/-3, size 0-0 line 3035 [ 2575.148946] binder: undelivered TRANSACTION_ERROR: 29189 05:24:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e8, 0x68) 05:24:35 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc6) 05:24:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046207, 0x0) [ 2575.222532] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:35 executing program 5: ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x1a, 0xfff, 0xc, 0x8, 0x2, 0x81}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x39, 0x12000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) [ 2575.275004] EXT4-fs (loop1): invalid first ino: 0 05:24:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e9, 0x68) 05:24:35 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000070040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:35 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x301002, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x3, 0x0, 0x1f, 0x0, 0x4c4}, 0x27d07e20, 0x8, 0x9}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0xffff, 0x7}}, 0x30) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) [ 2575.400376] binder: 3427:3428 ioctl c018620b 0 returned -14 05:24:35 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, {0x0, 0x4, 0x9, 0x9}}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000200)=0xfffffffffffffe70) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000280)='net/netfilter\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000240)=0x1) read(r0, &(0x7f00000000c0)=""/174, 0xae) [ 2575.468690] binder: release 3427:3435 transaction 363 out, still active [ 2575.470006] binder: BINDER_SET_CONTEXT_MGR already set [ 2575.491320] binder: 3427:3428 ioctl 40046207 0 returned -16 [ 2575.496053] binder: undelivered TRANSACTION_COMPLETE [ 2575.541409] binder_alloc: binder_alloc_mmap_handler: 3427 20010000-20013000 already mapped failed -16 05:24:35 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xc7) [ 2575.582908] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2575.645037] EXT4-fs (loop1): invalid first ino: 0 05:24:35 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc2a2, 0x4) [ 2575.668897] binder: 3427:3428 ioctl c018620b 0 returned -14 [ 2575.689347] binder: BINDER_SET_CONTEXT_MGR already set [ 2575.694813] binder: 3427:3428 ioctl 40046207 0 returned -16 [ 2575.694909] binder_alloc: 3427: binder_alloc_buf, no vma 05:24:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x4fc205b21cf5f040) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x127ff, 0x0, &(0x7f0000ffb000/0x3000)=nil}) sched_setscheduler(r3, 0x5, &(0x7f0000000100)) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080), 0xa59568830e3ea86b) 05:24:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ea, 0x68) [ 2575.719157] binder: 3427:3435 transaction failed 29189/-3, size 0-0 line 3035 [ 2575.726808] binder: undelivered TRANSACTION_ERROR: 29189 [ 2575.745995] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2575.753955] EXT4-fs (loop1): invalid first ino: 0 [ 2575.772307] binder: BINDER_SET_CONTEXT_MGR already set [ 2575.778503] binder: release 3427:3428 transaction 363 in, still active [ 2575.785985] binder: 3427:3435 ioctl 40046207 0 returned -16 [ 2575.793132] binder: send failed reply for transaction 363, target dead 05:24:36 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000090040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4004622f, 0x0) 05:24:36 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc8) 05:24:36 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff81, 0x0) [ 2575.991397] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="000627bd7000fedbdf2504000000140002000800050009000000080008000100000008000500080000000800040004000000080006000004000008000600001000000800040001800000080005000300000040000100080005000200000014000300000000000000000000000000000000010800020000000000080001000a0000000800080000000000080006007365640008000500fdffffff"], 0x1}, 0x1, 0x0, 0x0, 0x55}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000580)=0x78) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x6, 0xeb}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000680)) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') 05:24:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1eb, 0x68) [ 2576.049628] EXT4-fs (loop1): invalid first ino: 0 [ 2576.067103] binder: 3475:3479 ioctl c018620b 0 returned -14 05:24:36 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)={0x5, 0xfcbf}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xffffeffffffeffff, 0xc8001) [ 2576.127899] binder: release 3475:3487 transaction 366 out, still active [ 2576.135062] binder: 3475:3479 ioctl 4004622f 0 returned -22 [ 2576.157541] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2576.172077] binder: undelivered TRANSACTION_COMPLETE [ 2576.189503] EXT4-fs (loop1): invalid first ino: 0 [ 2576.211292] binder_alloc: binder_alloc_mmap_handler: 3475 20010000-20013000 already mapped failed -16 05:24:36 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc9) 05:24:36 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040000a0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ec, 0x68) [ 2576.261370] binder: 3475:3499 ioctl c018620b 0 returned -14 [ 2576.305409] binder: BINDER_SET_CONTEXT_MGR already set [ 2576.314489] binder: 3475:3487 ioctl 40046207 0 returned -16 [ 2576.341282] binder_alloc: 3475: binder_alloc_buf, no vma [ 2576.346793] binder: 3475:3499 transaction failed 29189/-3, size 0-0 line 3035 05:24:36 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xcb84, 0x0) [ 2576.410189] binder: release 3475:3479 transaction 366 in, still active [ 2576.416990] binder: send failed reply for transaction 366, target dead 05:24:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ed, 0x68) 05:24:36 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xca) [ 2576.496514] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2576.508253] binder: undelivered TRANSACTION_ERROR: 29189 05:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4004624a, 0x0) [ 2576.557446] *** Guest State *** [ 2576.599294] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2576.627489] EXT4-fs (loop1): invalid first ino: 0 05:24:36 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2200) setsockopt$inet6_tcp_buf(r0, 0x6, 0x2f, &(0x7f00000004c0)="741e0911f4c50dfb7cbbd1c12185259932ec50e8173a22d3666918a267d69ce6c164edbb732861ca0a500db26c5ee03473c802761e367c6090326da443e0ee7e7c435a773030ea244d395b6811c71842b038316e8544c8b11b1152fef1fd8a9f2294117d7dac00cab3906d9ca4bbf30d7911e5bde73279a171f61711", 0x7c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000400)=""/139) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="995d1d43fe70ff70540631f8de3e6954", 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xec, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x59}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) [ 2576.660111] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 05:24:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ee, 0x68) [ 2576.704107] binder: 3525:3530 ioctl c018620b 0 returned -14 [ 2576.728465] CR3 = 0x0000000000000000 [ 2576.745836] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2576.748453] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2576.780840] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 2576.788974] EXT4-fs (loop1): invalid first ino: 0 [ 2576.789103] binder: 3525:3530 ioctl 4004624a 0 returned -22 [ 2576.799730] binder: undelivered TRANSACTION_COMPLETE [ 2576.809295] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2576.839639] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2576.856533] binder_alloc: binder_alloc_mmap_handler: 3525 20010000-20013000 already mapped failed -16 [ 2576.869382] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2576.878443] binder: 3525:3536 ioctl c018620b 0 returned -14 [ 2576.905763] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2576.939016] binder: BINDER_SET_CONTEXT_MGR already set [ 2576.944469] binder: 3525:3530 ioctl 40046207 0 returned -16 [ 2576.944529] binder_alloc: 3525: binder_alloc_buf, no vma [ 2576.974546] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2576.992392] binder: 3525:3541 ioctl 4004624a 0 returned -22 [ 2576.996244] binder: 3525:3545 transaction failed 29189/-3, size 0-0 line 3035 [ 2577.009468] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2577.017605] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2577.027956] binder: undelivered TRANSACTION_ERROR: 29189 [ 2577.034277] binder: send failed reply for transaction 369, target dead [ 2577.061468] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2577.081124] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2577.106308] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2577.115945] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2577.124409] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2577.131325] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2577.141512] Interruptibility = 00000000 ActivityState = 00000000 [ 2577.148226] *** Host State *** [ 2577.152258] RIP = 0xffffffff811f9800 RSP = 0xffff8880960ff670 [ 2577.158626] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2577.165411] FSBase=00007fb3b203a700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 2577.173853] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2577.180058] CR0=0000000080050033 CR3=000000007b76b000 CR4=00000000001426f0 [ 2577.188471] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 2577.195377] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2577.202620] *** Control State *** [ 2577.206082] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 2577.212828] EntryControls=0000d1ff ExitControls=002fefff [ 2577.218324] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2577.225616] VMEntry: intr_info=800000e6 errcode=00000000 ilen=00000000 [ 2577.232482] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 2577.240813] reason=80000021 qualification=0000000000000000 [ 2577.247145] IDTVectoring: info=00000000 errcode=00000000 [ 2577.252809] TSC Offset = 0xfffffa9a2937fcad [ 2577.257158] TPR Threshold = 0x00 [ 2577.260756] EPT pointer = 0x000000008a06c01e 05:24:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r0, 0x43}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0xd, 0x803, 0x325) write(r2, &(0x7f0000000080)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 05:24:37 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xcb) 05:24:37 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040170f0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:37 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x20000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x401}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000140)=0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000002c0)={@broadcast, @local, 0x1, 0x6, [@broadcast, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2]}, 0x28) poll(&(0x7f0000000280)=[{r0, 0x2400}, {r0, 0x2000}, {r1, 0x8004}, {r0, 0x200}, {r1, 0x2000}, {r0, 0x40}, {r0, 0xc4}], 0x7, 0x9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r2, 0x48, "1330332a15615a698f61c2667efc57808ca0a52b399f58afd21bd24e6a96ee4706a16c48e9f954eddc81cb8f3b8685eaf4883006d96ce5adac206a4f6f338fc57511fc7812bb6ccd"}, &(0x7f0000000200)=0x50) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2000) 05:24:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1ef, 0x68) 05:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40049409, 0x0) [ 2577.366544] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2577.380267] binder: 3556:3562 ioctl c018620b 0 returned -14 [ 2577.427116] binder: undelivered TRANSACTION_COMPLETE [ 2577.433902] binder_alloc: binder_alloc_mmap_handler: 3556 20010000-20013000 already mapped failed -16 [ 2577.439511] EXT4-fs (loop1): invalid first ino: 0 [ 2577.464187] binder: 3556:3562 ioctl c018620b 0 returned -14 05:24:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f0, 0x68) 05:24:37 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0x56, "d63b5b282bed68551ea134af0b77d6e27ea151707f2f8496384ac2471db4b50c0112316cb231ab7e34b795f9b84ad834b21338c1c396861ca10f513b53cd311cf0f968859aa2a0cce291a09410de296b06b045518170"}, &(0x7f0000000200)=0x5e) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2577.475217] binder: BINDER_SET_CONTEXT_MGR already set [ 2577.484623] binder_alloc: 3556: binder_alloc_buf, no vma [ 2577.491058] binder: 3556:3572 ioctl 40046207 0 returned -16 [ 2577.497034] binder: 3556:3574 transaction failed 29189/-3, size 0-0 line 3035 [ 2577.505199] binder: undelivered TRANSACTION_ERROR: 29189 [ 2577.527287] binder: send failed reply for transaction 372, target dead [ 2577.580928] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:37 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xcc) [ 2577.623852] EXT4-fs (loop1): invalid first ino: 0 05:24:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x2000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={0x0, r1, 0xb, 0x3}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x7, &(0x7f0000000500)=[{&(0x7f0000000200)="b109f74bc53fbddb22ff4b0751705a87da154d6310a1166c224939f6554cadbee4a5feb858a677b65f8def86ed0e89511eceb52da7760589962b7bcd4f068ca6c991309754195097687fbad4b0caa6b4bc0f449d5d0076c634898ba4ffba9c99102f164815dd0f95f28fec5b6e22b53c4425b06a6521956591b88770bb3bf49f3aea7c090d2bdda8bcf9f819ee", 0x8d, 0x8}, {&(0x7f00000002c0)="bfda0cc0dbdf7a14444e5e747f26d57df872ec42c28e0e7e663047c80d752137270c4c4b6b34a70b67b3b90dbf94bc014646207ec81ecd9735c4732674494e3c41074bb893d6887732341f55e165aeabd3da75feef93d04c3f3ba6ec334f526abb352f67181d95b843c77edaca5dd4e0dd01f9b22a55a95c", 0x78, 0x200}, {&(0x7f0000000100)="5ecda6f6a9fdcad685e6cd29f3b3f615fca0319fb83da3de13c8b48339", 0x1d, 0xffffffff}, {&(0x7f0000000180)="8f998b25a149d963372c3323a43315b6d5fb5e18deeaa7be652e3d8823503667bc90468fb8", 0x25, 0x64b6}, {&(0x7f0000000340)="018b988b8372fafb42932cc5a85573cdcade3ae3", 0x14, 0x80000001}, {&(0x7f0000000380)="050824ceed933773f6ec6606bdca75e15b51b7a65385b5cbd8bd0307c2e827a3838ef8d2ae2a3f5896530137f34307ddbef1e27af38e0ec20f6ea23a7ed19fff865d26d9bb95166c0b883c514ba3d15da4210206f376243c7067ab15322c845c34e75c5d8b9e2ca14138fee4c19ddc3a2565d2fd82bdc20eb69e60a016b2e5635ab6754fd10b0ce6be614ba17bcc94ab8187efa928c275909d5348a2942ee9035ba9fcceb9f324f6dc6bccca8d1da4c142e2a0a58e9fa200ad5a9a1394dd81ad6aaf33ee5e4285c75f9bfb07f96e131af608b60a7a75ebcae8e1f283a4eb19ab239b3eb82ceacd69cda3de267fcb77deede2d4", 0xf3, 0x100000001}, {&(0x7f0000000480)="e90ae2253644f9bad8678c0127db7fa95920d27a1e81d673d4793a01052783ba1f0e62de6016256770f93a72da1c5a610739ae5b2d0f32f78c4bc44f88ac9b161402d8f96cab4c509ca8cb52e7c0d9075b1337", 0x53, 0xfffffffffffffff7}], 0x2000420, &(0x7f00000005c0)={[{@nobh='nobh'}, {@mblk_io_submit='mblk_io_submit'}, {@nouser_xattr='nouser_xattr'}, {@nogrpid='nogrpid'}, {@data_ordered='data=ordered'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@nolazytime='nolazytime'}, {@user_xattr='user_xattr'}, {@bh='bh'}], [{@appraise='appraise'}, {@appraise='appraise'}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 05:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40086602, 0x0) 05:24:37 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x26, "5a70888519a91b75acedba60e4bc69a359807537b51385e7f69e3a97e5534125f736b4ec3363"}, &(0x7f0000000040)=0x2e) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="b72332b789d8b3442e4f32007bdd288162a7cec37ddb4919fcd193e8b5188641c969b4de3dc4f17bacfaf6850185d8ab350f608a7f1588fcbcd35b5b6853b90828f5a0f8c3ba45f0a219f0e8c83c890700a2d30b777b0225093dfa00007bad4a9897c20fbaf7b6de5aae671c66c0a4cfefaa0f3337398f34a84fc921b9013a7c754d86a8a06e301f3f212d8564701647637e929538c744a2e3ce998e81939a463424835210ba925fed7bae4cc64a5d5170d2e3efa80add00000000000000000000000000"], 0x10) ioctl$RTC_UIE_OFF(r0, 0x7004) 05:24:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f1, 0x68) 05:24:38 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004004100040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:38 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xcd) [ 2577.800784] binder: 3592:3596 ioctl c018620b 0 returned -14 05:24:38 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f2, 0x68) [ 2577.905682] binder: undelivered TRANSACTION_COMPLETE [ 2577.905839] binder: 3592:3596 ioctl 40086602 0 returned -22 [ 2577.957167] binder_alloc: binder_alloc_mmap_handler: 3592 20010000-20013000 already mapped failed -16 [ 2577.978484] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2578.008086] EXT4-fs (loop1): invalid first ino: 0 [ 2578.010550] binder: 3592:3596 ioctl c018620b 0 returned -14 [ 2578.013741] binder: BINDER_SET_CONTEXT_MGR already set [ 2578.036174] binder_alloc: 3592: binder_alloc_buf, no vma [ 2578.045324] binder: 3592:3620 transaction failed 29189/-3, size 0-0 line 3035 05:24:38 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x800) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4400, 0x0) 05:24:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f3, 0x68) 05:24:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x2000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={0x0, r1, 0xb, 0x3}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x7, &(0x7f0000000500)=[{&(0x7f0000000200)="b109f74bc53fbddb22ff4b0751705a87da154d6310a1166c224939f6554cadbee4a5feb858a677b65f8def86ed0e89511eceb52da7760589962b7bcd4f068ca6c991309754195097687fbad4b0caa6b4bc0f449d5d0076c634898ba4ffba9c99102f164815dd0f95f28fec5b6e22b53c4425b06a6521956591b88770bb3bf49f3aea7c090d2bdda8bcf9f819ee", 0x8d, 0x8}, {&(0x7f00000002c0)="bfda0cc0dbdf7a14444e5e747f26d57df872ec42c28e0e7e663047c80d752137270c4c4b6b34a70b67b3b90dbf94bc014646207ec81ecd9735c4732674494e3c41074bb893d6887732341f55e165aeabd3da75feef93d04c3f3ba6ec334f526abb352f67181d95b843c77edaca5dd4e0dd01f9b22a55a95c", 0x78, 0x200}, {&(0x7f0000000100)="5ecda6f6a9fdcad685e6cd29f3b3f615fca0319fb83da3de13c8b48339", 0x1d, 0xffffffff}, {&(0x7f0000000180)="8f998b25a149d963372c3323a43315b6d5fb5e18deeaa7be652e3d8823503667bc90468fb8", 0x25, 0x64b6}, {&(0x7f0000000340)="018b988b8372fafb42932cc5a85573cdcade3ae3", 0x14, 0x80000001}, {&(0x7f0000000380)="050824ceed933773f6ec6606bdca75e15b51b7a65385b5cbd8bd0307c2e827a3838ef8d2ae2a3f5896530137f34307ddbef1e27af38e0ec20f6ea23a7ed19fff865d26d9bb95166c0b883c514ba3d15da4210206f376243c7067ab15322c845c34e75c5d8b9e2ca14138fee4c19ddc3a2565d2fd82bdc20eb69e60a016b2e5635ab6754fd10b0ce6be614ba17bcc94ab8187efa928c275909d5348a2942ee9035ba9fcceb9f324f6dc6bccca8d1da4c142e2a0a58e9fa200ad5a9a1394dd81ad6aaf33ee5e4285c75f9bfb07f96e131af608b60a7a75ebcae8e1f283a4eb19ab239b3eb82ceacd69cda3de267fcb77deede2d4", 0xf3, 0x100000001}, {&(0x7f0000000480)="e90ae2253644f9bad8678c0127db7fa95920d27a1e81d673d4793a01052783ba1f0e62de6016256770f93a72da1c5a610739ae5b2d0f32f78c4bc44f88ac9b161402d8f96cab4c509ca8cb52e7c0d9075b1337", 0x53, 0xfffffffffffffff7}], 0x2000420, &(0x7f00000005c0)={[{@nobh='nobh'}, {@mblk_io_submit='mblk_io_submit'}, {@nouser_xattr='nouser_xattr'}, {@nogrpid='nogrpid'}, {@data_ordered='data=ordered'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@nolazytime='nolazytime'}, {@user_xattr='user_xattr'}, {@bh='bh'}], [{@appraise='appraise'}, {@appraise='appraise'}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 2578.072307] binder: 3592:3609 ioctl 40086602 0 returned -22 [ 2578.087037] binder: 3592:3619 ioctl 40046207 0 returned -16 [ 2578.096657] binder: send failed reply for transaction 375, target dead [ 2578.107061] binder: undelivered TRANSACTION_ERROR: 29189 05:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40087602, 0x0) 05:24:38 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000400f170040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:38 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xce) 05:24:38 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x501000, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 05:24:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f4, 0x68) [ 2578.361549] binder: 3644:3648 ioctl c018620b 0 returned -14 [ 2578.380419] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2578.409079] EXT4-fs (loop1): invalid first ino: 0 05:24:38 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xcf) 05:24:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x2000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={0x0, r1, 0xb, 0x3}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x7, &(0x7f0000000500)=[{&(0x7f0000000200)="b109f74bc53fbddb22ff4b0751705a87da154d6310a1166c224939f6554cadbee4a5feb858a677b65f8def86ed0e89511eceb52da7760589962b7bcd4f068ca6c991309754195097687fbad4b0caa6b4bc0f449d5d0076c634898ba4ffba9c99102f164815dd0f95f28fec5b6e22b53c4425b06a6521956591b88770bb3bf49f3aea7c090d2bdda8bcf9f819ee", 0x8d, 0x8}, {&(0x7f00000002c0)="bfda0cc0dbdf7a14444e5e747f26d57df872ec42c28e0e7e663047c80d752137270c4c4b6b34a70b67b3b90dbf94bc014646207ec81ecd9735c4732674494e3c41074bb893d6887732341f55e165aeabd3da75feef93d04c3f3ba6ec334f526abb352f67181d95b843c77edaca5dd4e0dd01f9b22a55a95c", 0x78, 0x200}, {&(0x7f0000000100)="5ecda6f6a9fdcad685e6cd29f3b3f615fca0319fb83da3de13c8b48339", 0x1d, 0xffffffff}, {&(0x7f0000000180)="8f998b25a149d963372c3323a43315b6d5fb5e18deeaa7be652e3d8823503667bc90468fb8", 0x25, 0x64b6}, {&(0x7f0000000340)="018b988b8372fafb42932cc5a85573cdcade3ae3", 0x14, 0x80000001}, {&(0x7f0000000380)="050824ceed933773f6ec6606bdca75e15b51b7a65385b5cbd8bd0307c2e827a3838ef8d2ae2a3f5896530137f34307ddbef1e27af38e0ec20f6ea23a7ed19fff865d26d9bb95166c0b883c514ba3d15da4210206f376243c7067ab15322c845c34e75c5d8b9e2ca14138fee4c19ddc3a2565d2fd82bdc20eb69e60a016b2e5635ab6754fd10b0ce6be614ba17bcc94ab8187efa928c275909d5348a2942ee9035ba9fcceb9f324f6dc6bccca8d1da4c142e2a0a58e9fa200ad5a9a1394dd81ad6aaf33ee5e4285c75f9bfb07f96e131af608b60a7a75ebcae8e1f283a4eb19ab239b3eb82ceacd69cda3de267fcb77deede2d4", 0xf3, 0x100000001}, {&(0x7f0000000480)="e90ae2253644f9bad8678c0127db7fa95920d27a1e81d673d4793a01052783ba1f0e62de6016256770f93a72da1c5a610739ae5b2d0f32f78c4bc44f88ac9b161402d8f96cab4c509ca8cb52e7c0d9075b1337", 0x53, 0xfffffffffffffff7}], 0x2000420, &(0x7f00000005c0)={[{@nobh='nobh'}, {@mblk_io_submit='mblk_io_submit'}, {@nouser_xattr='nouser_xattr'}, {@nogrpid='nogrpid'}, {@data_ordered='data=ordered'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@nolazytime='nolazytime'}, {@user_xattr='user_xattr'}, {@bh='bh'}], [{@appraise='appraise'}, {@appraise='appraise'}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 2578.448909] binder: 3644:3648 ioctl 40087602 0 returned -22 [ 2578.461319] binder_thread_release: 5 callbacks suppressed [ 2578.461340] binder: release 3644:3655 transaction 378 out, still active [ 2578.482261] binder_alloc: binder_alloc_mmap_handler: 3644 20010000-20013000 already mapped failed -16 [ 2578.500890] binder: undelivered TRANSACTION_COMPLETE [ 2578.517520] binder: 3644:3648 ioctl c018620b 0 returned -14 [ 2578.546769] binder: BINDER_SET_CONTEXT_MGR already set [ 2578.572992] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2578.595784] binder: 3644:3669 ioctl 40087602 0 returned -22 05:24:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f5, 0x68) 05:24:38 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x90204, 0xfffffffffffffffc) r1 = getuid() r2 = getgid() write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, 0x5, {0x100, 0x1ff, 0x0, {0x1, 0x8, 0x8, 0x7f, 0x1, 0xddb7, 0x9, 0x1, 0x0, 0x81, 0x1, r1, r2, 0x1a8bb54f, 0x3}}}, 0x78) [ 2578.626186] binder_alloc: 3644: binder_alloc_buf, no vma [ 2578.636632] EXT4-fs (loop1): invalid first ino: 0 [ 2578.664028] binder: 3644:3655 ioctl 40046207 0 returned -16 [ 2578.674213] binder: release 3644:3648 transaction 378 in, still active [ 2578.688887] binder: 3644:3661 transaction failed 29189/-3, size 0-0 line 3035 [ 2578.693611] binder: send failed reply for transaction 378, target dead 05:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4020940d, 0x0) 05:24:38 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd0) 05:24:39 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="255e60d3c07761d68b075bb3a9c34fecc7d25500d6c74328594f3cf804b5b8db7cb9d5c9b64314b2fa2968de74ec530ef3e3c4c36555a3e3b32e0189447434df65", 0x41) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080), 0x0, 0x0, &(0x7f0000006340)) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) fanotify_init(0x20, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2000000000002) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) unshare(0x10000100) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x9}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x20, 0x4) [ 2578.748549] binder: undelivered TRANSACTION_ERROR: 29189 05:24:39 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040001f0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f6, 0x68) [ 2578.907782] binder: 3691:3696 ioctl c018620b 0 returned -14 05:24:39 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2000510000, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) [ 2579.013864] binder_alloc: binder_alloc_mmap_handler: 3691 20010000-20013000 already mapped failed -16 [ 2579.015040] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2579.023394] binder: release 3691:3706 transaction 381 out, still active [ 2579.023406] binder: undelivered TRANSACTION_COMPLETE [ 2579.051047] binder: 3691:3696 ioctl c018620b 0 returned -14 05:24:39 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd1) [ 2579.083903] binder: BINDER_SET_CONTEXT_MGR already set [ 2579.120980] binder_alloc: 3691: binder_alloc_buf, no vma 05:24:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f7, 0x68) [ 2579.163370] binder: 3691:3696 ioctl 40046207 0 returned -16 05:24:39 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000000c0)=0x6, 0x4) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x2, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x8000}) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="6a33ff01d706215a", 0x8, r1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x8008000) [ 2579.206634] binder: 3691:3706 transaction failed 29189/-3, size 0-0 line 3035 [ 2579.226125] EXT4-fs (loop1): invalid first ino: 0 [ 2579.255979] binder: release 3691:3696 transaction 381 in, still active [ 2579.269454] binder: send failed reply for transaction 381, target dead [ 2579.316909] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2579.329766] binder: undelivered TRANSACTION_ERROR: 29189 05:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x80086601, 0x0) 05:24:39 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd2) [ 2579.373703] EXT4-fs (loop1): invalid first ino: 0 05:24:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f8, 0x68) 05:24:39 executing program 5: symlink(&(0x7f0000000380)='..', &(0x7f00000003c0)='./file0\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='ramfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xbb5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) [ 2579.478076] binder: 3731:3732 ioctl c018620b 0 returned -14 05:24:39 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000200040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2579.567004] binder: 3731:3732 ioctl 80086601 0 returned -22 [ 2579.588305] binder_alloc: binder_alloc_mmap_handler: 3731 20010000-20013000 already mapped failed -16 [ 2579.608082] binder: release 3731:3732 transaction 384 out, still active [ 2579.648281] binder: undelivered TRANSACTION_COMPLETE [ 2579.671142] binder: BINDER_SET_CONTEXT_MGR already set [ 2579.704142] binder: 3731:3744 ioctl c018620b 0 returned -14 [ 2579.736247] binder: 3731:3732 ioctl 40046207 0 returned -16 [ 2579.740762] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2579.765208] binder_alloc: 3731: binder_alloc_buf, no vma [ 2579.771043] EXT4-fs (loop1): invalid first ino: 0 [ 2579.789700] binder: 3731:3745 transaction failed 29189/-3, size 0-0 line 3035 [ 2579.808540] binder: release 3731:3732 transaction 384 in, still active [ 2579.820961] binder: send failed reply for transaction 384, target dead [ 2579.842505] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2579.864449] binder: undelivered TRANSACTION_ERROR: 29189 [ 2579.892170] EXT4-fs (loop1): invalid first ino: 0 05:24:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x80086601, 0x0) 05:24:40 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd3) 05:24:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f9, 0x68) 05:24:40 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) r2 = getegid() fchown(r0, r1, r2) accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @remote, @remote, @rose, @bcast, @default, @bcast, @bcast]}, &(0x7f0000000000)=0x48, 0x80800) 05:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x80087601, 0x0) 05:24:40 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000220040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2580.709510] binder: 3767:3777 ioctl c018620b 0 returned -14 [ 2580.724311] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2580.760047] EXT4-fs (loop1): invalid first ino: 0 05:24:41 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000040)={0x0, 0xffffffffffffffe1, 0x1, &(0x7f0000000000)=0x1}) 05:24:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fa, 0x68) [ 2580.780702] binder: 3780:3782 ioctl c018620b 0 returned -14 [ 2580.795043] binder: 3767:3777 ioctl 80087601 0 returned -22 [ 2580.801161] binder: release 3767:3783 transaction 387 out, still active [ 2580.808247] binder: undelivered TRANSACTION_COMPLETE [ 2580.814456] binder_alloc: binder_alloc_mmap_handler: 3767 20010000-20013000 already mapped failed -16 [ 2580.825046] binder: BINDER_SET_CONTEXT_MGR already set 05:24:41 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd4) [ 2580.886476] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2580.911882] EXT4-fs (loop1): invalid first ino: 0 [ 2580.917352] binder: 3780:3784 ioctl 40046207 0 returned -16 [ 2580.918192] binder_alloc: 3767: binder_alloc_buf, no vma [ 2580.929460] binder: 3767:3793 ioctl c018620b 0 returned -14 [ 2580.965851] binder: 3780:3784 ioctl 80086601 0 returned -22 [ 2580.975795] binder: BINDER_SET_CONTEXT_MGR already set [ 2580.983923] binder: 3767:3783 ioctl 40046207 0 returned -16 05:24:41 executing program 5: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(r0, 0x8, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f00000001c0)={r1, r2+30000000}) 05:24:41 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000230040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fb, 0x68) [ 2581.065351] binder: 3767:3800 ioctl 80087601 0 returned -22 [ 2581.092788] binder: release 3767:3777 transaction 387 in, still active [ 2581.099925] binder_alloc: 3767: binder_alloc_buf, no vma [ 2581.105509] binder: 3780:3782 transaction failed 29189/-3, size 0-0 line 3035 [ 2581.109752] binder: send failed reply for transaction 387, target dead [ 2581.139000] binder: 3767:3793 transaction failed 29189/-3, size 0-0 line 3035 [ 2581.148123] binder: undelivered TRANSACTION_ERROR: 29189 [ 2581.160922] binder: undelivered TRANSACTION_ERROR: 29189 05:24:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x80086601, 0x0) 05:24:41 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd5) 05:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0045878, 0x0) [ 2581.311580] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:41 executing program 5: [ 2581.399032] EXT4-fs (loop1): invalid first ino: 0 05:24:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fc, 0x68) [ 2581.463461] binder: 3818:3819 ioctl c018620b 0 returned -14 05:24:41 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xabd) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xd4) [ 2581.517669] binder: 3823:3824 ioctl c018620b 0 returned -14 [ 2581.545083] binder: release 3818:3825 transaction 391 out, still active [ 2581.545214] binder: 3818:3819 ioctl 80086601 0 returned -22 [ 2581.604507] binder: undelivered TRANSACTION_COMPLETE 05:24:41 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040002c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2581.626119] binder: BINDER_SET_CONTEXT_MGR already set [ 2581.638501] binder: 3823:3830 ioctl 40046207 0 returned -16 05:24:41 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd6) 05:24:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fd, 0x68) [ 2581.719809] binder: release 3823:3830 transaction 392 out, still active [ 2581.736135] binder: undelivered TRANSACTION_COMPLETE 05:24:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7, 0x2000000000b, 0x3}, 0x1fd) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x10f006) 05:24:42 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80, 0x4840) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000000c0)={0x4}) getitimer(0x3, &(0x7f0000000000)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000140)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000300)={r1, 0x2}, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 2581.788428] binder: send failed reply for transaction 391, target dead [ 2581.799868] binder: send failed reply for transaction 392, target dead [ 2581.875096] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:42 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd7) 05:24:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x5c) [ 2581.999758] EXT4-fs (loop1): invalid first ino: 0 05:24:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") getpeername(r0, &(0x7f0000000140)=@in, &(0x7f0000000040)=0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r4) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000080)={0x0, 0x2000000001, 0x1, &(0x7f00000000c0)}) [ 2582.096673] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2582.118631] EXT4-fs (loop1): invalid first ino: 0 [ 2582.303824] binder_alloc: binder_alloc_mmap_handler: 3823 20010000-20013000 already mapped failed -16 [ 2582.340743] binder: 3823:3830 ioctl c018620b 0 returned -14 [ 2582.422115] binder_alloc: 3823: binder_alloc_buf, no vma [ 2582.437893] binder: 3823:3878 transaction failed 29189/-3, size 0-0 line 3035 05:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0045878, 0x0) 05:24:42 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200202, 0x101000) 05:24:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x1fe) 05:24:42 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd8) [ 2582.478519] binder: undelivered TRANSACTION_ERROR: 29189 05:24:42 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040002d0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:42 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3312, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast1}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) [ 2582.585826] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2582.619002] EXT4-fs (loop1): invalid first ino: 0 05:24:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe8b, &(0x7f0000000080), 0x108b, 0x0, 0x15e}, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x68) 05:24:42 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xd9) 05:24:42 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040003f0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:42 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0xfffffd8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x240100, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0), 0x3}}) write$ppp(r1, &(0x7f0000000100)="c9aad9808019395d5cbed03486e06bbb0d1edc1f47bc8ba7f0635f2ae75bd709edc4774728cee935dfcf1c296f9d5b622cf3778b956314d8544597d3837333fc99442b0c8619200fed9a536d8e8e25724e99865e9e7d47221ee08a27cbd63240026201fb05cf01265b2023e9c3eb9d6cbf8c7893fe13394af59501d17b5847e3cd1ffbe2f2f7cff2318b1a5fe9c2da58bb0282549e2d78ddd8a7c1819766be85520ab8754516578059cc0674ffab79f58f9b3f3c3766727d347d92307f448187da893c3f363f8a8b8b9bb368224b35b0dc6ca43e08fd381055a2a6023a74c5241c158c4b8b090798dda03dfc", 0xec) 05:24:42 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342000010000000000000000004000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 2582.657085] binder: 3893:3896 ioctl c018620b 0 returned -14 [ 2582.725658] binder: undelivered TRANSACTION_COMPLETE [ 2582.726516] binder_alloc: binder_alloc_mmap_handler: 3893 20010000-20013000 already mapped failed -16 [ 2582.831267] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2582.838144] binder: 3893:3916 ioctl c018620b 0 returned -14 05:24:43 executing program 5: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000100), 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 2582.903239] binder: BINDER_SET_CONTEXT_MGR already set [ 2582.923358] EXT4-fs (loop1): invalid first ino: 0 [ 2582.955884] binder: 3893:3897 ioctl 40046207 0 returned -16 [ 2582.986110] XFS (loop2): SB sanity check failed [ 2582.992265] binder: send failed reply for transaction 396, target dead [ 2582.993909] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2583.001020] binder: 3893:3916 transaction failed 29189/-22, size 0-0 line 2896 [ 2583.030980] binder: undelivered TRANSACTION_ERROR: 29189 [ 2583.037511] XFS (loop2): Unmount and run xfs_repair [ 2583.056390] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2583.080821] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 04 XFSB............ 05:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 05:24:43 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xda) 05:24:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="f846bec66d0b5846bc68950dac18031cb22beedee9a181afadf5110281a8ef68cb2c6a35546722a4571407d460644eb694005ca520cec5610f747928a7312c184cf052c36a6f875af0c65fc836e3423e6c46c3415216251a919fdf", 0x5b}, {&(0x7f0000000100)="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", 0x1000}], 0x2, 0x0, 0x383}, 0x0) preadv(r0, &(0x7f0000002480), 0x0, 0x0) [ 2583.102010] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 2583.118289] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2583.123139] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2583.139157] EXT4-fs (loop1): invalid first ino: 0 [ 2583.158975] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2583.178616] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 05:24:43 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000400040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2583.212316] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2583.240652] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2583.249272] binder: 3944:3946 ioctl c018620b 0 returned -14 05:24:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0xb, &(0x7f0000000440)='%(]GPLem1@\x00'}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(r0, 0x9) r5 = geteuid() r6 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000680)=0x0) r8 = getuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000880)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000000c0)="137125be620d0929f6e602d19919bee99546f141fef277ba2685b39b29b4ab4ff7c3ab7ec9bd1c5ef2b6d2234215dc9b6f60f4c32404f0645b6349715a2e0037cfaf77a73990cdbe00efa997ea39b1331a48bbe2acd7c32c9f3046aa0b8a238ad348aeec26971c2ef256c64781bb0d2ffd96f48a545ad1cce3edbaf297ea5a24f968786b9cb65d95d9e50deb7dc72bb7ebeaf488252bee600038feb3554136a549acecb8c90f2c789324649573710bd0c89fa2339c7bcc7e2acea64c95851c598f80d959febb8729cc0767a894446820b3b9f7b53762feebaf0004aa8192aa5d66e8933f9fea90ff1b77866675d619c0a2213b06dc4f14", 0xf7}, {&(0x7f00000001c0)="a1", 0x1}, {&(0x7f0000000200)="0b020ed8ff7175e2a1ff0cb5eda996fbbb1609bb7e83e49798673a1160ead485ba0a5d81f6f587b1e6a819aedbde975a81eefd755074f7284c3e327800968f0520f6e7bab0ed7fb1ab6261ef7a01e75ced39a7be1aa5e6ce71c5110b6683ada9e04ef643f24c1baaf14cc26ff4034b0e8cd99382f88389d898e2f8f2cdd7950c9d76db1b93", 0x85}, {&(0x7f00000002c0)="f801284e305ac194984ac30b435b0e7332f7e804c1cc6c1f60fbbdebf44942fba64d93795c275c7d6bebbd7b6183bbdfd4d2cc4fc0423e9b742b364ae53dd4595b9c0c6192c1f3b57a03867084d361e498cd87ae66ccddb00ad3fe4368055d4497ee0ca4108119bc5d099ddc08191c1a3b29d0fb08d6d53ef4b75899ffe4c740d7a329dd48f85d6138623ada1e035b7109dbe824ea7cc3f6ab01a878df728927a79a4e2c97d4cd7fe070", 0xaa}, {&(0x7f0000000380)="a67f0425793e20eb63c222041f6f", 0xe}], 0x5, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0xe0, 0x4000010}, 0x40440c5) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2583.249320] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2583.264337] XFS (loop2): SB validate failed with error -117. 05:24:43 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xdb) [ 2583.313046] binder: undelivered TRANSACTION_COMPLETE [ 2583.318603] binder: 3944:3946 ioctl c0046209 0 returned -22 [ 2583.349823] binder_alloc: binder_alloc_mmap_handler: 3944 20010000-20013000 already mapped failed -16 [ 2583.382511] binder: 3944:3946 ioctl c018620b 0 returned -14 [ 2583.396789] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2583.397428] binder: BINDER_SET_CONTEXT_MGR already set 05:24:43 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f00000018c0)={0x11, 0x0, 0x0}, &(0x7f0000001900)=0x14) accept(0xffffffffffffff9c, &(0x7f0000001940)=@can={0x1d, 0x0}, &(0x7f00000019c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001a00)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000001b00)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001b40)={'veth0_to_hsr\x00', 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000001f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001fc0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', r9}) accept4$packet(0xffffffffffffffff, &(0x7f0000002040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002080)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002100)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000021c0)={@local, @dev, 0x0}, &(0x7f0000002200)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002280)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000022c0)={0x0, @rand_addr, @loopback}, &(0x7f0000002300)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002340)={@empty, @loopback, 0x0}, &(0x7f0000002380)=0xc) accept$packet(0xffffffffffffffff, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002400)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002500)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000002600)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18008080}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002640)=ANY=[@ANYBLOB='x\a\x00\x00', @ANYRES16=r2, @ANYBLOB="000028bd7000fddbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="1c02020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000002000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400000200003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c000100240001006d6f64640000000000000000000000002000000000000000000000000000000008000300050000000c00040072616e642f6d000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ffff00004400010070665f680000000000000000000000000000000000080003000b0000001400040002000208ff7f0000080000ca040000000800010000000000000000000000", @ANYRES32=r7, @ANYBLOB="ec01020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400fdffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r12, @ANYBLOB="f80102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400000040023c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="b400020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400080000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="880002004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040003000305ffff0000030000ff20000000040015090200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004002668565b"], 0x778}}, 0x50) [ 2583.448902] EXT4-fs (loop1): invalid first ino: 0 [ 2583.455546] binder: 3944:3966 ioctl c0046209 0 returned -22 [ 2583.468977] binder: 3944:3949 ioctl 40046207 0 returned -16 05:24:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) pwrite64(r0, &(0x7f0000000080)="4e34907c47e00ebd56fbcc9b6093bf0271cf29de7e7abbc8e214341dbfe39bd6e350cd7ec12b175fbba02e17d48813579a52d6186778dc4658a9f4ae910f0440f0c487603adbe3a740ab894654f1beaf12fec57b72b179720c63027c8450c5ee105c0af31be0975ebb295061144b5632790bfdb1855676f0f78add0ba2263b7dc5ad55a17839e55bf9eeb3f8eb8ce469039961a5150c688fc787bd5e6884d87043df73a7e776fb732614e0984b5ca2423f4d154955e76b49be36c5ea4b1153eab572dc6f753e599bc12deff160b4b9", 0xcf, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x100000001, 0x100}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2583.500711] binder_alloc: 3944: binder_alloc_buf, no vma [ 2583.506230] binder: 3944:3957 transaction failed 29189/-3, size 0-0 line 3035 [ 2583.527420] binder_thread_release: 4 callbacks suppressed [ 2583.527446] binder: release 3944:3946 transaction 399 in, still active 05:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc018620b, 0x0) [ 2583.545373] binder: send failed reply for transaction 399, target dead [ 2583.552689] binder: undelivered TRANSACTION_ERROR: 29189 05:24:43 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xdc) [ 2583.659952] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2583.689012] binder: 3974:3975 ioctl c018620b 0 returned -14 [ 2583.696312] EXT4-fs (loop1): invalid first ino: 0 05:24:44 executing program 0: getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) ioprio_get$uid(0x3, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000a0020000f000000000000000f0000000f0000000f070dc76cf461bfbba93b82e3c6a6d6c000000080200000802000008", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f00000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000001000000000000000000000028005345540000000000000000000000000000000000000000000000000000013400020403000100ac1e01018000000000000000000000ff7465616d30000000000000000000000076657468310000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001090000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000003000000000000003000616464727479706500000000000000000000000000000000000000000000c804000800000000010000000000000028005345540000000000000000000000000000000000000000000000000000010180010504000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x300) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x51) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2583.775873] binder: 3974:3975 ioctl c018620b 0 returned -14 [ 2583.781748] binder: release 3974:3989 transaction 402 out, still active [ 2583.800473] binder: undelivered TRANSACTION_COMPLETE [ 2583.817779] binder_alloc: binder_alloc_mmap_handler: 3974 20010000-20013000 already mapped failed -16 [ 2583.847736] binder: 3974:3975 ioctl c018620b 0 returned -14 [ 2583.856243] binder: BINDER_SET_CONTEXT_MGR already set [ 2583.863131] binder: 3974:3989 ioctl 40046207 0 returned -16 [ 2583.869682] binder_alloc: 3974: binder_alloc_buf, no vma [ 2583.875211] binder: 3974:3994 transaction failed 29189/-3, size 0-0 line 3035 05:24:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x9]}, &(0x7f0000000100)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0800000013007493fe8c0d291793000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) 05:24:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xe05}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvfrom$llc(r4, &(0x7f0000000080)=""/51, 0x33, 0x40002122, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) get_mempolicy(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x2, 0x1}, 'port1\x00', 0x30, 0x401, 0x3, 0x1, 0xfff, 0x4, 0x4, 0x0, 0x4, 0x5}) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x100000, 0x8180) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) 05:24:44 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000480040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0cdcf0e4462e06b7b63a749e9873f6c981482641886410fde07999f900259ce005b270639c1381f7352a48420dac203699b4c26d14088f", 0x37}, {&(0x7f0000000100)="4af3a7249aff67aa478271beb03e9c79f8", 0x11}], 0x2}, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0xfffffffffffffea7) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xdd) [ 2583.910482] binder: 3974:3989 ioctl c018620b 0 returned -14 [ 2583.926175] binder: release 3974:3975 transaction 402 in, still active [ 2583.935633] binder: send failed reply for transaction 402, target dead [ 2584.024535] binder: undelivered TRANSACTION_ERROR: 29189 [ 2584.051921] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x63, 0x2) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 05:24:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/206) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr=0xffffffffffff7fff, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x3, [], "b9adf67fb8c4b3d2"}}}}}}, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000001c0)=0x2) [ 2584.124535] EXT4-fs (loop1): invalid first ino: 0 05:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc018620c, 0x0) 05:24:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xde) 05:24:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000040)="020aeb999c001c2f0add3fd81a2631a7b7bea56f447d3aac703916205d08f6c67c568f4e1307e4ea75bbbc967f9a8c9e48f3f4256faed1ac1512910b47d3ce6d1cdaac5db118497df1abe95a1b8aa865f816c8c085900eddd9bb0e2dcc25fe0ec488cf81f8a97d8fa6e84388d982b17986e364da8fb8317317584b0b35bf56a3", 0x80}, {&(0x7f00000000c0)="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", 0x1000}], 0x2}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2584.247064] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2584.280405] EXT4-fs (loop1): invalid first ino: 0 [ 2584.286056] netlink: 'syz-executor2': attribute type 1 has an invalid length. 05:24:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) listen(r0, 0x8) sendmmsg$alg(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="76f1ae9578ce002ab6b532a1186d24942f03d54c99cec98d5b6e3d197f07d681366999f1a8536d", 0x27}, {&(0x7f0000000440)="559657a52639964a1cb97702cd65dc82bc7fcea52cf5f03b7184fe71b9ec827038d759b10326703e0bd182cc018885b0367d1f84a4149d865c19f980205ef92a12f2", 0x42}, {&(0x7f00000004c0)="2b117cc98e8c041c63a339315d20e03571356aa5c866400214287203ea20d929bbe7b19020eb677f81d412445593d5cd426ca1ac6ebd6f016ebad216fc22fefebff9d39796a39ff1ae5df248b973de50650fd2d65167c21caa4f7fef092b1cf72ca3faa5521cdd5f5d3610526b77766df6255ec429a644402e4330068ffd84497e5074bf22255090de6e91ca3bed586ff9ef5560a2d80f474f5c06924cbc0f74450cbbf5643c9a15f33875c3affeb7f21f", 0xb1}], 0x3, &(0x7f00000005c0)=[@iv={0x30, 0x117, 0x2, 0x1c, "40d6cfe889b3b60686a7cd108b13f4abe0cbcb600eddc97528062887"}, @assoc={0x18, 0x117, 0x4, 0x101}], 0x48}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="4da3eae1812535a95e638ae661957cf2b540fcfad22ac2e43d2c40359b25f3f64a6f9b18f94ee3a3823afa311dff3f4a9e576f43d26ba487d0e98c66782fcbc54a2a54c48a99860f576b714d756a015575fe46b09779cbab7d04b86e6f19e951c293f81ee450921667e6067f510d269169e3c3e39bd552707c65b3da101834b938d38d04079c00f9e569137b9433e7ae239d5bb15b6457375f8b5a66d35a068bc2c46fc4dbf0", 0xa6}], 0x1, &(0x7f0000000740)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x1200}, @op={0x18}], 0x48, 0x4000000}], 0x2, 0x40000) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0xfffffffffffffd21) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x115000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)=0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xffffffffffffff9e) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, r2}, 0xc) r3 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0xfffffffffffffcb2, &(0x7f00000002c0)=[@iv={0x0, 0x117, 0x2, 0x0, "eff056605f851c3c5740404c658237e9b15c67795d83b47bbddcf3510f08e478cb4401f128505ec05cb77b0ab87ca04ee1ace83efeffcec2458810e83e210d8d1e8ddba5b5466688242db05b08584e955414c0affc235983fb2ef96e625591d7998d4cb590ac114b2aa9f17419dc441b0e56f24cb026e190a8ac14f0832f0e27d16f102b4df73560c21f726b219d3ae4532801b7b29fd9e34f95e923716917ef8280a2b65e3f86f8d9287b08fa5ce499959d66aa9a34ab1888a5e7666283ecd7459df101656eb2b3d9311acf789700f02e8c623ca5e947bb3ee65c8b6549a0"}], 0x59f}], 0x1, 0x801) recvmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 2584.317912] binder: 4026:4031 ioctl c018620b 0 returned -14 [ 2584.370215] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 2584.378459] binder: release 4026:4031 transaction 405 out, still active [ 2584.386180] binder: 4026:4031 ioctl c018620c 0 returned -14 [ 2584.395675] binder: undelivered TRANSACTION_COMPLETE 05:24:44 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040004c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2584.418491] binder_alloc: binder_alloc_mmap_handler: 4026 20010000-20013000 already mapped failed -16 [ 2584.446909] binder: 4026:4031 ioctl c018620b 0 returned -14 [ 2584.464469] binder: BINDER_SET_CONTEXT_MGR already set 05:24:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') prctl$PR_GET_SECUREBITS(0x1b) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x0, 0x0) [ 2584.479082] binder_alloc: 4026: binder_alloc_buf, no vma 05:24:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x0) socket$inet(0x2, 0x3, 0x800007f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8000000006, 0x0, 0x0, 0x1}]}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) [ 2584.499921] binder: 4026:4035 ioctl 40046207 0 returned -16 [ 2584.507123] binder: 4026:4045 transaction failed 29189/-3, size 0-0 line 3035 [ 2584.521626] binder: 4026:4048 ioctl c018620c 0 returned -14 [ 2584.531960] binder: undelivered TRANSACTION_ERROR: 29189 [ 2584.538711] binder: send failed reply for transaction 405, target dead 05:24:44 executing program 5: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, r0) r1 = socket$netlink(0x10, 0x3, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="000000010000000000003fffffffda060200000000e80001040000040d001800ea1100000005000000", 0xffffffffffffff7d}], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) 05:24:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xdf) 05:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0189436, 0x0) 05:24:44 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, 0xfffffffffffffffe, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2584.696993] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2584.745862] EXT4-fs (loop1): invalid first ino: 0 [ 2584.793471] binder: 4069:4074 ioctl c018620b 0 returned -14 05:24:45 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe0) 05:24:45 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000600040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2584.849140] binder: release 4069:4078 transaction 408 out, still active [ 2584.862405] binder: undelivered TRANSACTION_COMPLETE [ 2584.871607] binder_alloc: binder_alloc_mmap_handler: 4069 20010000-20013000 already mapped failed -16 05:24:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x201, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x33, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e23, 0x2, 'rr\x00', 0x11, 0x0, 0x3a}, 0x2c) sendfile(r0, r2, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x70, 0x111, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) [ 2584.902107] binder: 4069:4074 ioctl c018620b 0 returned -14 [ 2584.916848] binder: BINDER_SET_CONTEXT_MGR already set [ 2584.954912] binder_alloc: 4069: binder_alloc_buf, no vma [ 2584.975315] binder: 4069:4078 ioctl 40046207 0 returned -16 [ 2584.992847] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000d00)={{0x2, 0x3, 0x9, 0x3, 0x5}, 0x5}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0xc00, [0x0, 0x20000080, 0x200001f8, 0x20000438], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x10, 0x8809, 'veth1_to_hsr\x00', 'rose0\x00', 'tunl0\x00', 'veth1_to_team\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @random="5a69b376a1ad", [0xff, 0xff, 0xff, 0xff, 0xff, 0x72df70f140adf546], 0x118, 0x118, 0x148, [@ip6={'ip6\x00', 0x50, {{@empty, @dev={0xfe, 0x80, [], 0x12}, [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xffffffff], 0x3f, 0x8, 0x10, 0x4, 0x4e22, 0x4e22, 0x4e22, 0x4e20}}}, @vlan={'vlan\x00', 0x8, {{0x4, 0x3, 0x19, 0x2, 0x2}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x1b, 0x0, 0x8847, 'rose0\x00', 'syzkaller0\x00', 'team_slave_0\x00', 'gre0\x00', @random="ce583a1efa9a", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xf0}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"1b311a78ff661f56261cacda0c0e5db9953edf2061abe8304b00db172e39"}}}, {{{0xf, 0x7a, 0x897f, 'nr0\x00', 'veth0\x00', 'lo\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xf0, 0x120}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00', 0x2}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{{{0x13, 0x20, 0x8b17, 'sit0\x00', 'ip6gretap0\x00', 'bond_slave_0\x00', 'veth1_to_team\x00', @random="717e99386daf", [0x0, 0xff, 0x0, 0x0, 0xff], @random="d2f68444e0f8", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xa0, 0xa0, 0xd0, [@connlabel={'connlabel\x00', 0x8, {{0x1, 0x1}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {{{0x5, 0x1, 0x4, 'eql\x00', 'bcsf0\x00', 'veth0_to_hsr\x00', 'ip6gretap0\x00', @local, [0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff], 0xa8, 0x150, 0x1a0, [@mac={'mac\x00', 0x10, {{@local}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x10001, 0x1, 0x8, 0x0, 0x0, "5f31dabfe4887f37d5ef72ac2e756780db859cbd31848a0c14b3eeb0f3b5176d05819250ea0ff0c74b515e5315ae4eb05b83653d6adfb3888ff51e6679dc6316"}}}]}, @common=@log={'log\x00', 0x28, {{0x1, "4e8afa424fbd9b05619db43c945b3bbd73dd4cad9fa9953c45d9b55004e9", 0x1}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x2, [{{{0x1d, 0x40, 0xa06, 'nr0\x00', 'veth1_to_hsr\x00', 'team_slave_0\x00', 'veth1_to_team\x00', @random="2fd398cdfe61", [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xa0, 0x120, 0x250, [@vlan={'vlan\x00', 0x8, {{0x1, 0x6, 0xdada, 0x1, 0x1}}}]}, [@common=@log={'log\x00', 0x28, {{0x7, "943af89464497426c0e390854a125ed1a27bcb36941218c7a4b80ba661df"}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4790000000, 'system_u:object_r:random_device_t:s0\x00'}}}}, {{{0x5, 0x40, 0xf9, 'gretap0\x00', 'nr0\x00', 'gre0\x00', 'lapb0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x1f}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x2a8, 0x2f8, 0x328, [@bpf0={'bpf\x00', 0x210, {{0x36, [{0x4, 0x4, 0x57, 0x3}, {0x7, 0x0, 0x8, 0x8f1}, {0x0, 0x9, 0x1000, 0x1}, {0x0, 0x7fff, 0x9, 0x7}, {0x2, 0x47ad, 0x0, 0xe4}, {0x4, 0x7, 0xfffffffffffffffc, 0x8000}, {0x8, 0x4, 0x200000000000000, 0x1}, {0xffffffff, 0x2, 0x10000, 0xcb27}, {0xec1, 0x1, 0x95, 0x3f}, {0x50000000000, 0x100000000, 0x0, 0x10}, {0x80000000, 0x7, 0x15ee, 0x4}, {0x81, 0x9, 0x1f}, {0x4, 0x9, 0xfffffffffffffffd, 0xff}, {0x8, 0x8, 0xf83d, 0x1}, {0x5, 0x33, 0xffff}, {0x8, 0x1, 0x4, 0x2}, {0x480, 0x4, 0x9, 0x3f}, {0x389d4c27, 0x9, 0x7, 0xffffffff}, {0x5, 0x3, 0x800, 0x3}, {0x0, 0x9e45, 0x7ed9, 0xffffffffffff1dc0}, {0x8, 0x1, 0x1ff, 0x9}, {0x8, 0x7, 0x81, 0x200}, {0xfffffffffffffbff, 0x8, 0x3, 0x7}, {0x3ff, 0x4, 0x1ff, 0xd6}, {0x8, 0x6, 0x7, 0x3}, {0x80, 0x229, 0xffff, 0x5}, {0x101, 0x2, 0x97cb, 0x720}, {0x5, 0xfffffffffffffffb, 0x9, 0x9b}, {0x10001, 0x72be8924, 0x5, 0x8}, {0x7f, 0x9}, {0x100000000, 0x3, 0x800, 0x3}, {0x0, 0xffffffff, 0x1, 0x1}, {0x2, 0x5, 0x5, 0x9}, {0xc0e, 0x1, 0x0, 0x4}, {0x0, 0x9, 0x6, 0x401}, {0xfb, 0x101, 0x1000, 0x1162}, {0x4, 0x4, 0x0, 0xffffffffffff85be}, {0x40, 0xca, 0x0, 0x2096}, {0xffffffff00000001, 0x3f, 0x10001, 0xc40}, {0x1, 0xaf, 0xef, 0xffffffffffff32d8}, {0x1, 0x11a, 0x7ff, 0x3}, {0x9, 0x4, 0x3, 0x8e47}, {0xd60, 0x1cb, 0x1, 0x80000001}, {0x100000000, 0xfffffffffffffffb, 0x0, 0x10000}, {0x9, 0x7ff, 0x5, 0x7}, {0x0, 0x12, 0x101, 0x1000}, {0xfff, 0x0, 0x400, 0x9}, {0x6, 0x5, 0x40000000000000, 0x8a}, {0x2542e83b, 0x100000000, 0x101, 0x5c}, {0x7, 0x3259, 0x7, 0x2}, {0xfffffffffffffff9, 0x610c, 0x8001, 0x40}, {0x1f, 0x9, 0x2, 0x8a5f}, {0x1, 0x1, 0x4}, {0x10001, 0x4, 0x200, 0x8000}, {0x1, 0x6, 0x100000000, 0x9}, {0x0, 0xa198, 0x40, 0xc0}, {0x8, 0x6, 0xffffffff00000001, 0x9}, {0xb4, 0x9, 0x9, 0xbcd6}, {0x2, 0xa22f, 0x500000000000000, 0x2}, {0x2, 0x800, 0x3, 0x7}, {0x3, 0x2b00, 0x1, 0x81}, {0x3, 0x1, 0x4, 0xffff}, {0x3, 0x1, 0x5b, 0x6}, {0x0, 0xfffffffffffffffe, 0x80000001, 0x5}]}}}]}, [@common=@log={'log\x00', 0x28, {{0xffffffffffffffe0, "c724d6886f256df6d70b3dea4e2897b8855b6192b4ab785f9a8d4169b005", 0x2}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x401}}}}]}]}, 0xc78) [ 2585.001044] binder: send failed reply for transaction 408, target dead [ 2585.017267] binder: 4069:4083 transaction failed 29189/-3, size 0-0 line 3035 05:24:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x379, &(0x7f0000000300)=[{&(0x7f0000000140)="cd85fc47dadd2ae102de2582de21cd6271f362acc914e59cfa1c0044b86919ff41ff409b06f2967339d65c07bc9cf0660c"}, {&(0x7f0000000180)="e193d3ab6642354e635e4f49febe55590bab7b98904b58c0cc60d4f7c489c19935159b0e7add737d634563756d19f615bd8114"}, {&(0x7f00000001c0)="54c79cc418b8af34bbd89e4e034aeae3154b420309f2fb1916"}, {&(0x7f0000000200)="ab621b82b2d26db29d1b562cdf01af8813774dc351ac734ebe7f7720557d649a0641c4e1894205883624e7253c1e50c86143eeafc4020764b2229c6bf18237443f7b93410d2a9959f6671d06b3b60e1229e1640313b4c240"}, {&(0x7f0000000280)="c2fd68507bc1c61ca7dbd403d3b6a81145f561c593e3bf8e96d902816b4e17e5523a551055eecff428c479a3f42fb2e3106f46ca3d00418dd156dd35322040354c1d9b3c1a154cf2f6e671fae835c378d09dd9e8b2fe7524d4de0956"}], 0x0, 0x0, 0xfffffffffffffff6}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3, "d722354c6797b0874e0c26e25a80e5deb8b6fa86c1af90b0ff1318fe04f4af44f69e2711579b4cbf6a6b7a78a18ce937f895cd4e45062bbebf82ded11e3cd7", 0x13}, 0x60) [ 2585.046113] binder: undelivered TRANSACTION_ERROR: 29189 [ 2585.076252] EXT4-fs (loop1): invalid first ino: 0 05:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc020660b, 0x0) 05:24:45 executing program 5: [ 2585.154508] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2585.207063] EXT4-fs (loop1): invalid first ino: 0 [ 2585.266158] binder: 4108:4112 ioctl c018620b 0 returned -14 [ 2585.352605] binder: release 4108:4114 transaction 411 out, still active [ 2585.359634] binder: undelivered TRANSACTION_COMPLETE [ 2585.365231] binder_alloc: binder_alloc_mmap_handler: 4108 20010000-20013000 already mapped failed -16 [ 2585.377329] binder: 4108:4112 ioctl c018620b 0 returned -14 [ 2585.379676] binder: BINDER_SET_CONTEXT_MGR already set [ 2585.388363] binder: 4108:4114 ioctl 40046207 0 returned -16 [ 2585.395252] binder_alloc: 4108: binder_alloc_buf, no vma [ 2585.400984] binder: 4108:4115 transaction failed 29189/-3, size 0-0 line 3035 [ 2585.408583] binder: undelivered TRANSACTION_ERROR: 29189 [ 2585.414364] binder: release 4108:4112 transaction 411 in, still active [ 2585.427986] binder: send failed reply for transaction 411, target dead 05:24:45 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000017c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/240, 0xf0}], 0x9}, 0x40000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001800)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001840)=0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001880)={0x4, 0x203, 0x7, 0xfbd, 0x0}, &(0x7f00000018c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001900)={r1, 0x3f, 0xcc9, 0x2, 0x80000000, 0x0, 0x200, 0xc1, {r3, @in6={{0xa, 0x4e21, 0x6a, @local, 0x1}}, 0x41c2, 0x7fffffff, 0x7f, 0x5, 0x7fffffff}}, &(0x7f00000019c0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001a00)={r2, 0xe1c}, &(0x7f0000001a40)=0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 05:24:45 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe1) 05:24:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x80) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @remote, 0x4}}, 0x24) r2 = socket$inet6(0xa, 0x800, 0x7fff) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000080)=@srh={0x1d, 0x10, 0x4, 0x8, 0x6, 0x48, 0x10000, [@dev={0xfe, 0x80, [], 0x27}, @local, @local, @local, @empty, @mcast2, @ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x88) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xd}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, 0x0) 05:24:45 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000680040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:45 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='cgroup\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x3, 0x0, 0x3004, 0x4000000, 0x8, {0x0, 0x9d}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8010, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0306201, 0x0) [ 2585.648323] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2585.668909] EXT4-fs (loop1): invalid first ino: 0 [ 2585.681899] binder: 4123:4130 ioctl c018620b 0 returned -14 05:24:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) 05:24:45 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="030300000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) [ 2585.748004] binder: 4123:4130 ioctl c0306201 0 returned -14 [ 2585.754502] binder: release 4123:4136 transaction 414 out, still active [ 2585.761695] binder: undelivered TRANSACTION_COMPLETE [ 2585.798229] binder_alloc: binder_alloc_mmap_handler: 4123 20010000-20013000 already mapped failed -16 05:24:46 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040006c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe2) [ 2585.868949] binder: 4123:4145 ioctl c018620b 0 returned -14 05:24:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x322, &(0x7f0000000100), 0x0, 0x0, 0xfffffe31}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x8, 0x4) [ 2585.942785] binder: BINDER_SET_CONTEXT_MGR already set [ 2585.975210] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2585.979134] binder: 4123:4130 ioctl 40046207 0 returned -16 05:24:46 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000017c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/240, 0xf0}], 0x9}, 0x40000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001800)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001840)=0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001880)={0x4, 0x203, 0x7, 0xfbd, 0x0}, &(0x7f00000018c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001900)={r1, 0x3f, 0xcc9, 0x2, 0x80000000, 0x0, 0x200, 0xc1, {r3, @in6={{0xa, 0x4e21, 0x6a, @local, 0x1}}, 0x41c2, 0x7fffffff, 0x7f, 0x5, 0x7fffffff}}, &(0x7f00000019c0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001a00)={r2, 0xe1c}, &(0x7f0000001a40)=0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) [ 2586.027756] EXT4-fs (loop1): invalid first ino: 0 [ 2586.034917] binder: release 4123:4130 transaction 414 in, still active [ 2586.052249] binder: send failed reply for transaction 414, target dead 05:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2) [ 2586.112734] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xe3) [ 2586.158181] EXT4-fs (loop1): invalid first ino: 0 05:24:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x57}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="080014091b00007eec5c538efb7e116300020000000000000000f3981568d8b37dd51fad4b8301348453f79f80ec8063b06950c6da9256c79dfb79d6c9211d7e4d56925a2805b3c5a62693546a3ddcbe630a3ef6387900844adbe48ac3e4558efb2e15c83b4c7a7bcac9992c61d36de4e27e67f278433b8283734ba3916e9b32e606", @ANYRES32=r0, @ANYBLOB="000000000000000000c60900050000000b17050040000000950000000000000085000000160000008500000032000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x93, &(0x7f0000000240)=""/147, 0x41100, 0x1, [], 0x0, 0x2}, 0x48) 05:24:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x3, 0x4) [ 2586.229202] binder: 4174:4175 ioctl c018620b 0 returned -14 05:24:46 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000740040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2586.317082] binder: release 4174:4175 transaction 416 in, still active [ 2586.323979] binder: undelivered TRANSACTION_COMPLETE [ 2586.345740] binder: send failed reply for transaction 416, target dead 05:24:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) getpeername(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) [ 2586.403608] binder_alloc: binder_alloc_mmap_handler: 4174 20010000-20013000 already mapped failed -16 05:24:46 executing program 5: io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x6}) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x40100) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070008004000000800005d14a4e91ee438", 0x39}], 0x1) 05:24:46 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000017c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/240, 0xf0}], 0x9}, 0x40000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001800)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001840)=0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001880)={0x4, 0x203, 0x7, 0xfbd, 0x0}, &(0x7f00000018c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001900)={r1, 0x3f, 0xcc9, 0x2, 0x80000000, 0x0, 0x200, 0xc1, {r3, @in6={{0xa, 0x4e21, 0x6a, @local, 0x1}}, 0x41c2, 0x7fffffff, 0x7f, 0x5, 0x7fffffff}}, &(0x7f00000019c0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001a00)={r2, 0xe1c}, &(0x7f0000001a40)=0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) [ 2586.444493] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2586.455443] binder: BINDER_SET_CONTEXT_MGR already set [ 2586.508410] binder: 4174:4195 ioctl c018620b 0 returned -14 [ 2586.519622] EXT4-fs (loop1): invalid first ino: 0 05:24:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xe4) [ 2586.557118] binder: 4174:4175 ioctl 40046207 0 returned -16 [ 2586.585540] netlink: 'syz-executor5': attribute type 8 has an invalid length. [ 2586.594506] binder_alloc: 4174: binder_alloc_buf, no vma [ 2586.615502] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2586.639035] binder: 4174:4184 transaction failed 29189/-3, size 0-0 line 3035 [ 2586.646501] binder: undelivered TRANSACTION_ERROR: 29189 05:24:46 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xaa, 0x0, 0x10003, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x1, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x68) [ 2586.658929] netlink: 9 bytes leftover after parsing attributes in process `syz-executor5'. [ 2586.662423] EXT4-fs (loop1): invalid first ino: 0 [ 2586.688915] netlink: 9 bytes leftover after parsing attributes in process `syz-executor5'. 05:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3) 05:24:46 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040007a0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000040)="2920ba351d53cf51149dc9995ab253ee9a1e27917207c9dd6305b6abc32daef7198c8d2890a359dfce0caafb864d317e40a5091a7ca60791366c229d550787c6cc52141f88fe95eb9a22a8add1f7bd7622ae2ed1fccfc1878c6838497090679bc8d30d4a8fb7f7b59c6f36b553c4e798f4fccef940fce594de7fff466329e80573ad23707ca8663b184b87", 0x8b) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffe501000000ff07000000000000420000000000000000000000000000000000000000000000000000000000000000000000000000100000000055aa", 0x40, 0x1c0}]) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/127, 0x7f}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 05:24:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)=""/247, &(0x7f0000000140)=0xf7) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)="f62b72ba208d9698ddde38bea2d42d3fad41a7eeb3030fb7ee21cff2044c4da3b79d93f5cc43c533fe2da5bf101a3052b35cdc794a7dea00758fde1adc9a71e6ee325f98ad4b02d3dc88d6bada23983e989bae73da2a13333d34eaa27a34132a23e55009af77382bb7eeda1ce57b912f4471", 0x72}, {&(0x7f0000000200)="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", 0x1000}], 0x2}, 0x0) getsockname(r0, &(0x7f0000001240)=@hci={0x1f, 0x0}, &(0x7f00000012c0)=0x80) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001300)={@local, r1}, 0x14) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:47 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe5) [ 2586.921189] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2586.960511] binder: 4224:4226 ioctl c018620b 0 returned -14 [ 2586.979116] EXT4-fs (loop1): invalid first ino: 0 05:24:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xae80, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') prctl$PR_GET_KEEPCAPS(0x7) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000100), 0x2ba}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) wait4(r4, &(0x7f00000000c0), 0x3, 0x0) preadv(r3, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'v\x01\x80n0\x00', 0x9811}) write(r1, 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/117, 0x75}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r2) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x15) 05:24:47 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000fc0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2587.035814] binder: send failed reply for transaction 419 to 4224:4236 [ 2587.042679] binder: undelivered TRANSACTION_COMPLETE [ 2587.047829] binder: undelivered TRANSACTION_ERROR: 29189 [ 2587.062087] binder_alloc: binder_alloc_mmap_handler: 4224 20010000-20013000 already mapped failed -16 [ 2587.072794] binder: 4224:4226 ioctl c018620b 0 returned -14 [ 2587.079119] binder: BINDER_SET_CONTEXT_MGR already set [ 2587.087493] binder_alloc: 4224: binder_alloc_buf, no vma [ 2587.110959] binder: 4224:4236 ioctl 40046207 0 returned -16 [ 2587.125945] binder: 4224:4239 transaction failed 29189/-3, size 0-0 line 3035 [ 2587.130164] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 2587.145515] binder: undelivered TRANSACTION_ERROR: 29189 05:24:47 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe6) [ 2587.170706] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 2587.191375] loop5: unable to read partition table [ 2587.214697] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 05:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4) [ 2587.256491] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2587.282259] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 2587.304439] EXT4-fs (loop1): invalid first ino: 0 05:24:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sync_file_range(r0, 0x0, 0x3e7c4f6b, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:47 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe7) [ 2587.423792] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2587.429792] binder: 4261:4265 ioctl c018620b 0 returned -14 [ 2587.449357] EXT4-fs (loop1): invalid first ino: 0 05:24:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000140)={{0x2f, @remote, 0x4e24, 0x4, 'ovf\x00', 0x1, 0x0, 0x12}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x1, 0xffff, 0x6, 0x100000001}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x13102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x4, 0x0, 0x1a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 2587.495753] binder: undelivered TRANSACTION_COMPLETE [ 2587.501116] binder: send failed reply for transaction 422, target dead [ 2587.520920] binder_alloc: binder_alloc_mmap_handler: 4261 20010000-20013000 already mapped failed -16 05:24:47 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a0007000000000100000000400fff0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2587.581180] binder: BINDER_SET_CONTEXT_MGR already set [ 2587.609277] binder: 4261:4276 ioctl c018620b 0 returned -14 [ 2587.638400] binder_alloc: 4261: binder_alloc_buf, no vma [ 2587.649065] binder: 4261:4265 ioctl 40046207 0 returned -16 [ 2587.657650] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 2587.684806] binder: 4261:4268 transaction failed 29189/-3, size 0-0 line 3035 [ 2587.699247] binder: undelivered TRANSACTION_ERROR: 29189 [ 2587.711028] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 2587.749898] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2587.784453] EXT4-fs (loop1): invalid first ino: 0 [ 2587.832452] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 2587.845640] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 2587.854041] loop5: unable to read partition table [ 2587.862358] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 05:24:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) memfd_create(&(0x7f0000000040)='proc,\x00', 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="686fe0b517ce34707c81528c9e189d64f65cfcdd4561ca4a3b2ac36663196ad41c4478218ce252d53d8e036b5f595071b38e460dabf8f2c306d154b2f6058c190a29f8cd82f9220d20f877a1b46705c0666fddb6cf7a75d213191bbfa5af555a50570783d2ed28a4cfbb78d64f77f7a26029ef75d81a373c4380cbf3abf4cec66f0cbc6bc0df2b1786d41f4631dc42780c6c1e22fceac0c498683d79ab3611a1a9b600154d27ebf9e9a36d32426f502e07fa59fec076b7feb598a5e60337610e4e0206777e80fd68d28fd4ee", 0xcc}, {&(0x7f0000000600)="2aafd569ed995d9bd7e63da8fc81d01cb254b9cc5c5091da4c8bd72ddbc89bbeef681dd08cb4899b844a5431f15f1213bf74c6e69517cb2f6a3fc1a8cad35e0a9600ecc2d75598bbb5d42ceba35279aaf42b945776b40f82e7c9888056c08c1e1e96c36b0c76f71f2f93a099416197d351f6fe6d2a976fdc475201ff6a7b32520694d5f391f9e4cc8ff20376df942cab4143eae228b77c370c0c76acbc1e210f2a5ea837461b6247ba98ae0363eb29c70b4261b99b8d1bcd30a2bab711932bd5eecf403a8fff8ec73b4109494c4c94b6d5ce9007d83ff5ffdd1e50646e5e576b009bbaa4fbb2586cdc12f306", 0xec}, {&(0x7f00000002c0)="1105f91ff3d63d579696c9c2b81645243ba55cd1dd9ff907a01b76b25c68a4af40d3fcac953c925b7275c760758f0925dcf65ed5c2868bb58639e4cd7b977857354fc188f8afc98ae1f2be53caaea8da3fe884c295c4b4761a0c6aff0fa984a365f5cf25330f94dabaed1d0eb07305ce2ee61235de0894b79dbce6418c8aef64229eb38fbc1c09cfb19defdb750a228897c3ad855cacc56b8076f58609d6241a031f13273e3cefc90b7511361d4b6a8f160334bd77c4135af02adf6cc11db9c1a3bb47d90e14cf21102f44e0dfeebec3cf6378952ad412c0bd02c72467ac7c3110f6bdec47b11c9f", 0xe8}, {&(0x7f00000003c0)="7d23f129fb201bfd2712f110febb76748a0a602e544911448f15f73291a19e40c8288924ac243bc860830c401174db0feb4f9a681b62caa9c73037f06abb2e62835e545b68b51128afa39bc8ab659c6d95e36eb11745d56dff8a2a8c4c1cf5179b9df50d4b6b4e6b812ea80523da38f94126b7d64daafa605a110dbc57d644fbe0d829e0c0e7e5c0c2d127dd5b4ac6aa89cf909e1c55020658", 0x99}, {&(0x7f0000000480)="0cc309da083e774bb3fd8bdc2d3bf32eab78679d04299cf61b723b30e0c8cbfdf4727acff3477f8d22d09cc4f92b759efd180e7b89b49d48d361a6d822d5875a3e0ac594cc061eb990a7", 0x4a}, {&(0x7f0000000500)="5ade308176c9fca13170c80b4ea691535dc6930128dbd253d8f048017b6527af4c59c4dc13657d2f95ee20943be1c3c8fb70fca6fea8384cdfa21be42975fce7e28ea1", 0x43}], 0x6, &(0x7f0000000140)}}], 0x2, 0x0) 05:24:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000003400)=""/113) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f0000001dc0)=@caif=@util, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001e40)=""/138, 0x8a}, {&(0x7f0000001f00)=""/103, 0x67}, {&(0x7f0000001f80)=""/32, 0x20}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000003000)=""/62, 0x3e}, {&(0x7f0000003040)=""/71, 0x47}, {&(0x7f00000030c0)=""/177, 0xb1}, {&(0x7f0000003180)=""/40, 0x28}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003240)}], 0x1, &(0x7f00000032c0)=""/167, 0xa7}, 0xd9}], 0x2, 0x40, 0x0) sendmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="5832ffe3c8459b693b9bcb6e1359cfd51953724081e80647f87e2c1bd26c3139b344f583", 0x24}, {&(0x7f0000000100)="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", 0xfd}], 0x2}, 0x8}, {{&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="0bdb10ab39c5bc36106c078dfde59aa5e74f880891af84fb17b3a2d181bd4ab0a10ebc8d2d6c70334f6f3985900dd84c92d92ec6c23227892a5e14b3d80bd27e", 0x40}, {&(0x7f0000000300)="c2e0cdb660bd45009dc006a8fcc9d3ee934d9a96ec36c83ef4cf47a9bc8d4eee4af9d3cc623ab18c741e3e2974b1f8fee57674c7e8bd0cf38fa8249ca7796fcf70d01813e53b902c602f07d6d9f9a9be95dbe59c7df8b9d1c1b0eccf469384d93ebb5b28eace0c7721b648f160653faad5b35a5277a4308f0ec249992d3b1d0c2455683e7f3c8cc161de333a6678d7632fc67ee3a13c47b40481956877ccc172db76c142a4775ffc1918a2231afc3d2b4d8d4c950d3d71554ff59981962ec60cb16ebc688e9eb67fe1005f33d259cf8a283f5b24ff65b9622ce62fe57e6d2deaf1442d7af20e708277ebd5308a328a140385ab998b06bca173", 0xf9}, {&(0x7f0000000400)='[ ', 0x2}], 0x3, &(0x7f0000000480)=[{0x1010, 0x117, 0x7fffffff, "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"}, {0x80, 0x88, 0x2, "f6e139883d30ad12ba7b16540674b18265858b8a3487cdd062bf17b168b40ee9d3ee1198e0f201083734e492c7914af03aecd0f305009efc3622c35486ea5678b8785fa5bd5bfedda770fcc34b72fdcca04c219f72bfcecd0a348ed9859fc4b6c9c6df3942992c8ab8fc51bc38"}, {0x78, 0x113, 0x8, "f4c2d9a5d9bf45704bbb2bfba0194bfa726807f9c6bd5036e89ba1f180d72f816e7e4429532c005f820a1794c343a5d39c14ba571cc32c18225d5e9b10077cefbec750261e4e2327056a070f6dc070d4410da311c29abdb9cd6842e4d3928944c980623a"}, {0xc0, 0x110, 0x0, "aa41a2c536b1449024ba8d8682c64f5f94f3e18c9014ca309f28fcdaab63ceba6d6321d0d08990e9b73880bca62317b9f43fb2c6d6c66da83a87a339cc2289d2506babcd49ce1282a7a4a281a6afd32c6eac6731ba3330dfece30c09614c34629c4715602054369758249de24a13a22aea48cfc9f3e3937b6cc24906b185271a5b04e966eb537ae1e367fa1e9627b80d73a059fb0f75eb2ab423becf15abf90c7da11e963d8d601f77d474864e473f5d"}, {0x100, 0x0, 0x3, "aec294695a1a83934ad8da17e6389765e3e715854402f4e4a3d9f39d35cf0c8fbad0c324eae6e4de5c87626723dc8cc3b3239d941b99600a8dc353159b0720b56aaa31f4fa39ad557b3f243feed0a6610a9f56a85fdf1072ca36a655eea957ede62c620e5fd63666bf8545a9ea697c788106b8cd067a22dadc06ba0f98a4bb4062a6edc325b515618bc1a5ab9e5898fa8d72c8ca3f605655af95f5c703d8951aaccf4947a44c654a089ecd294e619abe219b6ad74a4c73fbc5f0669dd43df218c61a7e1cd350d2d7fd034ae048e9072def27cf923cb9aee72c66a87d9dbc2eefcd3be92f2e08ab0e7cd88ee0a23c7c"}, {0x88, 0x19f, 0x6, "ef8dece5f3059b5beebae013944237d2bb4f0eb509cdda5160550d68f16cd75b1cadaef5be879c206f5cd5455a6d2cb3fb3d9a6d1e944ad8a1362d3c27694dd77ede1f3dae6694d27395bd19d2ec3e08510b9cb2cc29bb1cd4bf69776bef30296b223319ec05b2ad86858dc3191bc17a4b45c87316"}, {0xf8, 0x84, 0x436, "8916258e774e63e87f177da9565d89a8a48ac155affadfe2edfb955721d69742081016fcef0a98f775cca70c94fd4fa732520f9603e1582b952ee2f37f00c3bafb47cea505bad61d96c1f02ebef42a9983c1a1348c45128ac3d9104df1248ed028f3f11b0f0a1a93f9af778f1f64d3924ee198035a765875ad93c11082296081aebff7d46b4d42c0daf9958f296c7012d2d7ff871defe32ab8adc4a710aef91cc10094dd2428de3bc64060e3d24f3f553a43d5aeccfa3d7a6a6c4a3084215071ca5246672a11ecf73773bb9d46e0224b052d667d0b78a7438a66b4dea7dbedcae575f7"}], 0x1448}, 0x5}, {{&(0x7f0000001900)=@isdn={0x22, 0xfffffffffffff3aa, 0x7, 0x5}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)="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", 0xfa}], 0x1, &(0x7f0000001ac0)=[{0xb8, 0x11b, 0x7fff, "b9e47c8747a3d35c58a9cc9e388d5b5023c4becb9853c1f470e454679fc2d25cd4d08c65adb620d835887e98d99627ee046ab39c75a8bbe85a5c61e4d512decc29457d578dabc197af8ad53627ddf1db0cdf9857c6962bc815f45450aff272a7fb5b489c955228d0bfcfc6c699407d2eba12afef225d0a5c307c31cc464d74e143f5eb2b89c5c2d0142525ca61246efb4543b92b0ffd1e83a9f317a68cc7acdbb74c32223796"}, {0xd8, 0x109, 0x81, "14dd704d59a79f4df35bd4fd81e5546a5dd66dcc54b15023a8ca5b90b00d7b736d143fc644a49666becd212f3b59cfa28637733e5bfc91200fe8450ca40f96583d6d78a3ec85dce49c62fb9b0cc7b3ab04942432f9f67bc31ea6ef02510f4b710c2be4b2598fca93cb6569e519afa756502b3bd611fb047fd799330e7ab09d4149c858b46abc14870dd92e9a2ea9386face2cf7d5ffe42637d1ff309808f28db93f8d65148cd3e28265a16baf821975b2911584547725303aaa7d91ababaa68193df43a09a"}], 0x190}, 0x1}], 0x3, 0x80) fstat(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) 05:24:48 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xe8) 05:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 2587.891584] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2587.910851] EXT4-fs (loop1): invalid first ino: 0 05:24:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') r1 = fcntl$getown(r0, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x290, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x999}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeaba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8fe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45f}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100000001, @ipv4={[], [], @multicast1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x7fffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4000000000000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000801) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x3, r1}) migrate_pages(r1, 0x78, &(0x7f00000004c0)=0x2, &(0x7f0000000500)=0x100) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2587.956744] binder: 4300:4301 ioctl c018620b 0 returned -14 05:24:48 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000053000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2587.999786] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 2588.024795] binder: undelivered TRANSACTION_COMPLETE [ 2588.030152] binder: send failed reply for transaction 425, target dead 05:24:48 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe9) [ 2588.106212] binder_alloc: binder_alloc_mmap_handler: 4300 20010000-20013000 already mapped failed -16 05:24:48 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400002, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x3, r1}) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x10000, 0x3, 0x0, "dde8024c76810092eb3ff6f4fb08e66aa7cfc865901632f8bcce7f877a3708e4"}) [ 2588.182554] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2588.192154] binder: 4300:4301 ioctl c018620b 0 returned -14 [ 2588.214293] EXT4-fs (loop1): invalid first ino: 0 [ 2588.219778] binder_alloc: 4300: binder_alloc_buf, no vma 05:24:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffd0a}, 0x4000000) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/119, 0x77}, {&(0x7f0000000100)=""/199, 0xc7}], 0x2, 0x68) [ 2588.232385] binder: 4300:4306 transaction failed 29189/-3, size 0-0 line 3035 [ 2588.252774] binder: BINDER_SET_CONTEXT_MGR already set [ 2588.271768] binder: 4300:4301 ioctl 40046207 0 returned -16 [ 2588.277907] binder: undelivered TRANSACTION_ERROR: 29189 05:24:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x5}}, 0x18) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xb, 0x0, &(0x7f0000000200)) 05:24:50 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffff5c, 0x0, 0x0, &(0x7f0000000d00)={[{@file_umask={'file_umask', 0x3d, 0x80040000}}]}) 05:24:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6) 05:24:50 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000020040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:50 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xea) 05:24:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x600000000000, 0xf7, 0x8, 'queue1\x00', 0x5}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:50 executing program 5: syz_emit_ethernet(0x2, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000015c0)=ANY=[@ANYRESDEC, @ANYBLOB="ff0f7428cb539e3dcd97ad7e7de2fd4349d04efb9b1227fca24b19e8bc4764ee6a3061f5a335ebac46b4d8c57215e9755288ab34e246bdaad72a99fd6622ac407be065af919dac5c3705231ba184d8736398c58072fa1517810926ae737da9387ba9dd91772ce22472fbf8aa09a53a8c54b926bede01dd47c6bb8500119cff59661123140d980ea30fb99c7fa800ed7425b604e726c1518b2e0bc73a7861a61c9062538e6b4f0f484f4dd9564d041c46db36fc7b3b5b4278084a6e2e778f619d6371d78233271922f9838a638bf58f5a811416"], @ANYRES64], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x9f, [], 0x1000000000000159, &(0x7f0000000040)=[{}], &(0x7f0000000300)=""/159}, &(0x7f00000002c0)=0xfffffffffffffd67) pwritev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)="07d0c2e4e131eb2e05582568d7fbde8add04e9149ef2ee4d5e471dfd100e613fa69f64a066521f2a256c632e", 0x2c}, {&(0x7f0000000240)="f2f4ad8d8e9692d53978aff5f818368eb9471c34a801aab471d2de82a02229048c212a535142a2b56d64", 0x2a}, {&(0x7f00000003c0)="7b1773700d1bee4d744700a0f01b80bd5e47d7eae543d5e742a5c0a509d7b4a799e1461272143e5c2f2c00878112dd3cfd7792c702b932e7b444e067b44c20fc98345503de1cc0011da2ba1d6764efbd37a21cbe580df5efd2f20aac6a1622a3a93fdb822af328cd6aa4518644e70b75f991b2650f3f4dfb2b679f0bb5e106467ef4363623195981918f68abdc446af0455e9fc71295aa0b7d9cce7c32975192abb14dc9418a593b09bfb1fe029ebd6ef0865fa43b", 0xb5}, {&(0x7f0000000480)="92800aef6186d9fffd59deb0dc5c068f501a943346ad7cd8eef5fb67ec0927b0d83b7741da3ba3482fce26509eb19380209deb0c7bb837edbc9a6464436d7f20cadef154b7162f42ab03c054b19c6889220baeaeb2003670cf43514205acb927c19d12543f2de8186adcc4bae8288ca6353e40d3cc057a00c0819d8d76c568442b12cb2076ec423e32a0ad7e7448", 0x8e}, {&(0x7f0000000540)="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", 0x1000}], 0x5, 0xc) 05:24:50 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20000000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xfeca, &(0x7f0000000200), 0x100000000000020c}, 0x0) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000140)={0x4}, 0x1) sync() openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x10000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 2590.694720] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2590.705103] binder: 4343:4354 ioctl c018620b 0 returned -14 [ 2590.728712] EXT4-fs (loop1): invalid first ino: 0 05:24:50 executing program 5: socketpair$unix(0x1, 0x100000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x82) openat$cgroup_int(r2, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r3, 0x1000000) close(r3) close(r1) 05:24:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2590.770544] binder_thread_release: 6 callbacks suppressed [ 2590.770555] binder: release 4343:4360 transaction 428 out, still active [ 2590.776456] binder: undelivered TRANSACTION_COMPLETE 05:24:51 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xeb) [ 2590.819633] binder_alloc: binder_alloc_mmap_handler: 4343 20010000-20013000 already mapped failed -16 [ 2590.876482] binder: BINDER_SET_CONTEXT_MGR already set [ 2590.899737] binder: 4343:4354 ioctl c018620b 0 returned -14 [ 2590.908045] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2590.913600] binder_alloc: 4343: binder_alloc_buf, no vma [ 2590.938960] EXT4-fs (loop1): invalid first ino: 0 [ 2590.965814] binder: 4343:4360 ioctl 40046207 0 returned -16 [ 2590.994649] binder: release 4343:4354 transaction 428 in, still active 05:24:51 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x8, 0x1, 0x6, 0x34, &(0x7f0000000040)=""/52, 0x93, &(0x7f00000003c0)=""/147, 0x69, &(0x7f0000000080)=""/105}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="93cfa38dd40270c495f9"], 0x4) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r3, 0x40096101, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) read(r1, 0x0, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='vegas\x00', 0x6) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000480)=0x4) add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000500)="bae4bb00255979d30ddbcd6c0122d3761697ea0e0fca2914d964cecdefeb6d9eaf877d4fb8454834f89281ec312ee2f56884ff85aa94af5bd9d2c952d5170fc14800", 0x42, 0xfffffffffffffffe) ioctl$NBD_SET_SIZE(r4, 0xab02, 0xf2a4) 05:24:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)=""/165, 0xa5) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x7, 0x9, "c19e61e6fd87534b8b7d89fc73aff9b8819573be5a83547e5ef25dc381b14c95", 0x4, 0xd9, 0x200, 0x5, 0x310}) [ 2591.009046] binder: 4343:4369 transaction failed 29189/-3, size 0-0 line 3035 [ 2591.011693] binder: send failed reply for transaction 428, target dead 05:24:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7) 05:24:51 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000030040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000000c0)={0x0, r3}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x1e, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1b, 0x0, &(0x7f0000000040)) close(r4) close(r1) [ 2591.067723] binder: undelivered TRANSACTION_ERROR: 29189 05:24:51 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xec) [ 2591.138195] QAT: Device 0 not found 05:24:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpid() sched_getaffinity(r1, 0x8, &(0x7f0000000440)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x4, 0x9, 0x1000, 0xf7e000000, 0x27}) lsetxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x800, 0x8, 0x8, 0x1, 0x0, 0x65, 0x40303, 0x0, 0x40, 0x8000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8e, 0xfffffffffffffffd, 0x0, 0x373, 0x0, 0x0, 0x0, 0x652f, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x9, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video37\x00', 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video37\x00', 0x2, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r2, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x0, 0x1}, 0x1}}, 0x18) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000"], 0x3d) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200), 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000003c0)=0xbfa3, 0x4) 05:24:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x4000000) preadv(r0, &(0x7f00000001c0), 0x1c1, 0x0) [ 2591.212512] binder: 4395:4396 ioctl c018620b 0 returned -14 [ 2591.269116] binder: release 4395:4396 transaction 431 out, still active [ 2591.275937] binder: undelivered TRANSACTION_COMPLETE [ 2591.281923] binder_alloc: binder_alloc_mmap_handler: 4395 20010000-20013000 already mapped failed -16 [ 2591.306467] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:51 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x8011, r0, 0x0) remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x0) personality(0x400000b) [ 2591.347731] binder: BINDER_SET_CONTEXT_MGR already set [ 2591.349310] binder: 4395:4412 ioctl c018620b 0 returned -14 [ 2591.371660] binder: 4395:4396 ioctl 40046207 0 returned -16 [ 2591.378891] EXT4-fs (loop1): invalid first ino: 0 [ 2591.386810] binder_alloc: 4395: binder_alloc_buf, no vma [ 2591.398145] binder: 4395:4413 transaction failed 29189/-3, size 0-0 line 3035 [ 2591.406166] binder: undelivered TRANSACTION_ERROR: 29189 [ 2591.413472] binder: release 4395:4396 transaction 431 in, still active 05:24:51 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20800, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) 05:24:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x48) 05:24:51 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xed) [ 2591.441243] binder: send failed reply for transaction 431, target dead [ 2591.500111] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2591.507640] EXT4-fs (loop1): invalid first ino: 0 05:24:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfffffe06, &(0x7f0000000180), 0x0, 0x0, 0x104}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2591.630646] binder: 4431:4432 ioctl c018620b 0 returned -14 05:24:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000000ff645ccc892066c7b692a69b103fb4a33f00828bc4ada0dac928594cd275fd7b45e6b1a2fbcbe71f7d970527541476ea457bcd9172285572898c066d4e884ecf54f6e44e06cd2428fc83ed9a4df4b0ff16bbb11c5ff01e2194d0534b7cc1ee6cf4a69845c5211c641f72b9e10d317d6f82439e8c977d2660df3d5fa19310830e19ed"], 0x1}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 2591.684132] binder: release 4431:4434 transaction 434 out, still active [ 2591.691018] binder: release 4431:4432 transaction 434 in, still active [ 2591.694689] binder: undelivered TRANSACTION_COMPLETE 05:24:51 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000040040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2591.728940] binder: send failed reply for transaction 434, target dead 05:24:52 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xee) [ 2591.788168] binder_alloc: binder_alloc_mmap_handler: 4431 20010000-20013000 already mapped failed -16 [ 2591.799617] binder: 4431:4432 ioctl c018620b 0 returned -14 [ 2591.805729] binder: BINDER_SET_CONTEXT_MGR already set [ 2591.811838] binder_alloc: 4431: binder_alloc_buf, no vma [ 2591.817615] binder: 4431:4432 ioctl 40046207 0 returned -16 [ 2591.823634] binder: 4431:4434 transaction failed 29189/-3, size 0-0 line 3035 [ 2591.863339] binder: undelivered TRANSACTION_ERROR: 29189 05:24:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c) 05:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2591.930554] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2591.962303] EXT4-fs (loop1): invalid first ino: 0 [ 2592.064111] binder: 4456:4457 ioctl c018620b 0 returned -14 [ 2592.135285] binder: release 4456:4461 transaction 437 out, still active [ 2592.142274] binder: release 4456:4457 transaction 437 in, still active [ 2592.149503] binder: undelivered TRANSACTION_COMPLETE 05:24:52 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xef) 05:24:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x48) 05:24:52 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000050040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x2000000008, 0x7f, 0xc, 0x7, 0xdb76}) fcntl$addseals(r0, 0x409, 0x2) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3aaeae72b44abcc79c08d4e5e45fb8f9e9455be5281ab9effb388d995540de4ddb390aee1ad8608eac5ccc223ebe552ed2d79c0aed9526f0b929469e11fc1a413ea180fa431c45d61056d2b2283f2124437004db7e25e1d00f6803f598f35e6e008e2e873d788558c1764f5e5ec40dc5f8da46f7e0963482c0e4ec751e6304a7f314df50f348c37d1ed8e3fb0561a9c4c2fb021e2ef90960cb666560688e12a003d2b81af5ddc24ae79620f2ea4f17d08de7a16ca51b5fbfe4790be81d88a2b852034b627b0baf659d9b92952c4a7a9c4b6f57136dc732e", 0xd8, 0x0) r2 = add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="3595ef1e5df8b7d6580299857e3464b5fb28b94b38009c6875a30cb11fc3ac14b5b154fd4d0c69529a62e050f4a52bf86640427955aee7439778cecb", 0x3c, 0xffffffffffffffff) keyctl$reject(0x13, r1, 0x1, 0x8, r2) 05:24:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpid() sched_getaffinity(r1, 0x8, &(0x7f0000000440)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x4, 0x9, 0x1000, 0xf7e000000, 0x27}) lsetxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x800, 0x8, 0x8, 0x1, 0x0, 0x65, 0x40303, 0x0, 0x40, 0x8000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8e, 0xfffffffffffffffd, 0x0, 0x373, 0x0, 0x0, 0x0, 0x652f, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x9, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video37\x00', 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video37\x00', 0x2, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r2, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x0, 0x1}, 0x1}}, 0x18) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000"], 0x3d) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200), 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000003c0)=0xbfa3, 0x4) [ 2592.208583] binder: send failed reply for transaction 437, target dead [ 2592.266116] binder: 4466:4467 ioctl c018620b 0 returned -14 [ 2592.273172] binder_alloc: binder_alloc_mmap_handler: 4456 20010000-20013000 already mapped failed -16 [ 2592.290132] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2592.306296] binder: 4456:4457 ioctl c018620b 0 returned -14 05:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfffffffffffffe0f, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2592.318899] binder: BINDER_SET_CONTEXT_MGR already set [ 2592.327479] EXT4-fs (loop1): invalid first ino: 0 [ 2592.335935] binder: 4456:4461 ioctl 40046207 0 returned -16 [ 2592.342252] binder_alloc: 4456: binder_alloc_buf, no vma [ 2592.348005] binder: 4456:4479 transaction failed 29189/-3, size 0-0 line 3035 [ 2592.356124] binder: undelivered TRANSACTION_ERROR: 29189 [ 2592.363621] binder: BINDER_SET_CONTEXT_MGR already set [ 2592.374059] binder: 4466:4480 ioctl 40046207 0 returned -16 [ 2592.408401] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x60) [ 2592.422943] binder: 4466:4480 transaction failed 29189/-22, size 0-0 line 2896 05:24:52 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf0) [ 2592.468963] EXT4-fs (loop1): invalid first ino: 0 [ 2592.482181] binder: undelivered TRANSACTION_ERROR: 29189 [ 2592.512414] binder: 4488:4491 ioctl c018620b 0 returned -14 05:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000040)="a74fac226d4fdfb362c697ee1df51362b5d6f234d2e33050c2a95a48a2460f4c707d1079573dbdfda5c70ec4f7d8acf4113215d73680081513410016178b83668b733fe6954a4c3b13555777a60fdac9f45768a72fe91e460984a40f6c41f4a24d6f9af99d5091f759eca218b47c7270c009d5a28292273caba471a0f4b40b1be273717d8eace922a2e27a99932df17e3c5abab539c162cd24603e7ed1a3c6178b553b26f7548be854e3c4c383bdeeb2b0be535ed44e59d09cd3aeda85c024407a48e5c7c939ed9a200ccdb9ff0ac2ea5ac68636c06c8303a9d99cb3f60fe421e55a5a0c9ce0227ade93ec426af1c647767ef29ca3be8ea918ab85ca9bc3500a0be8dd1c3defae145ff90591c765084c2bb4348ad5fdfec061e8cf81b3eab7374d9a28e0614ba3df29141865db36aff06b32212464704d612e6a2470ca6404cf770444590f36cec0f8725e010d98caddf6c15920ef7732c0139caae48e0b04c0b53433c834d3589d4f6dccd01dba0945887eba192aeb45a02ce624740543bc23c6daa521d132b40a2c3b3b7d575b0b12a4c49e71bab92d99807f062913f53d1f232dd7c294b4d72c1fda5c3cc6616248f01580c1472c0bb3980eda1e9d3ce6407657671715c9bf8fac10012483b91b896c0a9fa52f87a77b3102db4d64d7ddf2e7bc03bccbaf8be1fb61aff5b68f94635549105535552b5a7b7bfb62e576a2e50a2392a84df8bcdcb682fd1f2c7c1444af37e0445d806804c2463d9c09963096aecb1e74b586f2cdb87f8b23f11024afb7a35e67caf35f2bfd7e9100e0330ccd0a432bf5cbe2444d1a7f455a72752bf01df5addd49d1141c2789863b2fc470722da3e3c770ce2b9586aa8ac8d9a26eba96a76905ab65231a46a9b66f162d067ac399f71157e7e8ea683bab1b4db137cd55dcb2dca2da48c74b2d525208dac29786e4ab34bc06f540eed7f6ad38eebe31768bd507abb2fae1b1c3e9c87eba03b0b78a0e1e11d824659f3b268e9a0faca6494bf9e9aa3c066a341eb1f6d98fd5fdfcdd872e5119a9495eab9c6f7b55551a4ca1713d7e2e7caf413adf80997ca720b8917008a9c13d7f3e403f7e1fd42852a35e8267f6a6c858b0645c83e051bc8e8d95fea97d4a1a891190003ca7cb808a5c3501dee038899ba655338133d631090a11b0fb48ec6d3ebeeac0fbf2a77a834cfce0cfb35a8c5df8a049e11ec27f36d8fa12ebcdf7e574162d1a4ea038119c27612eb9c56e8f8c7d562c3eb391dabb54bf87ca504f444d2f5e0f91a5c61d72ace4bd5b81a44917548cab75805181afd29a35c113719a403aaa2e5febd3b8b958e0059aacefc608dc99bb85b93dae7466aa5309da044f494e7e94078387008c2e71a339095778504bc4af2cd156327381ef6dcb1c5e4632a66f9c0852e4a27ac19b4f42e87fb229c964d4af64b8757848246406f1565b9b899d77a5e2fbc497353852b734b574d68e185fdcbb06149eaa0b759730b5367469b188e03cfbda28982d3a2e3024c64b8becde641485bd674760f1cd8d6c1985fc554aea11c73987521a66e5507347e9baba4ca671948d85a7dfa52dc76f3642e0f6bf765e32072f6db83f6f6b35fca7ba53ca23e4d1cebf6745d5e33fb73b470c08791d4ed740915fb32752beb07a42ccc05ff0c4b29328b5d8d9883dc6f164969ae71eeaab419ea480777e93278ec2c9c0e55e245b45e55c3ca77569d7844db36761952827f7451bcfb0ff6ffe1e96f304edab358a02c3262583fa21f141e18cf6dffdde0824884f33cb0fa564269260f9c2a5e3147c285e6ccf0b49dec0a100bf120d9d23eaec041d2b10b9eb370c5f7366f560e5ab7c214456648f581a1411b5a6faeb68ac5eeaa4f420d337206a931aa8627012f8d706205b8c47da6e24f7285c59ba6aa00a09b99e6ffc0a1b5bbfdcd6e467b8e8f118c22210a68ef38629f9386c7a9ae731e329469bd48fc8e6a63c799fc81ac095c46c62bcba85bf0d38bb9071ef645c2bf46824b61cc953e19d408aacf380e04ba310af6f3f2bef392c8dbc51973f36e02495a78de2c924ea04e07c05e16ae21a99b66b4576789ca4efe40e869635f76c468af56de3f86402a4dfa5142602e34c04a39a014eb34b4ef40396937152fcafa8e381059f6a09966d386c5f4e5fb7f62285f5de813fa5603d8e59ad789bced40863077bfb10e79d3abc44cb4a4c975097582705140935868bf37bea7d6072daeec57d60bb08a965d8c1e178501edb2e4d5870117f1a6ac7da2f23fa46128cba725563440bfa033789ccd7c11230e3e82e6dbf90c658a6a5f93781b8df2b4f1d296b7a57c61b64829e88d6f3728f39923c59c077510b0431982f1db69ba24359c2ff9a93e181d14bfa1620a4f7adcca38ce636b222364f5037e82a9b742c0733650af5ffe38715aaf379332de624c4ddbfcac36ffc190b04e1c457da38e99a50d2d826d77b721f57f8b907f35765f55eb21c6e35251f40710a1dfdf4eb669442002bf658b2c9f6170f54f35a45057bb287826cbecc90cf9f315556560b90fe5c779a0388060f026e2123ec7d09be802a10b0d970537f5d9a049c516df34291b32048589604329f298a789fb0747f23980071bf9e52fde9355cb8bebf8175a72b6119671575a6adcac19cd4060fc23aeb274161ac22cb9b04f79bda75e4fd1de7065a7d787bfd640519602ce29e8ba8716280d00aafe02f75374582c15c1fed2337317a94af7276984c41918dc9937949791d8be26d50a5c9735670db0e97b7d55c2a5633bc3e910f2c0dcc91535d1e20f6881b9c8ed70d3ea42ce6aec7ce56a706056598ffc400b1415a641ff5f87e5ebc3595e15d3a7f5812892af658b391e9c7d6d28aff7800ddb194caf174ccb13753af9b3584a10322a5cba58b997ce59f482f0f4e88f17bd480ad5b37c1edaa9813e2df7900a2b4f15230a983b3002ac7b5061dbc68b781017aaab0786fd68f9557ba49a74a4f81932c210b1003712ecc7c81775f095b94576ec8180d1f396cc9b157f7e9551b07ea591a494ca2dd97434e2fbd5cbc0968d6c13c6725c17c4db4402e609181b183f0f9944aaa4211659736e0e18c125945083719bed3e0384d3b7ba742f9af193950c7703bd7a0554eec9fdc6297dc71882f954a17830bf180e6431bba1c8b62e48b46aec6acbda37b488c70dfe1b7f259abc77a20593d01619201c67db7a304f699e15f11ffc23852405e57c877622f85796e332d22a324571dd0fe88f5c04fc937c6dc303f1e7cff174148af7ebc994cf69cd8f98bb05e59a46a0b9e0b6893f55c98d78893215b3e7d713aba5aec20f9acaa5a2301e8a85fdde3243c42dba8288c1f789f9cdf03198fc14d13fb70406790e81f7b51157e23b64ee84043efd9fac5adc41f239d1d95e364b4e0fef85789280d4598520a2308a8f3279f10db1aa46d7213a95b6752306efd98c464c421da0e689845bf2a66a96508f67f3389fc8fa1c0f5d93f498863af54e3bdb89f5ce4faec9b774a9ada40762d0089846378757fcb6fbffc8029d98640c194361af068fdeb739064386614ddc85c7a8fc1e76891f1493c7c782a2498c37b5b2c29199c43da72edda933c82cc5ee93936c708f8f8cfdf0e3cb95bfab34726314534525ef645926d839c3c9cf5a05de53d56c9d8f0238287c05a060660aad0a39dd0694537b7fcf77d8b9fbafab2061b17956b790c35d5517bb5799226b4b6ae3cbbdc86da20ea6a1368913a6c3f5c83979d74630c5b8daa15cdfb1e6be55d37c8346bad7a7308fce01148b5a9c6442ee0a1ac48dc58b7c84b5335eabeaf11e408c75d1c1f17228b1831f7e78829463f0fb346b5062f74a94930593226e78055888e1e54fd6ad802f878b55215064ccd12d3a7473d1536e81928321e8fa5eb5c458ecc4e36bc33958178cdde19b4a05216e79de06292351ed3759efd4bbda9e88de907ef9fabaf1d1cb4c565a04005740a46636a63b3164a8d2fe12821a9c08016a74f378e43e7621a2e39423ecf0243bca718dda5a40b3f2b2717842865803e9d30af759f6a43dbc4c1bb980727278747a1c7022697c8fcb9b6dee018527a7d7d471ae5e74063f7f5a00c9762243cac6f8b84144cb6512a889068a97cb5efdb3f31e96affe554195a73279f887784699f5c2ac74652fb9b1d3c4fc527e3809f1b019b59f3367cb8b1f4b213cee2eb53bfb0f0e93c98b6bf6a1c4b87a9d63c42b04f1bd69d26abc5bfc7540f800e27c3456188e301c289fca0150e99b6c9e64ac56a5dcf5483ad89f33c30da11b645fb38603339c049658efcd3a93cdbb279041737c2ac48fbd8f448391f0406413ddd728978a9b09584ee66a51875ba84fdbd14662a5e56fe2a61e468705856213245e48f1dcf03fe03e3e24307bf82ff63385dac1016c818357077913bf54d85e0100084994167e9a6bf54efe6545b828254b1603d0adc9984a28ff538aa3e018bb045853f13b4c64e9fb0509bbfde895582e0c2e97a59df24d5c6c42c5d49d99a2d310909da8d826c15736179874a581b213908a1627e43497827bdf64a772dfe9834867aa78fc887f86d2b87d9c78491270f9c37ca0a2602ca28fb56b8c60559d4e024b328322ad1c193bae6c0f5de45eff8b00f035609bf6a0ee8cbb760faf8c7eb72b339280b4cf9dc2927ee89239b4dc3957c5351e3d57ec0f3bb326521f188b85decc9dcbda42125a26c45eb8696c56b90dd761388987d671cf72d7b06511091bbad68738ce744891686fffd417e78d4b0de538b3693845cb021217423527a20fb8c72a9fe3608e6158f86b3f76d6df9077439ec1606c3731a54879461f78c9a14cba1bef3e311d2701e5a53ff82a25895bdce579b2969ceea92d98ee1cd1129f9a08f1f651e4ffcde4955c3c918385de17ea844d15e31d72ff981ae71e062c3000bc8f9463f032f059d0e9cf2ab7cdf4f6b62e8f2bf7c9879c2e9fd043001b394b083805b508a5a90a4d36db5e09905ca8fb30e86442c35bb5a6f377947e54b2278555651a4dca65dadf29ae19913c986cca670a4c4fdee8e3cf5d075765bfdb47eb9eb08a33f9a0c7a6408a164a2d8d43489f0888364e97ab2ed53124adb27f373de389c85389275b6adf76250177aee8b02eb2115da80b9f198b6433db6d808e99e9df1c5905806ecfcd4ee286ab2e3a8d56d82f37f42051995c8f0d4dff772b024cf71056d688c8f0f0c921f0cf3c57221a0e854c77942c9747b854566317564c1cc5a7f0bacd5a915d9f2192bbe3a0f69a755d696e138d496dba4da18bdf722e591eb90b320be83550330c591c3010be7617de9cef967afdb1028a3f1011f632029369270cd3339a173538610c39c0f0a63a530174f87eeeead08e312a20ea41d357a9cb88daf42a4c7539b81eded85f7999fcacc9a9ca825209879ce9a432e5b6ef89c31297568037a629d86f7357e88dfedd2cb3bf1c4416a627644c68cfc66b4c249161ecf3aa7cb9902428c37f7cae8f80693215e2c16a8f0293c8a2d27b40e371bf203a8a87abb5290004b555b3a82737085841338511ec677e0c79eac849212a31921af4b041b5eb63f70d4e8c3ad67ee6d8a60b90b155ea2b0c8a12de6ae872cdddeff42c7b5f9fe1a160fc9f0f760dfdbbbcdf71e382b6d3a264aacb967de5dbcab70bf878d4811d31f31300ffc98ae04cd754618b6fabd60a68ea2c9db448ebb3f17c103db93cafc86bfedbabc52a0605a600dc8834065b00a642b2e6f82f52cf698ddb2b7c54141f320b7e9ee94ab74e78630f116", 0x1000}, {0xffffffffffffffff}, {&(0x7f0000001040)="b67e3ed8a3fad137ab4518cc15591d06a6164d2e7535abec5f6507aa63501aa7b8ffe330782d5cdfc532f74afc7b0e553f0bedf8ee7ed1783e7221127e4d65048d4d1c8dd4acf1ce51c6f74203f3c356d49859d23509813f9d79f032ad8eb5c90e464326b20b91fe7841f382684fb5fc289d0d15768c93d39c9f17663add33e4b3216032a081e2400db06d66761d9f53a41808c461ad96d097f90af3b0d62200ae67e2bcf037e1a7cacb0c60951f1dcf1f193b5b5da0c2c506877762280845d056ff80020617905c8452aad606b12519af42b22f0c08fd088b3d8921fafc71eb80ba143b5d4c360475e6ba9c6c23ea1acdd3834618d664ca", 0xf8}, {&(0x7f0000001140)="92defe38160649d47f47cc326bdc3321db39785f8de017fc27a79c628113bb6ebcbd16798126cf4de09e4269e48ed2b98ebb27ec2ab11ca41448c7b54acd723bda5d9e8ab373748589b17c2d141d06c5bc946c3beafc", 0x56}, {&(0x7f00000011c0)="596f4999f4725f71109e36f1b14290f6045f7ee94317db8db8a4c33352ee3416f1edfd5640e2a46ac72fdcb262dd5f562c945ccd7b673819a8c7142bae9c1966c5c1e00e57b6a197a3004bc608b25023b665563e4a524b9af4fb2c7d3b31da5242744b1af9e89183415dbeca54b12bdf747f4f0dc921e62da198dd2e9403676f6f91774a689ab14d87cf5253ff5ec9df0ceb0840cf4137873b110c3adb781af417191a2e22ae1228d7926d96d335b2e102c4472352bd016865fe2f692502e1838414417883932edf3ce0060256bb5c8be2e6b32485ef4f39b844d6673be321ed40f9a277ac1113", 0xe7}, {&(0x7f00000012c0)="8b1859219e99403f6093fc85387c1b50bf419c610931fd98035d0533ae7b1b1665f1693aff90e12ba6f4df0c3e74cb2ea4dc08ff71052baf4bdd4e4bc23fddd34c7c33361fac434ecdc288372da0e5d5851bbd50d64dd5fe0d9b409d7ab7670ecca278ca29ee13b79031d54ff8a58a66561f5f6185852c38a4f4b73b85f828a9c53bc47e578c5ed473c35bed6bfad3f659e76861c7a16c0753ebade187200bd57d914ff43607f051d285fbd500276a2623f66c07232b8da3bb9f39da34e75e5d11baa1be35", 0xc5}, {&(0x7f00000013c0)="c1e4fa2f0ea747f5618db00f900f82c5894dabca1f2a70abce8668a604e89b1571c5cb2e69359062f9b64409eb6993e0ef3f610e104935292f5721501f7f3a77fd185d67ae7f4129df59ecdc67b770a50a904c5317167a5466c68a71e050fd3003df91270fe8f37ba346096562a62d43adbab04dc9fc8b44afcbac56df10489594dab008d97e66cafdfe98d84a6874f9999b35c3128a3f7089f89042d987c903122ba106590e24a2f9c8c866b2835d5d5085a435c00843c1580861ef5789e4ab21e80c93c83d9decdc1829f994497a5b2ab4a6ff573229afa8bcc4c7b7f336c8d5ce53e6fa30e720002b2d695bfcc9d060293b9c6ca327b5ed2ba9bc2bda90e3e206f2847428e38adb4deb7c1178807613bbcd8bb2500505c0b63edcee058fd2d3526f91f8c1c34ed9628ad0167479135fd95f7c7bf004e3b5f9150ee8f7559b21bf8099964b5b41640bd03c44369854a520c6708f8512afbfb38e9ebe6a7bb8c95d4d4dbb7d14aabd8cc96cf564653fa98772bf074bc9fa7dfa0266f0458ce06732a9ff86814062abeaafce442009eb0c40ebc4261844f2e3561f37728ba7d58c95216d3f2edbffb225599974d720cd61185e508175248a946203c7f793ae04513092e3aa8c37e89e6007d3f5833930897033ced2a610e968104e48a6d897481db2ecd3a03d08aecb650c9b158df14463166bcd9e613fb4c279f657576eb35a0236783341f70a7ed44c8c2e42571235d79941777d9dd1a8c6a0cc43086f4cf33a6fa8388686465fec2817057d5b0ce2bd8034f7b1039640e02957c0d706c54b985baf60a4e61627d921013839759a113b5a99b580f4a96cfc05c905476f305a38a04fd518d67b743c70c31fae412f040574276d772c28e3302533ce549079d70474b5dbf597adc2b1c203edd083267c1fc941ba49bcaa6fbacd3bce4d7e9707036aa899446841234ccf3387eee330b265d8e83984b98242c53d973aea720723acf2406d3975f0c8d09dc8656d24d75bbf027e5bdf36d0e6b34ab6e7e33d18cd0a3a780d4c39700ee701e999b11bd230e45275fe5edfad91a65ba8e622df90036f051cc5dbc204387c8adfa8dab5cb04dfa66c393c84b86287363ce4b72703331de32d0ab51a89aec1ef99608c83ca76a8e06eff6aaf35ef1bb1f0cff9b423e2b110662e279923966b0e92b2bda1d72574d4f71c04cc9b035283dd2c12c9587c172edf0edd637f84bae781da7dc7e64315052b02251ddc3b2a7b4cb2243d13025775051f2e3b7a0246baf54942cea3d9b164f131ccf97b62bcc6d0ece5251f473ba062d705a4fd0e7b8a0a7f05e6d23d27cada381f561801d7db6ef2f1699bfa0fb326a4b699633fcf8ea98c9e50b1b0ab1eb247b902706ec3d304b8aafa053f8d690205dc20997cd16218fa07ed28250ef6fe9f25902c536507385b2458f05fc605c0b52d3ade60b700f51cbd43acf11cce569e3a004c989b7f52d63c89b91d35718916c5736d56c28f0a3168f0578ca351b2ffb0c604f1bf0f383f3924cce82994b40f3d725e0054284c055ceaf987f81cde0590674ee60f6265ea2171fbd95ced0839130e4a7050dfb1208424ff301659a55dabaf0c4525862b8a4acabb21b2bd3eb2886b7cc9644181ca0d3120d1828b6cb722c47b5b2c9d7bcd5007193c3460c59517e2215484bdff0a617f365aa2d455e3ccae11fa14448f52ef35400bdd779ff20f9bcb54719afa1d33206da06e36209ed0df7c9465025cfe1c1827b62560faa7df67c52130c7c0d43cd0762509cf234bc18690534a0c3166789ff42c8fb690420767b47823988e263e550b5638af3f446faf7ca49d4e3adf8fc56658e45c3b90132bc81d3663e5c0fb14e4791fb3cc694d965a20a17976ed6f81be62c61c5eff3921d4ecf3a8a9e95a0c55b03b9f9213efeb04045cfd0e6fe5edee688d15e2bac7959fca71ef0a409fec75da80c82645becc70d2a78cc4694787581c1443645b78355ecd35bee7b80e1541630221bda861be5b987a54107a7e3113d1e2e9b99451465be769be50386f272d8e102b7dc961b3e674d862ea12d4b9fc4e8881e233474c33cce1961f0d19d6795611097ac40febd6f5d0bd4c1f5b4622c41574564ed94be2c34e5b4c9eccc0f1d91a1692c6a15aca81e801b3a5fa5b17b1c56ca628f0bf950bdd548b364c4bdd1cf669eeb09920688c53928b808fd9501a095e53f6ddd2ef4b3247dbd8304076127796a3f593839a8cf03a1b8fba005372e222b8a88ae6132b83b9747dda97a6cc58c4bb8490657439f42b03ce424b6b1cb6fb54bf4dce4bbb045119ccb291df0a37e3b31dba142d3a4ac3c647c9590aaa4b09dfecb82b233361b1bd2c5a9e13fc6dc64314217c271ddd6dfe20dcdbfe6af7b731fb1bbfbfafc1c75a6d6578b80ceec0ee4afb9f2d6b49cfa871aa6a01897b196491d8ac23365389826e37d3ea12a72edf8ee3539258520d216ad7d5f72b144fbb02308cb43a3752875a507b17a54f822b791354a60e61ca299ca6e6fc253adfaba9a9c2af4e3fe70b142531b6ba861b4f72d702b9aa506da67b6c8d56bb93955cfd4b6475da274eafbea0fd7abe5129fd23d55a67544e8f45f7f157f69b73713e825c58a5ca53b10f585f31265c41056e7a2f1a395d38b51fed1dcfc43682e907c3ec45dd98d2825142234da1a3cbf540c46fc972e80a3f31a99219eac3677273c6488331649d2f83c15baed22a5e17732c82134cc4acd79f2dae1801d919ccc57c35f6691ac58657592c328b390a8aca20e620c41caccf373f5b53e14521d17ab6df9a6a9e5b5310485e1f448152a25e235d487ecbc318f3c9f58feffe560b8a57c34121c71739c5307f1939fa4dd2f81dc18b252f8f48cd068b644df98f09167cc06f3b10cdb10298c4d3740d51b7a90d5d8f3687b02afae0ce217f3e3b694f96bf0ace9b406f7ac051e5e467c40d5a6ce9215a4597746d0b05c3c29032a878d66fb81eb5af9b2e12b8e23111b20538dfdd26da8dcc065609b377e3ebc9e82e5e3ac52616b2c4eb6c38faebbaa07199a1e354d1302b5d02e11c7368ab021feb1e965e15a52fe51861e9082b625a0a68064ae30f219eb9be3ec2af21b54c17c0fd12963fcf7e205579c455e4599ed45156e1aa305d45c9559aa4984e41355f4a18ee31dbc96dc69ce9d13a5e1829d4ee34ca0dd5b461219bdaa168ca908b318f174e807bdf7c81454d67098c5dc49a20abd4ea5eff35155aa20b7d8331b17ecd13dd813be6f6e9b6327e43703cba7e54111ceddb84e07522ad02c55df026b64881b981c68911329831b3b834276d1bf732ea516320a962d952964911f8b780108af99d5c91981fcebe871d6911125e218c2b15c67f7fd938d4f8b5086bf05dafe1a18c751a75d81a7c3a69316a07185b0561f36f7683593f58fa8fb57f50fc6fe405582ff87fdb1ca3df9732bad5ff43c179fdb3643475dd09b9dfa49ed4988dc45fefad62d2ad121e70e80c63baba91ef184cf477849e0e7249898b6742a6983d9bbf4202e0970c79e7463b1a377623bae26119e6089f6f2e03bcfec58b9d9b37b8fb7173e3e5e3f688749328a8fe5d112a9a4528b71baef36669e3a52a8a1656a23d0424868d6e87d496b78ebc7c9fb333a29de8b62d2911855f89910d343433ac868b36d8f0be81cc4746af9384d9a5ca374c8aa204fb8ec0a3b68b33f772bb730c197a5a6e92596bd0435fcaaf9ed2161eccecda65265922d417f81b29dbe1fb662594318271fca86dc25a229a6a0c71d71325446fb8e89ebaa86dd356af1a102f8fb0e6fe19913edef77a8caa685806609ec66dece62166a12765624dd5b27998b362ff638796eceaf056a40c776aeb3a7d7a6829b7c59654d4d54be919cbb43e62a63b700b466c34432bd8dc477c926cf06e60e37928ec50f23d3a2295ba18f70649cc200059372f1e59d0f3a3e51ac71d102da224a6a5aa29df3f68fc6fa8696ac4490c9573484bc2827a7be0f800d29a49eedb27131f23d8eded06948de40f6b0bae5317fb4be477b265fb69ff41813aec5874ca60e997d7d2e0229b27264617c90be75263984c017b2554a346a5d20c4f8fb4119dd7ef01f5dd97c27b545105c3d69097a49c9210d1766f3af8ced6eb050a542f74c2065de9106a1b248d38612457dda16ba1d2e21688cb88996c73503812c051b0db4fd6aefa9d3461f563f136e63bab6d3fd0b33ac483d900c84018333c3837804bf455e1b353ee19f66054f35283a6f12fc8bedceda6ee7abf24b5e6ff7bc905d521b4932747c04dd5c1656f497d8658bf1f0bc73c7ee40eb8cb5c3bbea92aba39dbcef3f15db803d5c82aefbd3fc1958eb20de49ad15814bc9ce1ef62577edefcd4b2052812b87bb743d57ae1fa540f5a5a3e0f6310c176eefef674aa1e811ab74aa90250013221fab2f41ed23b6a53d57dc07fd13e34c6c26c6ecfe4b9dab8cc7bf22b053baa4583a9f692dcfe3be6348e7ebd717c4bf61df139bbf0ffa11d0426241d05aba3e67e590dc4f6c8d5fcbb09b6f16eea10e65bdac20328536b610f585d150dfb86fca686eeaaa7a519bd801faea15d99704a80c24fcb9b0c94cd4256c8ce64a065d567edd449b5ad34e0ed0e4e777c1e605ff00a8698630a6c44acd83691329cc1ffa94fd59be5190d07e3cd9b413e90a0c6ad7488d25c2f9eedf9e7856d1512305da66b2e5c9e463f16a42a3172ff69c8a43d52429319750458e9638759cdb39d0c531e421d5f6d9eea1340ff8be16f8f4be8a7b1355e5a2241604c987832f8cbd96ef547c294ab78b94ad6a379f6f3e64de917c221c1f6e110fdff5c00e8cdaedc302c30b8db7a2d23048ffd6ca7e634aa171ef3e46e04125a090c7b6bc4050a300689fde80e08faed017cd98a196faae467b9466538c028bf9493db97130a12372c73a3cdea7bb603ae10d3836ab1412bceb2d57e5fb843f1ad81148c392014c49c8585255c33b1316052273f3e9e9834ac53f3de9de521f6e64bf75fe29842ed97522ede7604760e178eeebf5dbb362e73fa88e75c37cae856ba7b96de73f1962a9eab6e0e079ddebdac2249f1ef12f99ebe9f6a94d6c68b0af90ce5c6ee83bf0491459416bf673421a73f74ffbc2d5c31090542982972740cc7d427d3a2bc650c4e17fab2e4b2e2616b13d4f6160783a5ca30056cbe65b19418c995d7aef7bb1513078060838c70c20be3f6d240e26a78111b9210595829f7b695267f6061ebeeec99d4dec2146cb5481cdf7c857cf92efcfda8079023b237ab7f298b4c91a5975cd819a1a314fd3c5413acd547d0d4a39b428787c533837fa03bd9be14f6c5d5c545b27d9a9f777f2b3f8609841632b6d5407625fd50b65785702debe285168eba17e9a773e2dcff9c3c6649f27e9ec759555731e166856675a4fcbae3b7ddb461a42f8d76f44a07055bd82f4ebd7158796a467ba2d4df34867b86e957c47ae673085418c9b6b49959718804264d73c98b2aa99f8303130d57397211c1bcd7ac06a4eb5ca5305641a80812b7746969d99421732a51d1acc9e6d929e72774adeed427cf4cacd50adbc68bc9ff9f52340e58a620f565dc75d44a64b1aa6f4d3689bb2e7b00ae446c69f74277960eab4a939f22f72f010474b94dc04fd7475feaee76bf92547f496d89da24751d72997abd597e9a1083b412fc9955fb7983230101d4531e01b4e937127c0de3bff2bf0ee4c9aab3b78ff5a884fb97048c14b41dbbb3bd4f7e20ea5232300f899c96c7edd0d52050aad0327670db3450", 0x1000}], 0x7}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 05:24:52 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000060040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2592.577069] binder: release 4488:4491 transaction 441 out, still active [ 2592.597431] binder_alloc: binder_alloc_mmap_handler: 4488 20010000-20013000 already mapped failed -16 [ 2592.625101] binder: undelivered TRANSACTION_COMPLETE [ 2592.648425] binder: 4488:4491 ioctl c018620b 0 returned -14 [ 2592.658019] binder: BINDER_SET_CONTEXT_MGR already set [ 2592.677548] binder_alloc: 4488: binder_alloc_buf, no vma [ 2592.726931] binder: send failed reply for transaction 441, target dead [ 2592.735799] binder: 4488:4497 ioctl 40046207 0 returned -16 [ 2592.764436] binder: 4488:4498 transaction failed 29189/-3, size 0-0 line 3035 05:24:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf1) [ 2592.784626] binder: undelivered TRANSACTION_ERROR: 29189 05:24:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68) 05:24:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2592.863625] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2592.901397] EXT4-fs (loop1): invalid first ino: 0 [ 2592.944555] binder: 4514:4515 ioctl c018620b 0 returned -14 [ 2592.979096] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:53 executing program 2: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x200, 0x800a, 0x83, 0xdd, r2}, 0x10) read(r0, &(0x7f0000000000)=""/177, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) 05:24:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x3, 0x0, 0x4, 0x1, 0x0, 0x7a0, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1000}, 0x8) [ 2592.992422] EXT4-fs (loop1): invalid first ino: 0 [ 2593.011739] binder: release 4514:4515 transaction 444 in, still active [ 2593.018717] binder: send failed reply for transaction 444 to 4514:4518 [ 2593.025715] binder: undelivered TRANSACTION_COMPLETE [ 2593.080159] binder_alloc: binder_alloc_mmap_handler: 4514 20010000-20013000 already mapped failed -16 [ 2593.089703] binder: undelivered TRANSACTION_ERROR: 29189 05:24:53 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000070040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2593.123092] binder: 4514:4515 ioctl c018620b 0 returned -14 [ 2593.141180] binder: BINDER_SET_CONTEXT_MGR already set [ 2593.155026] binder_alloc: 4514: binder_alloc_buf, no vma [ 2593.162339] binder: 4514:4518 ioctl 40046207 0 returned -16 [ 2593.241174] binder: 4514:4526 transaction failed 29189/-3, size 0-0 line 3035 [ 2593.268342] binder: undelivered TRANSACTION_ERROR: 29189 05:24:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000000)='[', 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x38}, 0x0) shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 05:24:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf2) 05:24:53 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x9c, "121c6763775adde0eea8a38c4321deadfb7d9e8976cbfcabf1a0da138a080de319b95cc5e0a2d322fdb15a9bd62e3b5e4aa8eec1f3bfce6eca838709974130ce4654f2ae06066c64b5d113b622a4c2e44bd43c5d9e8747e6cd0ca39c190f77c92f3855c5c4cbe32bbaa289b09caa98192be4c4f9191c16c03a3df703479fe5dc3e1b4f9b82139bf78f46f9d27ae525a39176637b771671968d6d946e"}, &(0x7f0000000280)=0xa4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x8}, &(0x7f0000000300)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) ioprio_set$uid(0x3, r2, 0x7) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x6}}, 0x9, 0x9, 0xbb, 0x7, 0x80}, 0x98) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r3, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fff}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x9774}, @in6={0xa, 0x4e23, 0x4e1, @dev={0xfe, 0x80, [], 0x1f}, 0x100000001}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x59251fca, @mcast2, 0x1000}, @in6={0xa, 0x4e23, 0x1, @empty, 0x3}, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x81, @loopback, 0xfffffffffffeffff}], 0xe4) 05:24:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c) [ 2593.312734] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2593.320530] EXT4-fs (loop1): invalid first ino: 0 05:24:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68) [ 2593.441621] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2593.457702] binder: 4548:4551 ioctl c018620b 0 returned -14 05:24:53 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x200, 0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x121240, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") recvmmsg(r1, &(0x7f0000006500), 0x2c7, 0x40010000, &(0x7f0000006700)={0x0, r3+30000000}) [ 2593.484654] EXT4-fs (loop1): invalid first ino: 0 05:24:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') modify_ldt$read(0x0, &(0x7f00000000c0)=""/57, 0x39) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400001a2000000126bd7000fcdbdf250280b01f00000000020000001200000008000b0003000900000000000000000008000100ac1e01f5080018004e214e220c001400", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="08000b0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x800, 0x2, 0x401, 0x7, @time={0x0, 0x1c9c380}, {0xfff, 0x401}, {0x4bd8, 0x100}, @addr={0x7fffffff, 0x6000000000000}}, {0x5, 0x400, 0x0, 0x7f, @tick=0x4, {0x952, 0x764}, {0x5, 0x3}, @queue={0x3164, {0xffffffff, 0x4}}}], 0x60) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf3) 05:24:53 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000080040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2593.567605] binder: send failed reply for transaction 447 to 4548:4559 [ 2593.574762] binder: undelivered TRANSACTION_COMPLETE [ 2593.590722] binder: undelivered TRANSACTION_ERROR: 29189 [ 2593.601410] binder: 4554:4555 ioctl c018620b 0 returned -14 [ 2593.621984] binder_alloc: binder_alloc_mmap_handler: 4548 20010000-20013000 already mapped failed -16 [ 2593.668699] binder: 4548:4568 ioctl c018620b 0 returned -14 [ 2593.669218] binder: BINDER_SET_CONTEXT_MGR already set 05:24:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x0, 0x800000000068) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x7, 0x451, 0x0, 0x7, 0xffffffffffff0001, 0x1, 0x1f}, &(0x7f0000000080)={0x8, 0x1f, 0x80, 0x8, 0x5, 0x8, 0x0, 0x7}, &(0x7f00000000c0)={0x4, 0x1000, 0x80000001, 0x0, 0x5, 0xe1dc, 0x8, 0x9}, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x4}, 0x8}) [ 2593.735289] binder: BINDER_SET_CONTEXT_MGR already set [ 2593.741817] binder: 4548:4551 ioctl 40046207 0 returned -16 [ 2593.746563] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2593.767673] binder: 4554:4570 ioctl 40046207 0 returned -16 [ 2593.769119] binder: 4554:4579 transaction failed 29189/-22, size 0-0 line 2896 05:24:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x74) [ 2593.792581] EXT4-fs (loop1): invalid first ino: 0 [ 2593.830157] binder: undelivered TRANSACTION_ERROR: 29189 05:24:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') prctl$PR_GET_NAME(0x10, &(0x7f00000009c0)=""/245) syz_open_dev$radio(&(0x7f0000000980)='/dev/radio#\x00', 0x1, 0x2) sendmsg(r0, &(0x7f0000000940)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="af8d33926b7ce66efb16ad440df004f3e75e715b3c3a6c3144094a425ba4b7aa39d173e37a606e0c7b2d48a333533ab8e94e8947ff61e969443308f6f667c4a341fd913a2203a7ae2bba71156a21874186029b1d31716e80b8405dad4967d30f2f41a6d63a713c24b4aa5b872a481e1727df1d9f78edc8f777fd0aa1ceb28fe40a195a698dcc53dbdd61563fe3414dc1fa049f234d44b5120e9da67f4af98b6219c5bfe9c977581d22553cb300fa73d4d6e023d3f46d9b1bc53b5b39baae9032390b52b4778bf0ee0f5ac543818138400fec26", 0xd3}, {&(0x7f0000000240)="21959632efae0b71e8ad5b682c0f1da5ec24cc6564f6bd299b0f4a686e39e2127e496de46fabc55550bdae93d38344363a2937c319b76ce6c20920e9a196bc5c48c471415524909f5ebc7d512d8a2ed000f27c9ac566df86b685f4d14372f40a32ae88c6b973e6681ab5de8f22be81a5671c6f9f2a1926d2d0ec7bb1e5a6f860cd3506c8f9d8aea8da743996f1f8d1240357c96de8b8c7e25ff748cd0f61bf6e2d8edebf410173a14f9386514e398f1ace0835dcfce5", 0xb6}, {&(0x7f0000000300)="40e49a998b122954a1603fb2626ca41cdb777cb41535f2dcbd4be468793b94567d205672dae8079285f59b7b85e31eda3a59e07e009523ef48c2911814fb8f27b69bdd6d3f10248dd15f4d2ca4887075e7d7f65e3651943ec9f4dcf0d9946b6dc579f48236871b4425f829d5387ae8e4a62e81f266cc69284c865c13e21dc2d1ca68026f26554499fda7bfe71f9858a8a433df1717e724cbf66428593e7e8fd67a698eafea373230a8ded81f3150a9e44641c53d9c1f23b060b831368d01c105d07b39a5c03e4dd307be0162819ca0a67f7aaf", 0xd3}], 0x3, &(0x7f0000000440)=[{0xc8, 0x0, 0x2, "9cc2d3aaf12d333d55476113b0435d7f8c98c8bcb18ac12e7ba9bc26637555ae5a38e20f994d9b7884133b3dd3f24d3f59153e76d4bc8fbad7805cd1551c83f3e5a2dd139ae587a37394fda991b1e00fa385bec62cad4c242b462f5123a5cd023601197680f6ee5e1a6745cd32e6c68b7432cff646fa0c64006b33b68d0fe5d63270eb771aab7a06a64c679b5c3ad220ce868a38de4cade038677b34ddd632edbcba875255e7d36784ed88e196ce91adf40b"}, {0xe8, 0x11f, 0x0, "64b0673c32e3969ecc8f2356fd0d42cedc5bebb82fafafff20ae9d6c1d4528dcfbe2527fb4634fbdeaf678760acbd8b9cf675eaac6681c4500ad6aa3400aa1d99da6276f1913013420fe3330d2e1267990c91404816a0b2ea694f3dc046f769a4add706339c805ce1af30295f3b36657f9c51d2bd4c6231ccd1d5cefdd4955a903c55e681e39cf0b6b098afb3c02e56259943f06ec53ce27ec1b79b30906715397471c96bc5368b00f11bc66504441b3ad9c9acc58cc69825923600560abe518f9b301b2a9eca08d4f9d57c3f231cf1498ce289deedd"}, {0x108, 0x112, 0x1, "b9c0f40c28169b0553eb0ac3af477fa0f5925db96490e843f9c70c3f1792f684118cd917b870aeef90db280dd3ae3e192d6bd01e2cb52666cc26e8d4494f27e27a49c53f92e7b1a215cb89d6eaf27a580bf9beb41de7b6d375122e90751ecab3f752271003dda680342d247960086863e0572c7da2d9a8c3eb6c522edb0eaa0057c939ae5a4547a8a84ec944549535a6039c0be340de736ec50c67c60a54f516e7f39a6b9da68309753facec253b91565c72b661213bc92bfd3ea85fd25c50b228c0d821d8cea80558e91a9623703069e6a845a25478ccecb54b8895d0a28e173400edf5af0acfa0261113fae0613200029ced99a490"}, {0x98, 0x105, 0x401, "f5a772ae5bb509aa5eeb7e87957f269c87c32b0e428c1bfc4149242af415b287bc1dd1eb33862f3e062b0caa4b498393f7620b87a3e7c99a0be2cf5a3a499a53008b9ea5b7ed04b27a06213bc48304b8ad3782f91a3a0689e8330ec472d410269da7b2bff4a26eba27586138cd8bcd1b9823c0c8943730140237deda895c3fc891"}, {0xf0, 0x10f, 0xffffffff, "b2b5f2de0af547c956eb356299bd11a2e6ee8b98a42d3058bc84ded1d62cafe54f51443106c2c80922a9502c30dd6af3039a257b353cfe4bfb72d931b383c943f2d4dca243dad7acecddf69a92e7cab3c418a8db1d7d9a07a84e1e898308e511f91e18ca752eec6e436d03d829b7dc03c7fb55b8dd5fc8f28f9fef4deea6ff1c1534ad5e0129dcf6c5d89f888d06d2bee3a359e761aa3c2b0dfeaf746e36c8602357ea2ab79d08896166316d5631627d47f814b5744375183862a6c28c095e332228298c82b400cb05ba6c4f3ebb3dc4adba5f9894208df293abe25644"}, {0x48, 0xff, 0x3, "9c35c76670f42f519d5af5b0db307783c80b3d100a8c19a28aaa98afea1dd5ec3c6d794fd9f852cbcbc2a3f248d98fac0a13522dd628dcf2"}, {0x60, 0x88, 0x18e, "fafd9b8923010c5f5422d886f7f62e9b0a589493bec220803cfe24f8276a9e2a4de7dcb4da937ca12e22e9eb82257531318bd038eb66bfa859874f8b43a66f6f59727f9af0d9ab64bcbf4d7f"}], 0x4e8}, 0x8090) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x0, 0x2a24, 0x20800003}, 0xa) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000080)=0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 05:24:54 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r2 = socket$packet(0x11, 0x800000000002, 0x300) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x19, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x29, &(0x7f0000000140)={@dev, @empty=[0x0, 0x0, 0x14], [{}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 05:24:54 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf4) [ 2593.900968] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2593.919768] binder: 4585:4586 ioctl c018620b 0 returned -14 [ 2593.938300] EXT4-fs (loop1): invalid first ino: 0 [ 2593.996965] binder: undelivered TRANSACTION_COMPLETE [ 2594.002788] binder_alloc: binder_alloc_mmap_handler: 4585 20010000-20013000 already mapped failed -16 05:24:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x31f}, 0x20) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:54 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000090040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2594.042563] binder: 4585:4594 ioctl c018620b 0 returned -14 [ 2594.079437] binder: BINDER_SET_CONTEXT_MGR already set [ 2594.103270] binder: 4585:4586 ioctl 40046207 0 returned -16 [ 2594.155916] binder_alloc: 4585: binder_alloc_buf, no vma [ 2594.184892] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2594.198671] binder: send failed reply for transaction 450, target dead [ 2594.208025] binder: 4585:4594 transaction failed 29189/-3, size 0-0 line 3035 [ 2594.222356] EXT4-fs (loop1): invalid first ino: 0 05:24:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68) 05:24:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0xb704, &(0x7f0000000040)) r3 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$can_raw(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00000000c0)={0xfd, 0x0, [0x3, 0x4, 0x6, 0x80000000]}) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) 05:24:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$NBD_DO_IT(r0, 0xab03) 05:24:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7a) 05:24:54 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf5) [ 2594.320659] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2594.345848] EXT4-fs (loop1): invalid first ino: 0 05:24:54 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040000a0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2594.396199] binder: 4619:4625 ioctl c018620b 0 returned -14 05:24:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x25, "eb63139635f34661f248fdec1865b3125b0015bc33ca9ce885c88869a5bc25cd28e85a089b"}, &(0x7f0000000180)=0x2d) [ 2594.452786] binder: send failed reply for transaction 453 to 4619:4630 [ 2594.459610] binder: undelivered TRANSACTION_COMPLETE [ 2594.476283] binder_alloc: binder_alloc_mmap_handler: 4619 20010000-20013000 already mapped failed -16 [ 2594.506758] binder: 4631:4633 ioctl c018620b 0 returned -14 05:24:54 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf6) [ 2594.551438] binder: 4619:4625 ioctl c018620b 0 returned -14 [ 2594.551734] binder: BINDER_SET_CONTEXT_MGR already set 05:24:54 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB]) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r2, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000500)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000000008) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$alg(0x26, 0x5, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x383}, 0x7) ioctl$TIOCEXCL(r0, 0x540c) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x40000) sendfile(r3, r6, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000240)=0x1) write(r1, &(0x7f00000002c0)="ae433135ab1513aa05ae02186c4d65dcde3f0e269f260000000000000000000013000000000000000027c9fe78a7c49455bd041d454d6bfcfe47bf27c272cb11fe0839a8843a14c35c6abb5730a279494b165e8cb388b5be9343f13bf9336badabe6bd26948b5af842fcbb2d1629974057355b596cb48207000000000000005f", 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000580)={{0x0, 0x0, 0x17, 0x8c64}, 0x1, 0x100, 0x3f, r2, 0x2, 0x24d, 'syz1\x00', &(0x7f0000000540)=['cgroup,wlan0\\eth1@', '\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'], 0x20, [], [0xfffffffffffffff8, 0x0, 0x56, 0x9]}) ioctl$TIOCLINUX3(r6, 0x541c, &(0x7f0000000380)) [ 2594.594539] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2594.631705] EXT4-fs (loop1): invalid first ino: 0 [ 2594.670675] binder: BINDER_SET_CONTEXT_MGR already set [ 2594.676941] binder_alloc: 4619: binder_alloc_buf, no vma [ 2594.698292] binder: 4631:4643 ioctl 40046207 0 returned -16 [ 2594.699415] binder: 4619:4640 transaction failed 29189/-3, size 0-0 line 3035 [ 2594.711821] binder_alloc: 4619: binder_alloc_buf, no vma 05:24:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x98, 0x4, 0x10000, "cf67e4c294d2d95055deb36fa307f78d", "abb193ac61154f4e5508d7d22d525ae89664e866e37c23e6c60787a034704b7c59fbfbbf997b043bee5829fc973d0e5f6ca18787f3d8ae1e822437560ccf09a2233a68e1c02a4c61db2bcdeb2d440e3457bedeaa81f9dcd261d808934167ec9f302d8dd1b6acc38e59563694d0f64e33e719b25fc3d6560ba6a470e0eaca59ba1b3034"}, 0x98, 0x1) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0x401, 0x5, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendfile(r1, r1, &(0x7f0000000040), 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2594.726626] binder: 4619:4630 ioctl 40046207 0 returned -16 [ 2594.751192] binder: 4631:4646 transaction failed 29189/-3, size 0-0 line 3035 05:24:55 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000220040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf7) [ 2594.906795] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2594.978903] EXT4-fs (loop1): invalid first ino: 0 [ 2594.984008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2595.000371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2595.052371] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2595.068386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2595.096444] EXT4-fs (loop1): invalid first ino: 0 [ 2595.182162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2595.210475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:24:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68) 05:24:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x300) 05:24:55 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf8) 05:24:55 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000230040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:55 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB]) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r2, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000500)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000000008) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$alg(0x26, 0x5, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x383}, 0x7) ioctl$TIOCEXCL(r0, 0x540c) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x40000) sendfile(r3, r6, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000240)=0x1) write(r1, &(0x7f00000002c0)="ae433135ab1513aa05ae02186c4d65dcde3f0e269f260000000000000000000013000000000000000027c9fe78a7c49455bd041d454d6bfcfe47bf27c272cb11fe0839a8843a14c35c6abb5730a279494b165e8cb388b5be9343f13bf9336badabe6bd26948b5af842fcbb2d1629974057355b596cb48207000000000000005f", 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000580)={{0x0, 0x0, 0x17, 0x8c64}, 0x1, 0x100, 0x3f, r2, 0x2, 0x24d, 'syz1\x00', &(0x7f0000000540)=['cgroup,wlan0\\eth1@', '\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'], 0x20, [], [0xfffffffffffffff8, 0x0, 0x56, 0x9]}) ioctl$TIOCLINUX3(r6, 0x541c, &(0x7f0000000380)) [ 2595.365061] binder: 4685:4688 ioctl c018620b 0 returned -14 [ 2595.385476] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2595.426114] EXT4-fs (loop1): invalid first ino: 0 [ 2595.441097] binder: send failed reply for transaction 457 to 4685:4696 [ 2595.448088] binder: undelivered TRANSACTION_COMPLETE [ 2595.460839] binder_alloc: binder_alloc_mmap_handler: 4685 20010000-20013000 already mapped failed -16 05:24:55 executing program 0: truncate(&(0x7f0000000080)='./file0\x00', 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) r1 = getpgid(0xffffffffffffffff) wait4(r1, &(0x7f00000000c0), 0x9, &(0x7f0000000100)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x883d869, 0x5, 0x1, "05aeaad802f2d340a8010317357f91470fe522430706e7d470bd12ed3b6d61be", 0x59455247}) [ 2595.464563] binder: 4692:4695 ioctl c018620b 0 returned -14 [ 2595.490428] binder: 4685:4688 ioctl c018620b 0 returned -14 [ 2595.491896] binder_alloc: 4685: binder_alloc_buf, no vma 05:24:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf9) [ 2595.516741] binder: BINDER_SET_CONTEXT_MGR already set [ 2595.527263] binder: 4685:4697 transaction failed 29189/-3, size 0-0 line 3035 [ 2595.545687] binder: 4685:4696 ioctl 40046207 0 returned -16 [ 2595.548604] binder: BINDER_SET_CONTEXT_MGR already set 05:24:55 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040002c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2595.569483] binder: 4692:4700 ioctl 40046207 0 returned -16 05:24:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x68) uselib(0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\x00'}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af25, &(0x7f0000000100)) 05:24:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500) [ 2595.697557] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x1, 0x1000}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xfa) [ 2595.779425] EXT4-fs (loop1): invalid first ino: 0 [ 2595.806231] binder: 4719:4720 ioctl c018620b 0 returned -14 [ 2595.846223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2595.890795] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2595.910029] binder_alloc: binder_alloc_mmap_handler: 4719 20010000-20013000 already mapped failed -16 [ 2595.924635] binder_thread_release: 5 callbacks suppressed [ 2595.924661] binder: release 4719:4720 transaction 461 out, still active 05:24:56 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040002d0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2595.928999] EXT4-fs (loop1): invalid first ino: 0 [ 2595.930870] binder: undelivered TRANSACTION_COMPLETE [ 2595.955354] binder: 4719:4720 ioctl c018620b 0 returned -14 05:24:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xb00, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x40001) getrandom(&(0x7f0000000180)=""/160, 0xa0, 0x3) [ 2595.988060] binder: BINDER_SET_CONTEXT_MGR already set [ 2595.995703] binder_alloc: 4719: binder_alloc_buf, no vma [ 2596.009556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2596.017828] binder: 4719:4720 ioctl 40046207 0 returned -16 05:24:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0xfb) [ 2596.087537] binder: send failed reply for transaction 461, target dead [ 2596.104405] binder_release_work: 7 callbacks suppressed [ 2596.104413] binder: undelivered TRANSACTION_ERROR: 29189 05:24:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x600) [ 2596.171010] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2596.192947] EXT4-fs (loop1): invalid first ino: 0 05:24:56 executing program 5: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040002c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}, @increfs={0x40046304, 0x3}, @register_looper, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x20, &(0x7f0000000040)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f0000000080)=[0x30, 0x30, 0x28, 0x38]}, 0x5}}, @dead_binder_done={0x40086310, 0x2}], 0xd3, 0x0, &(0x7f0000000140)="4caa225f53d0eed3445e7e5559c7686d77e5733ac4d87378c4b32a181cc7e74c34d496e43ad9fd93516c3744cfe3fb0cf3f0b016d434a0dca9a1b33fb69aebe93085921f13b760e3da6c8aec336067a848858de64d93dffc746477b4f3c96a1c9bd9bcbcfd68c0179dc3a0b234b1e559da939f879978c05c4971a8b1d3217603c2ceb5c161fcef971860dee50bbb60c26118a8749e69c0725d181b9a5aa8a57b6596e5426238c10a8fb37b0e49a2629323e4d9a1b33581ec5b53ebe785c92748440bcb3eafaeb90f5784b42df975f7dcf23d88"}) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x14100, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2596.263056] binder: 4752:4753 ioctl c018620b 0 returned -14 [ 2596.293940] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2596.328462] binder: release 4752:4759 transaction 464 out, still active [ 2596.338874] binder: release 4752:4753 transaction 464 in, still active [ 2596.358765] binder: undelivered TRANSACTION_COMPLETE 05:24:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfc) [ 2596.376659] EXT4-fs (loop1): invalid first ino: 0 [ 2596.381072] binder: send failed reply for transaction 464, target dead [ 2596.395688] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 2596.422225] EXT4-fs (loop5): invalid first ino: 0 [ 2596.432051] binder_alloc: binder_alloc_mmap_handler: 4752 20010000-20013000 already mapped failed -16 05:24:56 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000480040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2596.471060] binder: 4752:4753 ioctl c018620b 0 returned -14 [ 2596.489665] binder: BINDER_SET_CONTEXT_MGR already set [ 2596.509325] binder_alloc: 4752: binder_alloc_buf, no vma [ 2596.515464] binder: 4752:4753 ioctl 40046207 0 returned -16 [ 2596.516237] binder: undelivered TRANSACTION_ERROR: 29189 05:24:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x68) uselib(0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\x00'}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af25, &(0x7f0000000100)) 05:24:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="202e8c9aec733460a3cb9b853fa4526c308408f908f8eb555767d58f8cbe7e715d68aab742a72883c2cc96f70dd789b87a82fe9668a2b7d617f3e12f37f7b7fea8a55dee97dc20a174296241f4f0dd455e9219a50bf8296b46cfb122553defc6118437d70bf70fd9d192b51185cb408358649bc19824047529742131debc405c2d40863e33dc029e08d21796b6932cf1a5a8dce2d9a3a88a31ec5c8a73fadf907e08b1d2282b40b2aac32adda81f2cddaa6ea0"}], 0x266}, 0x3) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x700) 05:24:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfd) 05:24:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xffffffff) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x0, @empty, 0x4e22, 0x0, 'fo\x00'}, 0x2c) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x1f, 0x1000, &(0x7f0000000140)="a1cbc2d3f34eb53d2ab35bca153cdd5ae4ae163c6cf1f0970e76fa6b3b6c50acd73defac8eb34888bd43da3437fdb05480455d5244a48a2a579c2bc0c3bf8fcfb47bfd5d88d4def8e4ac82b5b07532fc8a424f0ff3eab41112d50d2932fa6e3a332620369b38c303c233b8ea6b38e0f8044598218df2cd45eca9bf3c1f48bc7b524ad8f06349a4058692da52f1ad2a8547746b85edde891852019f6cdd8c07a3fed86ee2f088eb73327f7900c34fa51c7a45c5d75287af197eb8d382046388a63378e4b963739d5a0e70489a03f0824efb0890d6dfeac4e3a38e67e18cdad4139808e3c770932ff67fcfb8a7267a5c145f6a10edb84d011f2879cdd226c3ac710344258e05c890314d1f52abd2640651e2429cba910297d40f8bd3cdef8677c38cd0336b7e0f7ad2478e1bf9db0fbd4fdbb7392a7cca1f5a63d3aedb1041ecd352fc564b3ce8886821d745c55075d664022ded37fc2e419c67fe9079d526c801db267f6b69af6b690dd3f4bc718e52c6dec43c05372ad0404aeac4b631b909e64eb7011397b373caf398d2d63b02df8c5e702085fca4cfea3417765e6bc3b2699673431cb085a58a7439e84833b4b95865902e3ccf4175008414981abbedd130ad2aabdf4668437e072786a6d1586096708784b5dfcb781303178c8bf22ab0e17949f4b2bd1cfa05dc8212cf8570429b8051e5281cebf6dd83bfb60018d1d02a042c25344733b9c178fa141b266222c5354dca76ab644177a55b4d6188ef65934c01dd8f0502f43b6e3555224adc332b0a65d7482414416e0307581046253a5b5326dd119c4981c7c8806121275a7a5386b116cbabff10a06e317be8e36c8a7830c401e085b26b6c50c3c8a5b6b380adaff162ec5c59467adf073e2f28c23a2904cd70cab980b38e84241efcb3e10d892bab0945b822deca661e589596cbd294085bcda85ada9db497b7cc27d49dc03cace58237076497b76082631a42a2efec7e86c6c974924438333dff04539ce6d675454b39d114ad3028c664a5ef8ed4b2e04978e8fe83d0ffa6dd6a7e391caff856e4cee29146354d077beff05c8c144174ee34d6b0085e285cfdc0794fbded4a6fca0377bbf64d377a4c7c187fae09563d1a062dea49be4fe8eef651520a3d609cddd7bd7ac9e698c9d516e1fc1eefcb33ee2c48dc530ac03ebbae7f8aa3399ac56313955f9e69aa40965388e4d3cc7d97ab401b933c305dbfc0dd4d4ce9be6dbacc7f92e31d877bf72390b82c2d770d7de35de1fbd62c8e09fb011a3fe51216e13ef8ed94d8da176232ff2f3da0b5608682f7462e418b00a2abe4a90b6c30d4c2f693cad79b7704b22730a24d9c9f9b632c51ece673cda58b543ed5a99469cdb0ba8cfef445d38f23f8f330bd5d82348e7659e3ec45dea1c9fa9da0a8ce1a322300ce758dcd6e05171d3cd542eb86466c9a017f6736d1a987efc423a415e479d2a22b04172608e33cf5187b6721ee9b751ba94ae0ff74545f00f24e70df447addc2cfe5f9635dc267747ae87b02ebb7aa909094d975cec21bdca59c523fb96f1d18164933d2308e80f5bcc6505bcd3ec6eb985bc91860e2a455b279eb079902ca6222ec80d4b3d6b90d22653db27d0b6e985c8495d759f5b04d46db945f588272542c81f53c452f95610c483f7940653cbe4f943715a0a398c354278ab7f43b129c4da3453ee1f9311d93c81696e46099c3d6197c4207c7c87bcde656ce4a4e8cc618ad462dedadacc9846697e3be6d9a2185457ea7d457b342f4a712cbe7aee098bc1205cb1044c02190336b7a62238df0a928502b8105bce44510730228332cefd109e3ffee312cea0a06c694026300986b9f975c5f3c203cfa6b174df764e1c0547b5e8d2f9c1ac4a6e2dc449225c355abcd69ca6203a0d1f3b3052bfb429c787221db0fc2d53e0acc022866812e5d51efc75192fa8d8b406e0b843ea63d08c96254511650da2e216d3128f45dd61cd0900c353f239bc4af5e746f7a1319e94655d74e7b6f22cbc62e42fa832a8c709f9d08d500fd83eb44e196eb781306c95054ae33a1c0e139eb4b39fa56358ce752b8e1df769ba0b90e6be0b2d4039f2c1856ba3704bdffeb5933f914cedcc732e9a7138372bcf6a9aee3c34baaf9a0ab920e191e59bf368ab3713248c72b6d30d8dfea5390cbb3efa4cb9ba09b4f241921ba81c4c72f342ced8792ad129d8b5f7ddbb87cb1a479866abfb39b2f61b31d8c975fe56aeb8235146cb7c99a8285db3aa341c03c2ef897b8644fb0f776b52692cb399bd7cf7920dda6359e8b7268dd9ef7da58acb849c5022e70180de053d0885506ed5a753783a3bcd62c72d91b59b2134253c66ab0da216fdd116d6f3b99ecb6896f92018b103e98d9775b32bdaa79da2f4c1d3d8bfe70638182b4f247a587e8d0da068f7d78a70a31f2b9b7daf161ab1dc793836436eb6536409358ffee093f38b5934c55addc74a8922fdf7237899deb9190fa6e4c3134c7596d504f1c5e6b9d50c9a25158b5f6223d8c0f365efb27462fbffc58fadedafbea3c033d0a7e7c2428358afdd1836de13185fbe8e8f03a37c3cc8ff7b0fad3dd61f7612a51772a22e66a5f51430ad057975a9dfcd4a2d11607bac19fc42abc7e82b048631e974da90dd180ee1a27eccfca131a04a6d0bb1b641ddd8c5d66ed1938c6be9e57aea7dbda46dee533d009f5051a70e0ec3c28ed634d9696737e0fd42324d6badbae2d71d08363857581034c22a493329045b91f54d196a25c04f29d05739dce351d9bb63e0ef37b96ca738be703e25099944e3962d5941bbee7b38f6f98f7c0a353b5fd34186db286a31d8e2b9d6a75d07e157478d92f11050b50e323a548c8b88d60eb6601b2c5347b742f4b83f9c1eeb967409e4e4c8e96394ce29b5192d986b3aa5ae7f0a036434617d55220c9ea90c35f5c9bc4d5430b3d631fb5352428003eaa713b81cb7b50e3f3e7ab3dbf9314f88bae95a26108ff27ce1c0191fa488fe3bcf06fc7f14c52355d0546ae1e793bfd81a039d8847093e6c38c6b1938342560517fe394520a79e5f89b2cd6521e1b3367248c7ec0644ff384a42467cd8e6c839c0e574ecfcbabe035d86ea6aab1f57fefeeaeff7cfa3ed9d0b443985ab9c55b7e55f7244bb77f0339902977db7b6c2df8f462f757b97ec43b8b99c857b3d9ef9b3c93d80d18bf7abddf0249b35072b79609c39fc948d3f5812ffb9ad8046187088507796440509de5c83e5562f34293bcac09a48cb03697fcf7e33ecb9e48d78a41472dccc536a06b3e9b532b843b32d072ee6b54d621a97c5869ab20b8f3cffb14efe71983207fe5f64e95a75cb29d293c0136ef18ad85ab4c54fc8ddbf27f96dc7737f4b9bef64a0ba811c85944b72aecaf6b1feb2b2d31474249eb28f7b822aad5c3d556f400c7f512660120256097154c728c02044cc25a938d00a39646554d8febd0046e204b1bffc163a2313e99a4c919ed94f6675eb889b609c8494228fdbf2eee97212aa99ac75e9d008a8077e373d5b0a91d6d1c7257e81632291308d23b40dc8b8987b940a50aa843ef02dcfe892a6f8096cf4ee103d9038efe9f29668c26243ecad742a3d38ecc69491ba75d579e1bc044423beb3bdc239810de49fabafc20227baa23e4fac58f64339611ec17db498aade930dad69314cfd8f02f048b5b1dda7a3f37a8f6d320f136084373ee1ff91e8f7063099b975d5fe91289903eb4fc249321b4f7d04ebd7b9559c0342ac4c58af20bd8e65d3beb4e0dee1211dc50a16332420283670b337beb5614bd6eab07e19358207d2a378f025ecfd1d39617eedde6f8346e985220149c21f5ebeff0f4cf2b3c3c4dadfa0af386ed2f086bba6540ca536da566a72f45c5cae362d5449f827de4b614b4ff93c361dbff5a77c5df2a8e16084948a906316590389551fca42b7f0d2cdea7739915c68b11334c58f61a60cca7bc87ad8bf90dee8ed866092063189a8b863c2e4891c5c8709f81a2559bc37ed3646216578fc608d2abf112b59fe7b635bdad51796854ced3a4c524f308046ac9322489e386876efaf3a354a4f0d0fc6f3342ced882783f8d4bed525f49bc7439a25efe8aa0f2a5bf9235cb6533bc901898359cec05521f9b0762f78afc2b5e49743989bf2681dd60007c3126c30cae9a6b2e88c3264ae76b04a5882e2861794e6e12d19342a0880cd30a86309b629145896a252e129432fe6c22e4a9b2c57548e55e75544eabb0dade748ba6906efb9bafee52cf27fde775b926ab9a938345d9c97bb620b823f9f04bcd03c7e37751719bd6484d9c78bbdec7812100134bca292ba00b15ca546030da4d3aedec82bf8431739176d43b36eb4d0654a0428dc13552e4da2ed2123dabe474324c7308e0f02a4c784881a3cedb0eeccd9d3f26a1f7dbc85595686b30cc5ccf34a489d7524ccc0c2818e126b1d58719c8936ec7129f42c10f38219d1f9de5e90913a38bf75f747e82979b7e3b9f7a8e56ede0dde075135dc500209c630bb2e2ac8137e55b3920074d589817b1e2eb5c990ba1034457913f4f79fa2f8e5b59239ea6bd99c482ea0670317d5429194a8706abc3bd178915d728a1c36c55672931e86e9cbd9e5ca6214ac4613cbdc1b62f16eed8d3707f02ba22cebb7d12a5e3642e8d2eeba3c204000ab87f88f5cc8763bbe0addbabc009eef75de9be6da6ceb775f12b508817d625aaff9cb784699b94b37bb73fef65ebd8a3d73b9f1f98c192a6d61d2644d5ea52789d8fad129722a9535cdb89112a38d453aaae12db642c0a91f91c4d527f9f4e616b5bf47c6419b5c54f05557f0fd47a972126d0b4893b903a2bab095398dc7109a1feea0ebf1f873fa4d7225f5bc28bd6125da350e7918c44f5d597129e2265d72e55ee6f08d1d6d6b485a2ae8e5daaead4e00611a48640008adc9d7277995f17d1f13abdda49ac83e86332d266e1e89110242214bb4f15ec396754d5afbeb1c42df3e2075cca20bbe499fb0712952fe070453e9dbe3ee756dafb876edcae8b7e4818a3e8164b6c9356eea73911d5d6934c590794c9d60d9456423f20352a2e1c0af21cbcdac9b26127b7a1996d764c7af8aa4c9163dd273b44e9b3da9e533ea8cad52314d8be6d2d395962000d50a07231c1889e5e64267037d42cfaad008121f0236af0a3e54e0aa444e7767e1faa642bc0bc2557b153a2b1d1c5dab08265f06c5d5cbb02908f307cb96c3ea67db79fdcb33b95f23351d4b2adb81289a83bd458b62c7e5fd45f29841b768eed6678fa3f9985bbccd8057b5f8cd8ee7b9b85c3ccfb91db98be4ed46f52ee3db539a998396f11d7a2c452bf27735a9247e5637f2c8e60c28e4aa503cd1648c9e90d84b2e4ca57eeb93f76a1f3caf5342819e3887987f621891bd8f3f7dd3fdeff1cfd047878a7fe423ae91351efb32a2418450710a18221df50ddb858135ac8360c52cfdf764784e60bb220fee556fd3f8ec010db35680e4892f41513175a32dd59750c6347e7c9f83decfa5b25fc25040d5b59f1b9b65526c21f061e1280ed049bf8de0bae9011bf5a5a4035f5cdff4da4caaa00e34425c0ec65cf5af1c12ac689253c2c0b7cf47c9436654ea3fd4129f8f6542f8ac5d2b89b86aeaf3cbee24a5efbe6826a9190ab69655846d16ef62d3cc8e4563416e9d4819d5581b50ce7c2f632a7e99caf1a1729f87a7f78a5871a26434a97237dd0f62a03f79749d2b654d2bb76dcd0df47541a8f9ad96429e6eb4ee4b207d23a60bf90152b2795798491d303b7687f"}) syz_open_dev$audion(0x0, 0x0, 0x0) [ 2596.641320] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2596.677678] EXT4-fs (loop1): invalid first ino: 0 05:24:57 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, 0xfffffffffffffffe) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2f3, &(0x7f0000002600)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="21310f1515ece4e641f19d09", 0xc}, {&(0x7f0000001480)="aa777780a941a5afc608db8e4fb77fa6f5cb470f398c876cae2ca1e4b88384771dda5f6b8181ec652a6f14811138d0118549cc909e3d1f76c39c556b4fe213e320e18c3f5640", 0x46}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002680)="da61ec91d4368ccb14733270f72c4bea3ef11672c4d72dc61a3638ea7b7b4271addffb8ab2ccab0cb1375a6c4abe12887c982f237f5dda556aab47bac3c326e8b0eccb3449cc5ae2031a44d8", 0x4c}, {&(0x7f0000002580)="929c285ef5b9ac1e48593a0f5eb6a870c3617d2150b50fa4d95d2b3d4442da5d6cd3de7c47ca327bdbdcef8b94c429fa8e44340673a4844ef269adc89556c051acae14b2", 0x44}], 0x6}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000002540)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r1, 0x539, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x20000000) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x68) prctl$PR_SET_SECUREBITS(0x1c, 0x10) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) [ 2596.764392] binder: 4787:4788 ioctl c018620b 0 returned -14 [ 2596.787168] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 05:24:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x80) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000180)=""/25, &(0x7f00000001c0)=0x19) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x4e24, @empty}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) [ 2596.826998] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 2596.833109] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2596.848997] EXT4-fs (loop1): invalid first ino: 0 [ 2596.851874] binder: release 4787:4788 transaction 467 in, still active [ 2596.860908] binder: release 4787:4802 transaction 467 out, still active [ 2596.867666] binder: undelivered TRANSACTION_COMPLETE 05:24:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2596.893925] binder: send failed reply for transaction 467, target dead 05:24:57 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040004c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe) [ 2596.950453] binder_alloc: binder_alloc_mmap_handler: 4787 20010000-20013000 already mapped failed -16 05:24:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x36, 0x4, @thr={&(0x7f0000000040)="acb93918aa1ec9b9603da1b9c40f912c758a4c8e5f58c6ba5d4cf74216c4e7c7f3517f52cbcd6fb823021610ef8b6a916e89e4289bb6ff16384873b8cbc93e9776c98c9197a844ba27aa3cf906da5867b6010827cba4f2ea80197a6c36502415c45959ee93f5feb72050f0f4c9ac0f27fe333202adf8fa3de220c52384f0b1767e6bf36829f0b6eb195806b254fbfa73156ec36ea1fbb404717d3b231419d4309d7dc72d018c543b0754121631a13bd6e21f4e5cd5399f870c43f81b589c287bf5006733a909c414297625c2c329945f811da22b87db28e23edb7d41", &(0x7f0000000140)="a35003a8504d7914727cd85895b0b22aea188fdfda76941447c9bf44a13304e3cfc874c0e430fbc80338e550c2d9f55b42359c9632ee2b06"}}, &(0x7f00000001c0)=0x0) timer_gettime(r1, &(0x7f0000000200)) preadv(r0, &(0x7f00000017c0), 0x0, 0x63) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="5a000000088f4e9fa0fa07a4f3d26a954744a6298b3e21e6130649719eebf9e96b9bba8a39adcd97b8ebec177ea68b5ea19b31f02949e839f55d9b8532afa07464f744ba1022de79e4caae98cf2eb14b00b28f9a48cc4c5be5f252dae7744cd7e8efa4fb1fffb820ee065ff149ed"], &(0x7f00000002c0)=0x62) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xb) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r2, 0x50}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) rmdir(&(0x7f0000000280)='./file0\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) ptrace$setsig(0x4203, r3, 0x4, &(0x7f0000000500)={0x2e, 0x6, 0x78}) [ 2597.009976] binder: BINDER_SET_CONTEXT_MGR already set [ 2597.069651] binder: 4787:4814 ioctl c018620b 0 returned -14 [ 2597.099005] binder: 4787:4788 ioctl 40046207 0 returned -16 05:24:57 executing program 5: r0 = open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000005c0)={{0x0, 0x80000000}, {0x8, 0x7fff}, 0xffff, 0x2, 0xfffffffffffffffb}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x10, &(0x7f0000000340)={&(0x7f0000000480)=""/78, 0x4e, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x10, &(0x7f0000000540)={&(0x7f0000000800)=""/4096, 0x1000, r2}}, 0x10) linkat(r1, &(0x7f0000000000)='./file0/f.le.\x00', r1, &(0x7f0000000180)='.//ile0\x00', 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) readlinkat(r3, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000380)=""/23, 0x17) fchmodat(r1, &(0x7f0000000440)='.//ile0\x00', 0x0) accept4$unix(r0, &(0x7f00000003c0), &(0x7f00000001c0)=0x6e, 0x800) 05:24:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2597.129127] binder_alloc: 4787: binder_alloc_buf, no vma [ 2597.137189] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2597.142204] binder_transaction: 3 callbacks suppressed [ 2597.142221] binder: 4787:4802 transaction failed 29189/-3, size 0-0 line 3035 [ 2597.180890] EXT4-fs (loop1): invalid first ino: 0 05:24:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x102) [ 2597.209286] binder: undelivered TRANSACTION_ERROR: 29189 05:24:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000) 05:24:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') fstatfs(r0, &(0x7f0000000040)=""/189) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x20, @mcast1, 0x1}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x1f, @remote, 0x1}}, 0x7fffffff, 0x6, 0x8420, 0x80000000, 0x82}, &(0x7f00000002c0)=0x98) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2597.296369] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2597.330212] EXT4-fs (loop1): invalid first ino: 0 05:24:57 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000600040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2597.443328] overlayfs: filesystem on './file0' not supported as upperdir 05:24:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x14\x89\xdecgr.\x1b.\x89') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'vcan0\x00', 0x100000000}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2597.502482] binder: 4851:4854 ioctl c018620b 0 returned -14 05:24:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x103) [ 2597.564055] binder: release 4851:4854 transaction 470 out, still active [ 2597.575510] binder_alloc: binder_alloc_mmap_handler: 4851 20010000-20013000 already mapped failed -16 [ 2597.587982] binder: undelivered TRANSACTION_COMPLETE 05:24:57 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:24:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2597.623592] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2597.635956] binder: 4851:4854 ioctl c018620b 0 returned -14 [ 2597.650830] EXT4-fs (loop1): invalid first ino: 0 [ 2597.703143] binder: BINDER_SET_CONTEXT_MGR already set 05:24:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) readahead(r1, 0xfff, 0x101) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2597.740309] binder_alloc: 4851: binder_alloc_buf, no vma [ 2597.750390] binder: send failed reply for transaction 470, target dead [ 2597.757926] binder: 4851:4871 ioctl 40046207 0 returned -16 05:24:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) dup2(r1, r0) [ 2597.803550] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2597.823076] EXT4-fs (loop1): invalid first ino: 0 05:24:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x104) [ 2597.871291] binder: 4851:4872 transaction failed 29189/-3, size 0-0 line 3035 [ 2597.904689] binder: undelivered TRANSACTION_ERROR: 29189 05:24:58 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:24:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3f00) 05:24:58 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000680040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:24:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$TIOCEXCL(r0, 0x540c) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x10c000000000, @local}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) dup2(r1, r0) [ 2598.139119] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x105) 05:24:58 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:24:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) dup2(r1, r0) 05:24:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x2) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 2598.182507] binder: 4906:4910 ioctl c018620b 0 returned -14 [ 2598.209756] EXT4-fs (loop1): invalid first ino: 0 [ 2598.259174] binder: release 4906:4910 transaction 473 in, still active [ 2598.265934] binder: release 4906:4915 transaction 473 out, still active [ 2598.280716] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2598.288232] binder: undelivered TRANSACTION_COMPLETE [ 2598.319035] binder: send failed reply for transaction 473, target dead [ 2598.327183] EXT4-fs (loop1): invalid first ino: 0 [ 2598.350454] binder_alloc: binder_alloc_mmap_handler: 4906 20010000-20013000 already mapped failed -16 [ 2598.377349] binder: 4906:4910 ioctl c018620b 0 returned -14 05:24:58 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x68) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000200)=0xe8) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r0}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x4, 0x6, 0xfffffffffffffffe, 0x6fa}, 0x15, 0x2, 0x0, 0x0, "d0a93b0fda6fdc499d2b1ebc13881f1e1e906e7b5a60420bf4cdaf4e37700fabccbcfb21d068393605045eeddaa536533e178b91855d76a99deb9b9609a24152"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000) accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@bcast, @netrom, @default, @remote, @rose, @default, @rose]}, &(0x7f00000000c0)=0x48) 05:24:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x106) 05:24:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2598.422723] binder: BINDER_SET_CONTEXT_MGR already set 05:24:58 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040006c0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2598.454848] binder: 4906:4915 ioctl 40046207 0 returned -16 [ 2598.509701] binder_alloc: 4906: binder_alloc_buf, no vma [ 2598.565269] binder: 4906:4927 transaction failed 29189/-3, size 0-0 line 3035 [ 2598.568530] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2598.605420] binder: undelivered TRANSACTION_ERROR: 29189 05:24:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4800) 05:24:58 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:24:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0xffffffffffffffe4}, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2598.617282] EXT4-fs (loop1): invalid first ino: 0 05:24:58 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x107) [ 2598.719247] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2598.726779] EXT4-fs (loop1): invalid first ino: 0 05:24:59 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb2, 0x2200) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:24:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x0, 0x9, 0x2, 0x7}, 0x100000000, 0x5845, 'id1\x00', 'timer1\x00', 0x0, 0x1426, 0x4, 0x7fffffff, 0x9}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0xd000, 0x7, 0x5, 0x0, 0x0, [{0xbe, 0x800, 0x2, [], 0x9}, {0x8001, 0x5, 0x6, [], 0x2}, {0x20, 0x88b, 0xfffffffffffffff7, [], 0x3}, {0x80000001, 0x3ff, 0x2, [], 0x2}, {0x9, 0x2, 0xe7c, [], 0x9}, {0x9, 0x0, 0x4, [], 0x9}, {0x1, 0x0, 0x8, [], 0x8}, {0xac7, 0x0, 0x73a5, [], 0x6}, {0x5, 0x6, 0x7f, [], 0x7}, {0x4, 0xad0, 0x3, [], 0x1f}, {0x7, 0x9, 0x532}, {0xffffffffffffffd3, 0x3, 0x578, [], 0x1000000}, {0x4, 0x26ec2818, 0x4, [], 0x6}, {0x7ff, 0x9, 0x4, [], 0x7}, {0xe6, 0xffffffffffffff7b, 0x3, [], 0x6}, {0xa8, 0x1000, 0x1ff, [], 0x2}, {0x5, 0xc0, 0x5, [], 0x2}, {0x100, 0xd623, 0x3, [], 0x6}, {0x101, 0x0, 0x6, [], 0x1}, {0x9, 0x101, 0x5, [], 0x7fff}, {0x3f, 0x0, 0x2, [], 0x7}, {0xfffffffffffffff7, 0x58, 0xfff, [], 0x8}, {0x7fff, 0x6, 0x0, [], 0x41}, {0x83, 0x0, 0x8, [], 0xffff}]}}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20a, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4c0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:59 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(0xffffffffffffffff, r0) [ 2598.796521] binder: 4958:4961 ioctl c018620b 0 returned -14 05:24:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x108) [ 2598.849786] binder: release 4958:4961 transaction 476 in, still active [ 2598.856479] binder: send failed reply for transaction 476 to 4958:4964 [ 2598.858821] binder: undelivered TRANSACTION_COMPLETE 05:24:59 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000740040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2598.904977] binder: undelivered TRANSACTION_ERROR: 29189 [ 2598.911425] binder_alloc: binder_alloc_mmap_handler: 4958 20010000-20013000 already mapped failed -16 [ 2598.944261] binder: 4958:4961 ioctl c018620b 0 returned -14 05:24:59 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2598.997086] binder_alloc: 4958: binder_alloc_buf, no vma [ 2599.018893] binder: BINDER_SET_CONTEXT_MGR already set 05:24:59 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r0, 0xffffffffffffffff) [ 2599.043273] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2599.060404] binder: 4958:4978 ioctl 40046207 0 returned -16 [ 2599.066773] binder: 4958:4979 transaction failed 29189/-3, size 0-0 line 3035 [ 2599.108908] EXT4-fs (loop1): invalid first ino: 0 [ 2599.114086] binder: undelivered TRANSACTION_ERROR: 29189 05:24:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c00) 05:24:59 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='cgroup\x00') msgget(0x2, 0x10e) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000003c0)=""/4096) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0xd5da, 0xffffffff, 0x1, 0x3, 0x3, 0x3ff, 0x13f, 0x40, 0xcd, 0x0, 0x1, 0x38, 0x2, 0x0, 0x8, 0xc8}, [{0x0, 0x3, 0x9, 0x5, 0x1, 0x6, 0x24a, 0xfff}], "c30e1de1aa636704882068a9623fd4b1e7300ef265ac9647cf2977fc57bb76c9425ca23b18b1b28e82f01a9b5f9e32f7e27de3e445f1c97f967384c52c08595a7cf6111191712f90bc0fe56bb5b2d90f38ddae26ef39cba193498bbc0f2f701f428cdbdf2b5fab83579ce2c40f0fe765671a0948fa703ca9cd586d8cb97d9e385c6a8bd952fefc1cd9663b0b7999847545afe2fc545a2eea58105f45255937a20b8ae91a2d6f5d2c70aa1d909b0765b21e8086c2c444080450b3", [[]]}, 0x232) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x20, 0x100, 0xffffffff, 0x5, 0x4, 0x7fffffff, 0x8]}, 0x12) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r2, 0x7}) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000013c0)={0xc35b, 0x9}) ioctl$RTC_AIE_ON(r1, 0x7001) 05:24:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x109) 05:24:59 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:24:59 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2599.249640] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2599.312285] EXT4-fs (loop1): invalid first ino: 0 05:24:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x36a, 0x0, 0xffffffffffffff9e}, 0x40) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x280040, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000000c0)=0x6, 0x4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:24:59 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2599.338449] binder: 5002:5004 ioctl c018620b 0 returned -14 05:24:59 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040007a0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2599.421772] binder: release 5002:5004 transaction 479 in, still active [ 2599.428626] binder: send failed reply for transaction 479 to 5002:5008 [ 2599.435554] binder: undelivered TRANSACTION_COMPLETE 05:24:59 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:24:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10a) [ 2599.478809] binder: undelivered TRANSACTION_ERROR: 29189 [ 2599.490363] binder_alloc: binder_alloc_mmap_handler: 5002 20010000-20013000 already mapped failed -16 05:24:59 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2599.560296] binder: 5002:5024 ioctl c018620b 0 returned -14 [ 2599.580067] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:24:59 executing program 0: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) getuid() ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000180)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x1, 0x42a6}]}, 0x1ef, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2599.605819] binder: BINDER_SET_CONTEXT_MGR already set [ 2599.639000] EXT4-fs (loop1): invalid first ino: 0 [ 2599.639053] binder_alloc: 5002: binder_alloc_buf, no vma [ 2599.697122] binder: 5002:5004 ioctl 40046207 0 returned -16 [ 2599.714917] binder: 5002:5008 transaction failed 29189/-3, size 0-0 line 3035 [ 2599.737068] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2599.757246] binder: undelivered TRANSACTION_ERROR: 29189 [ 2599.782544] EXT4-fs (loop1): invalid first ino: 0 05:25:00 executing program 5: syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:25:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10b) 05:25:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x214}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 05:25:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000) 05:25:00 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000fc0040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:25:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, 0x0, 0x0) [ 2599.964814] binder: 5054:5056 ioctl c018620b 0 returned -14 05:25:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x2, @stop_pts=0x7}) [ 2600.031908] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2600.053514] binder: send failed reply for transaction 482 to 5054:5062 [ 2600.060328] binder: undelivered TRANSACTION_COMPLETE [ 2600.065586] binder: undelivered TRANSACTION_ERROR: 29189 05:25:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10c) [ 2600.084410] EXT4-fs (loop1): invalid first ino: 0 [ 2600.104537] binder_alloc: binder_alloc_mmap_handler: 5054 20010000-20013000 already mapped failed -16 05:25:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2600.156948] binder: 5054:5074 ioctl c018620b 0 returned -14 [ 2600.191559] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2600.203726] binder: BINDER_SET_CONTEXT_MGR already set [ 2600.227530] EXT4-fs (loop1): invalid first ino: 0 05:25:00 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) time(&(0x7f0000000180)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x3}, 0x28, 0x1) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2600.256289] binder: 5054:5056 ioctl 40046207 0 returned -16 [ 2600.289564] binder_alloc: 5054: binder_alloc_buf, no vma 05:25:00 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2600.318688] binder: 5054:5062 transaction failed 29189/-3, size 0-0 line 3035 05:25:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6800) 05:25:00 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000340000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, 0x0, 0x0) dup2(r1, r0) 05:25:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10d) 05:25:00 executing program 0: getpid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000002c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000300)='\tgroup\x00\xe9\xd3g\xde\x03\xc8&u%\x81\"$\xba\xcb\f\x11nb\n=\x00\x9c\xfc\xf2\x90\xda') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000003c0)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/78}, {&(0x7f00000000c0)=""/206}, {&(0x7f00000001c0)=""/17}, {&(0x7f0000000200)=""/34}], 0x10000000000000b7, 0x40068) 05:25:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2600.511784] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, 0x0, 0x0) dup2(r1, r0) [ 2600.566223] EXT4-fs (loop1): invalid first ino: 0 [ 2600.581489] binder: 5103:5107 ioctl c018620b 0 returned -14 05:25:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10e) 05:25:00 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000100440000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2600.673167] binder: send failed reply for transaction 485 to 5103:5118 [ 2600.680045] binder: undelivered TRANSACTION_COMPLETE [ 2600.709678] binder_alloc: binder_alloc_mmap_handler: 5103 20010000-20013000 already mapped failed -16 05:25:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x2, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:01 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, 0x0, 0x0) dup2(r1, r0) [ 2600.803073] binder: 5103:5123 ioctl c018620b 0 returned -14 [ 2600.822025] binder: BINDER_SET_CONTEXT_MGR already set 05:25:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) [ 2600.855372] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2600.863334] binder: 5103:5107 ioctl 40046207 0 returned -16 [ 2600.863684] binder_alloc: 5103: binder_alloc_buf, no vma [ 2600.899977] EXT4-fs (loop1): invalid first ino: 0 [ 2600.905747] binder: 5103:5118 transaction failed 29189/-3, size 0-0 line 3035 05:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c00) 05:25:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x6, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10f) 05:25:01 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2600.981289] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2601.007931] EXT4-fs (loop1): invalid first ino: 0 05:25:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002340)={0x0, 0xa6}, &(0x7f0000002380)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000002480)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000100)="47d921ea935da78fbc4755e796a1ff7131ee2fd33bbea7f37ee4e01c1aa25be7057d3ffbc73ac1474905fd1df1dca0c32a296b147ee9a925e278c83887267aa790fe0dafb614959d3d4763b31c9ce72b72c74b52c1ca4d5a6d07b75c0554c419dabc8f3d841babcde1d373c7229a61ea8c6c455f487cc647e84dd57528481308a312396b2b41da0459e016df0de2038975e65def3e657aacf354a6342fe82ca9bad77b42c1d2a5dcbf76f57842bd7c7d84fcc356ed8608562d", 0xb9}, {&(0x7f00000001c0)="7e27749957aa90d59a707ced5ca659c2b7faa9ab831b8a8881fa3a18a296b0719ac02bf14b5ffff6892659d010ca7a2b0eb7b812539cc73914886bd9a7f6", 0x3e}, {&(0x7f0000000200)="9e80fd9733358b2698b01eec85cdc2dc66a99ceac5901d0bf1db104f2f2c7ebb311e24b486db8465d34838460c9b85d1ad3019a8736b641d3ae29469004e8caa2c9c355614bc5086b416e39687855945e4a085fe", 0x54}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="3d8c48e33a2885d401f1c27f072c547df4760f7893b90b81cacc81a5dfcc41843c3ebbcde0073f03dd675cf851817aef86f948815d5139ae7928ac5498245d4717864c3f9316e6759fc8e17b8e459b57034adb309c887b73fe2a69fc6c3dd753a73b267d7540cd20b2ce9ad8f49bc105d09bc114b8c2dda169e544040510da081c399c65d1841e3062f42fb7d1e2a05c2964844a8b1ba27c7bab1b893dbfadd4d9015172616c1f72502e99962c8812622c0857f9190a11da3133d738265262faa4df3c21ad0270034103e64a97dc69fff5396374efca12b18baaba164346ea62366462b84bb874bca3c69fea3d50c7c91071abf7d80ddec75dc632f08d563cb4099c17a75abdf53ea1efb766cc4eb53c79e8fe31cb323b475dd87289d9e314de8d41d4842eb513d19509a07d63c82d198838aa329fc807648cae44170f5a9b3b173bc0f7804149f416ceaec677403b0a30ca1b73650b956c0a492823312ac4089d5c39ece3d430cca55f13fcd1b667f6f7f2ffb3c6818273cbf41d701d7973e0129ec9697adfce8b36b6cbc2490e996f4686d03b2d3a062e761d3aeb422918f24853c23e2319c3d8dcaf18a6e813061aa3e20dc5e976b064922471009760e526c52b852cec1fb472331180a7d4c0cff2aac536028f12bfb941470c154f83089c4f7f55fe6e6a3b7229375eaac36a91f1ea5b60b833097b0987dd71f4736e379961e7725f5567164d929add27662a473aacf8290c1dc62419a487aceba0eb0ad564772b27059def39d2c0467fb55e7d1d12369bae47ad1625dec4926c28679f82423b82e1076314a74410fd8ba550b66db186045bbd6b2f48798d8b919a6cc6789678ae569cebe0965dcdc8304f86a8b87facd4cda5ee56fb982704f2c9133ba334b2c0dfbb05845fda27ed6ef29769f9d95b1f26bbb38e48b4e20a63e6a756b1f592c5635114b0a5f75799c830dd801b3c24845ec79e8cc10346ac85e3c067ad56ca608306b69763322cfc659c5865b5c286403defcac11e57771686b7afc8ec2c462b0887ad4321ad71fedef8efe03101d4c9e11a11e6b61e45c09b6a713e6bf23ccec225527ccc3820739e7d86d164a1b8e18c696741488069d30479c825ec1ae819d60e8eca651c8ad144c70aeb000fc8eb1af1174e7be38cd689c69fc0b48274eee667bc69baeb7dafcfbdef30aff3ee335aeee62a726d77018be2e105bf09c92e5e18b3aad03731f457e04fa83f6095aa7988d7323d6fcf56a214636536f953310382b8bfeb0439a568bbf62dc3dbdfe55fa7c269100e1f3ffcc98dd380359a52a06804a8a41763a981a321b2867c11062b6fe680baef207acbf3f4e61e7776106832f76a322016427e3b4ab65ea0557e2604882a6257509d1ade103977538bf0ba1dbe56f7d422395f94511e0f72fd8259438ddbb93fe75c400810e12885c412edfadee9c36636eba9af708be24e0001b739d6b60ef0a9210afe62ad968f26e5cdac1ed9745a0010a8c449bbcfb151eba8e9ce470bad29a021c7d0a73a8065c75a852c8a77b342379af45791ab10e22d21f0e2c6f1975d72233ef5889197654d88c10533bc0d4a9e67b62a1cb1b733d54c253dcc4e57e31d9543ea250db78bbcaf16781105feb54f0b009281776c950179b199dd9eaf97a5cdcf5a786ffe5dc0edc3bc69ae210caae44c7ffa840739f5100c984c2231a2f443ee699948ff2a67a2164f7dde87b851c9529cad65cb4c43b55789f3035925090c9177eeeb1161343a2c89e8058a44bf8fb1470913d373b2ab6eab060bdade852006eb0314a23760d36df333d211d9b08c1e892c1e4d0a23da8b869fed0a13bccf69161ee2adae83076ed039e83bec0ebd6364176f1dd064d4976d3c30ec7086c8578d35e816dc5972552cf0f47dab089810a801a90e4a46e16b6be3a8bd73dea10b33c383e7dea553746daffe110bfbefa90f592a4a78f1b6ef024eb426e14f1730db16369ad00ae4daefa3e9d92927e59f2eeb34d5a2a6aec765f4f592d43f15abc14603ec5b7c68351a53c91c5f6662bd00096b5d32b7afd3ed2fd72523978cc6523e044d35970ec3b668845326fad49297a9fadea9a4f07a498decaddd5a662db7d2a7b8fc50c56e1774f73cff8dc402be3ac9caf7c0dcfd9699f624c940881d84c73ead25141bb0164f1e6e83602942b8717f25a863d0baeeae22f28ba5a48104a7a3945d7256d2f6b8c0044d91f81a1f75be372bd4889099329139d806edcd9cdc6bfb0d8a8193ee65105326cf1b1a769ca8e698359d0031e530dcd9ec10a9f2d1866d213740bf552f4adfa91c8e1297161183e996de2a2a7b9fa83216fa5156a6e95030459dd5c877a8b437891360ecabc7878579f3b221fb50127a4aefb547696b9a9cfc2bda51dda737ca6e336d3c6d57e5197c6c4bfb0bea278e82a5584692a0d1abbb79b407aa3c22c48b4db6e303f6372281bc4b9005c06771bb3ebfb8a460869b59bb688b4e8ba1fde95bf8ae2f3e3dba75015f4cb5248ee2cd5d1e7b2e39268be483986744bb02cfae8d081709ce78a23521b3fc3980c162c64e93db0170a98d4a7a1f38cc36da4455f7402f6a72f0d813c9dfc5f912e50d59226f080a871f6c650111799ebcd5f868b835d7afafdeaeb8f92c9af940efd947d6061d8a3ee0476ca3903303f6098c660a99d5111e9090fcc3c65f423a5d9b7885a43079c3bf07f105ae6313b78cb7f0795e69c6c4b9b505dd0a11f964183bffe1a196d5c2a4e1f8cf1fa21578fb1a125b98b6f078b6e07d6897bef99a1a166b796731bf55368a6df1d9fafa1df5227d2bb4b170dd19c262aa7c03bbd01d71dbbb29cc1a9ec741075bacee79dfea8f565b6dabec79032d4920205d80e160e113941c3fb11b99b922ab1cb215d183f5458a5e28e78c6bde3bb871c83e6ade9a5c75df471c57040fb0f9d71c808da7bc3759e63cd6e01a4e7dc4c3ad257a1434aa83af13d7236f409e81e153bc361273d15ce1a9d2d57ee0486297ab70c3861681853dfc165dd4f3c9690f7bb867c34f02898f789dafe6431726923f56f682af30e70f4079a67c03e6ceba7f1f4687ee9393a51aefb0ee9490819ee1f54c9092a4be163ad4c1d1443698cc70224c8ae8571a573d3ebb5ada7ef80004d3f251e72abc4e693d5d99ed203dbdc708d84336a47e107d42433ecd69971b5599a3500b1cce825b9ac10e5f603773f3ab7008a7843ca8d494a2244034b97da73e8b59357f0ba2d6178616ff582471fd04b8abce1481d08a96973516256da7289d3d5f059a9dd0f0c9b8372657efbf1b04602e69e81258e33d547a85ccfc89dddce8fe62faf7118a9d5c7b7309e6501239c778fd8fa231de5214dde442fdcd96774b18dfd0efd810e3f8616364e1c9dc66729234a3899d47cb8eff0a147d6549fc7aca8a9e956591e9463c31bd375f5f75303ad8a6711679b3697e8fcdc593b3920453e011039bb0a20f1c5495a1fb3d9eca44f84bd995c6eab36f8a3d6332c5b01125d2be5e37e17c1e02c67e0f2c04fbdc7eb7f2c3915f88ceee95b1e79c00016574bcbc49ae8a40024a30d218fb2e0d255a40857b38481f5476133d6a486d57c4ab088826d37e9639831c10545c921f3aa56c9017c2924fcd679468f0e36b981ece17487bb28fdfcd22a207ff67a245935fdd314f4e40cee27b99d1d4f37aec22d10a2511df7382049581e179ea02bcc67854bd67a2fe04a089c5932943d0f399a88b91ace2e3faeccdff905eafe368fb405d692e17bf9c4ed79c1bd6a90746450deeaa83d1b99ed09eb004eb99e6d6a43601e484d23b710495baf681e484da8a65e45b5685ed9d22aa1c11ae1950eaa477253df3ac6d8620f065b62c4d6b0024e0c67d89d6ac23bfa639f34ddfeb2c7461285b4ed7d49063621aed104e82fb7e8caf9f01030b0604d1d4646b67bb478854084f62639e3a2f96dab271f9f07b9db8fefe9cb60c09f098acac09db6abae2ac0322df63113af114021510582f857121cf28df80fff0e8bb88d125b8eb44dc55729559f9f5d31d9a8b3923550145959f7cacb3aae902dc41dbd145c79eebf4c95646cee67415a645ca3b5e20288e15fcf75f5f3eba851aa0e2ea052747889f67bc0d6136797a2f03f36d37864c20c800dbfa3a1fe178d4752f8cdbf2ae6875aff50103670e0d18556bac8dc875cfd40630f9f50e6f98ed779ea047931d4b5287f5878d35d7017a07ec19df44909c0283471515038f66e78455468009b3de9359844f1bd0a23a23c9bab65996db65f6ffffbec0dfc01bcd951f514c6fc4b335573221b57bb67485949e9af81ff9c09a69650beb1206ad57832c7cadae98bbc09604d79463a0bf797bd610dfce8b7ce0b46b6159c0e0303cb892114115540c03291493ba3f09cdde7e6c706e25b951b89812bb44e339f71e4d6da3355262269fd524f7e4fbc93d78f07e461ab21f6296fd517c194c7dae99c3551e97f1406233828c0f22f28d87ecae08d3cd70bf6656b6b038bff115469cd20bf2d5dacce080a5322a487bedc3f46e46037f56ded0397fd506e176e913a39937e49790853c4828c4989bf4131021b30bc7e41787b7f3de19a269702fc3cf7a974bc9c2ad8cdd5fed762dd59fde3e83a02bf0884ff9eb82040820d46e72d9d4cda54f406c7f9bf8e38490fc50c4b0878ba035d04a4f181ab389a6a318d91ea1a64db349099d38c0a758b85898269ebc3a59c918afbd9b86148dae40865f65b26f23efcafaffdd0810b9382e50439256a6a360c410d398b3c81697c5450d9eb2e3d7d72a6c42a5c0e7741fe21e688df8ffde9d25ce00df9dd4c1adf005bad6259d8721856c020f991f30e02b866fc29bd86677c776b28403ab6c9021e27642747f2e8bb9b49bbcc94b0931b4c533e1280c2e48d61f617ffc52e5d4327dca05d03f8ccb1e41d39a8fc6a4ed568b90586ed59505c01e9b38408824d755792db0049d11ef2ba0261fb0eb7bd9e2eb5ec6c2e7cfd116e3758db85927950e4e73536d0f7b1d9ef0c4a9e083076f2fe287c844805b6ec50f4086ccf1d99300943e3c4e28d334531b9cd70ea140be7ea593e00bbb859244e50b2080d5bc5c48bf80abf303ba627df6431720d62f5e507baa291f68c8b9cb2ff1fedcc6d198f9491ed8b2a7f2132577462acbd57e914d3acaa23d4cdbf6d1eb07ac0bccd287259075ebba75ac8d35e08e96e47569244db07e36ac357c56ad014cb77afb79f1c05cc32755ac1a7bccd47adb999665ab99eec0f5aee4ee53450a6d33ce8490ed6babe3814ecc4181abfdbe37a4f436e19e6ff5bb8316593eea81d8d0ec0ce0f06a042453ad8c6d874523511dc54faa1665dd65dbb9d76a81ae92f7ddcfe8aa6def298731d1b5bda99ef6641bbfe2a2a283d142e19a718fd1fc6e29437ee7657d59428621ff2818ebf40258694a658dcda610b6f148160ceabb0a0f7af0b10bb1ed41740d775685483fd0c26b0df60291fb26fd034b1ef343b177e1c51b28f604ccc2547ef7c5b808264bcaeae26157cee9bdfaa66453ddc35d749060dd557b22aa26596c488aff24ff6e23c75364842b204c2e3226133fc53df37c14aa7124a9abad1630a5cf244651acde55c73333a74203ee1acdf80dde8c9f6d2ea3af2d2bf0a68d73d886bc18c088af2e1b43a4720bd339dc812c69664fabdd5c0c65a227e659451a580b38deabed9072ef1dec0b77d9c6bf2b140434fdf7a755c831dfccf9db20da5be76323364a4ec029d91a5f32220ab03d00fd93c9ff75616da4b7d41f4ed612", 0x1000}], 0x6, &(0x7f00000023c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x8000}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x200, 0x0, 0x2, r2}}], 0x90, 0x4}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:25:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x2}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:01 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000540000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:01 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x8082) openat(r1, &(0x7f0000000040)='./file0\x00', 0x420000, 0x20) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2601.197610] binder: 5152:5155 ioctl c018620b 0 returned -14 05:25:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x6}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x110) [ 2601.269507] binder_thread_release: 2 callbacks suppressed [ 2601.269518] binder: release 5152:5155 transaction 488 in, still active [ 2601.282040] binder: release 5152:5163 transaction 488 out, still active [ 2601.290054] binder: undelivered TRANSACTION_COMPLETE 05:25:01 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2601.342100] binder: send failed reply for transaction 488, target dead [ 2601.371629] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2601.390294] binder_alloc: binder_alloc_mmap_handler: 5152 20010000-20013000 already mapped failed -16 05:25:01 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2601.445234] binder: BINDER_SET_CONTEXT_MGR already set [ 2601.457924] binder: 5152:5180 ioctl c018620b 0 returned -14 [ 2601.458920] EXT4-fs (loop1): invalid first ino: 0 [ 2601.474079] binder: 5152:5155 ioctl 40046207 0 returned -16 [ 2601.483277] binder_alloc: 5152: binder_alloc_buf, no vma [ 2601.494186] binder: 5152:5163 transaction failed 29189/-3, size 0-0 line 3035 [ 2601.504858] binder_release_work: 3 callbacks suppressed [ 2601.504865] binder: undelivered TRANSACTION_ERROR: 29189 05:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7400) 05:25:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) 05:25:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x2}, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2601.577833] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2601.604553] EXT4-fs (loop1): invalid first ino: 0 05:25:01 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(0xffffffffffffffff, r0) 05:25:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x111) 05:25:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x6}, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2601.735937] binder: 5197:5199 ioctl c018620b 0 returned -14 05:25:02 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000640000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:02 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2601.828660] binder: release 5197:5199 transaction 491 in, still active [ 2601.836327] binder: release 5197:5206 transaction 491 out, still active [ 2601.852204] binder: undelivered TRANSACTION_COMPLETE [ 2601.874965] binder: send failed reply for transaction 491, target dead 05:25:02 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, 0xffffffffffffffff) [ 2601.901385] binder_alloc: binder_alloc_mmap_handler: 5197 20010000-20013000 already mapped failed -16 [ 2601.922706] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x2}, @rose, @default]}, 0x48) [ 2601.953581] binder: BINDER_SET_CONTEXT_MGR already set 05:25:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x112) [ 2601.975614] EXT4-fs (loop1): invalid first ino: 0 [ 2601.990817] binder: 5197:5215 ioctl c018620b 0 returned -14 [ 2602.039287] binder: 5197:5199 ioctl 40046207 0 returned -16 [ 2602.039941] binder_alloc: 5197: binder_alloc_buf, no vma [ 2602.076548] binder: 5197:5217 transaction failed 29189/-3, size 0-0 line 3035 05:25:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$inet(0x2, 0x80a, 0x81) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2602.105236] binder: undelivered TRANSACTION_ERROR: 29189 [ 2602.118269] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7a00) [ 2602.156473] EXT4-fs (loop1): invalid first ino: 0 05:25:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000100440000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x6}, @rose, @default]}, 0x48) 05:25:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x113) 05:25:02 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000740000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x2}, @default]}, 0x48) [ 2602.338846] binder: 5239:5246 ioctl c018620b 0 returned -14 [ 2602.376071] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 2602.384052] EXT4-fs (loop2): invalid first ino: 0 05:25:02 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x68) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0xfffffffffffffffb}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x8, 0x10, 0xbba, 0x9}, &(0x7f0000000200)=0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) [ 2602.400077] binder: release 5239:5246 transaction 494 in, still active [ 2602.406789] binder: send failed reply for transaction 494 to 5239:5250 [ 2602.419169] binder: undelivered TRANSACTION_COMPLETE [ 2602.424381] binder: undelivered TRANSACTION_ERROR: 29189 05:25:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114) [ 2602.501956] binder_alloc: binder_alloc_mmap_handler: 5239 20010000-20013000 already mapped failed -16 [ 2602.539040] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x6}, @default]}, 0x48) [ 2602.563241] EXT4-fs (loop1): invalid first ino: 0 [ 2602.596052] binder: BINDER_SET_CONTEXT_MGR already set 05:25:02 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2602.651221] binder: 5239:5246 ioctl 40046207 0 returned -16 [ 2602.667325] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f00000001c0)=""/105, 0x69}], 0x3, 0x6a) 05:25:02 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000940000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2602.696328] EXT4-fs (loop1): invalid first ino: 0 [ 2602.702257] binder: 5239:5268 transaction failed 29189/-22, size 0-0 line 2896 [ 2602.728430] binder: undelivered TRANSACTION_ERROR: 29189 05:25:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x6}]}, 0x48) 05:25:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x1000000) 05:25:03 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x115) 05:25:03 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:25:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffffffffffec1, &(0x7f0000000040), 0x1000000000000308}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2602.951633] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2602.962711] binder: 5294:5296 ioctl c018620b 0 returned -14 [ 2602.990741] EXT4-fs (loop1): invalid first ino: 0 05:25:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x10) 05:25:03 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x100000c7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2603.050352] binder: release 5294:5296 transaction 497 in, still active [ 2603.057606] binder: release 5294:5301 transaction 497 out, still active [ 2603.068685] binder: undelivered TRANSACTION_COMPLETE [ 2603.076378] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:03 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x116) [ 2603.099424] binder: send failed reply for transaction 497, target dead [ 2603.199763] EXT4-fs (loop1): invalid first ino: 0 [ 2603.204857] binder_alloc: binder_alloc_mmap_handler: 5294 20010000-20013000 already mapped failed -16 [ 2603.236107] binder: 5294:5296 ioctl c018620b 0 returned -14 05:25:03 executing program 0: gettid() getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='attr/prev\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) [ 2603.252093] binder: BINDER_SET_CONTEXT_MGR already set 05:25:03 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @bcast, @null, @default, @rose, @rose, @default]}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000280)='./file0\x00', 0x43f6f35f, 0x6, &(0x7f0000000700)=[{&(0x7f00000002c0)="24db24df30f29e2ad3375d87899595e454b689266b120fc71d233a756aedbf513ce12d144b5a3956beff3e77ea38caa811063e575b92cf71e3206b90ee141f80be561aa9d616534e80e07f5779d6f8826eb7e0cdf0a83fe9ab0cbc40810b1806a9a8708e7b67c5faa3ac372b35da6f94f9b93e3a0ab3ec251dac0593e180", 0x7e, 0x7}, {&(0x7f00000003c0)="fd2647e7e0d5a6f56416303bf921351cb174c636243047a0111ce3a0a00ac4010eb0532919a6282a9d46908f52fa4a8be2712451a5d23f35ffcbba15c714f1f401370ea7449071c68ad05c1eb0503fff313ecac7311faa2aa294f5bf4b454a71b3902fdcde19c955532de0852a664ae5ca0ca1a1559037d06bf5bd958e60f3b22629a9dcf1c0f6469dfdb4c1c267bb5d56537e6833d9f1970da4aed23df0be950ebf089a956d27da77dd1506ddc9b0e39862c58662a08e834f20", 0xba, 0x100000000}, {&(0x7f0000000480)="1758387a69786acd8a691fac79584890fdcced3db0684861ed62bf6d785042548b11765fd22a12dd11d8a435330cf15ed7ead8aa32b47c82c9ee82b3d01d34c1f8eda9def0ce786d4c0a0a96f1f686bb9e166b91af0940b0b545cb49b199269d4dfa157bdaf360a129f9eec021f4f48faae89ade7dc7503bd7c640d5b2da6aac867037e611aeae8947615e47c7ecfc34d9b8bfdfa32d55cfae202744a6768b0d4ac627a6c20fded834f92ced330f4a023af4c9026ca6e2fd4f0b08a8e240f359270e159387459a0c308cb87a0b43366813f9a3d4dc5d41e0738f99", 0xdb, 0x800}, {&(0x7f0000000340)="b738d60ba515e28025c868b08617f61155a5415660f2d2769bf16a640a41711e174c3e16c0bd95971388bf6dba", 0x2d, 0x985}, {&(0x7f0000000580)="4f9f18821cc85b5477d3464d9c1877892b8088176077c687e14c927c4fbf3eecf0906d63b05d1561c2e3fc5d8d890845de46a08f18e1647d97f3104e37c366b4e0ad4544079b1d6de5", 0x49, 0x1f}, {&(0x7f0000000600)="f082d1a90a3b9786f3fa0a4a9a886a28e7ef983ce214cfb8ed5c4af416004b899eff88598b041867e63fb208faf61844ee33e315af5eb444b95d91c8d05644f61b3cc2327b0ec8b8dff37f783fbe2efbe362731ce11df39fb23672504a56948a546544fef94d4a9352ffb0d4457eac7b4351ddada36a6a5eacba5f91c4ce9975c66858b04f6e01d04b2e9556eb5f5433b6f8448ea0e04b648285c680c63db840a8930bb99b79418a0d0ad4a521b047bd3d319c5f7bf6b4f6054fb951106aa7a5f296eb50a14dec8577f51fda08351e394090b2f5e5ee625829a8832c88eed089f232e912fea4e51203a2ec91155643337b7b", 0xf2, 0x9}], 0x104a000, &(0x7f00000007c0)={[{@discard='discard'}, {@prjjquota={'prjjquota', 0x3d, '/dev/ppp\x00'}}, {@nodiscard='nodiscard'}, {@whint_mode_fs='whint_mode=fs-based'}, {@prjquota={'prjquota', 0x3d, '/dev/ppp\x00'}}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@nolazytime='nolazytime'}, {@grpjquota={'grpjquota', 0x3d, 'vmnet1vboxnet0\'self*eth1wlan1\xbdmime_typetrustedeth1:@@^'}}, {@nolazytime='nolazytime'}], [{@audit='audit'}]}) read(r1, &(0x7f0000000880)=""/102, 0x66) r2 = dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0xffffffffffff0000, 0x0, 0x3}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r3, 0x4}}, 0x10) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff) write$P9_RUNLINKAT(r2, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) 05:25:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x200000c8) 05:25:03 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000000a40000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2603.285518] binder_alloc: 5294: binder_alloc_buf, no vma [ 2603.299046] binder: 5294:5316 transaction failed 29189/-3, size 0-0 line 3035 [ 2603.306852] binder: 5294:5301 ioctl 40046207 0 returned -16 [ 2603.331622] binder: undelivered TRANSACTION_ERROR: 29189 05:25:03 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x117) 05:25:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000000) 05:25:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/122, 0x7a}], 0x7, 0x6b) accept4$netrom(r0, &(0x7f0000000400)={{0x3, @default}, [@bcast, @bcast, @remote, @netrom, @remote, @rose, @netrom, @null]}, &(0x7f0000000040)=0x48, 0x80800) [ 2603.548179] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x400000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x164, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x94c4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf643}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x149}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xba0, 0x108ffe) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x8}, [@null, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2603.588894] EXT4-fs (loop1): invalid first ino: 0 [ 2603.631805] binder: 5341:5346 ioctl c018620b 0 returned -14 05:25:03 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x151) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x6, 0x4) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:25:03 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x118) [ 2603.716856] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2603.731015] binder: release 5341:5346 transaction 500 in, still active [ 2603.737799] binder: release 5341:5357 transaction 500 out, still active 05:25:04 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0xfffffffffffffd3a}, {&(0x7f0000000080)=""/93}], 0x459, 0x68) fsetxattr(r1, &(0x7f00000001c0)=@random={'btrfs.', 'trusted.overlay.origin\x00'}, &(0x7f0000000200)='eth1{\x00', 0x6, 0x1) dup(r1) [ 2603.773373] EXT4-fs (loop1): invalid first ino: 0 [ 2603.781249] binder: undelivered TRANSACTION_COMPLETE [ 2603.781434] binder: send failed reply for transaction 500, target dead 05:25:04 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl(r0, 0x7, &(0x7f0000000000)="531547a05962766288d61a8d2bc4e646eb52be806c6214725b52701e035b46ed2c") bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/86, 0x56}], 0x3, &(0x7f0000000340)=""/251, 0xfb}, 0x101) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = semget(0x3, 0x3, 0x4c) semop(r2, &(0x7f00000005c0)=[{0x2, 0x425, 0x1000}, {0x4, 0x0, 0x800}], 0x2) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000500)="ad62026d4e4d61f7cfeea7f4b53890cf970ee4ff738b220e200d5a74acae5292ebc559f7bcfb583e234bb455b6673d3868ff13cde4a8ee22c50ed6474a201190b2369c68f82d7d64e3cd21f4cad183b994d6572e4d3b833ccd2e8904b8e16ebedd7bb30605d98b4c5232808ea5a32eaea3d8ef4e913b0281a9b08c0c47ef5b787f7764cad7ee") ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) [ 2603.836363] binder_alloc: binder_alloc_mmap_handler: 5341 20010000-20013000 already mapped failed -16 [ 2603.869485] binder: 5341:5346 ioctl c018620b 0 returned -14 [ 2603.875940] binder: BINDER_SET_CONTEXT_MGR already set 05:25:04 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000170f40000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) [ 2603.888858] binder_alloc: 5341: binder_alloc_buf, no vma [ 2603.894503] binder: 5341:5357 ioctl 40046207 0 returned -16 [ 2603.897163] binder: 5341:5368 transaction failed 29189/-3, size 0-0 line 3035 05:25:04 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e22, @multicast1}}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r2, r1) [ 2603.939944] binder: undelivered TRANSACTION_ERROR: 29189 05:25:04 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x840, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000140)='io\x00\x04\xe2\x88\x8b\xca-\x98\xdfK\x05\x8b\rR\xe9\xc7|M\xafx\x9da\xdd\xc6\x02kD\x8bt$/\xa2Kd\x90\xf6>zi\x05\t\xce\x00\xb1\x8d\xf7\x18\x8e \xac{\xee:\xb0\xa9\x991\x95') execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='*system\x00'], &(0x7f0000000180)=[&(0x7f0000000100)='io\x00\x04\xe2\x88\x8b\xca-\x98\xdfK\x05\x8b\rR\xe9\xc7|M\xafx\x9da\xdd\xc6\x02kD\x8bt$/\xa2Kd\x90\xf6>zi\x05\t\xce\x00\xb1\x8d\xf7\x18\x8e \xac{\xee:\xb0\xa9\x991\x95']) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x80, 0x13, 0x2, 0x8, "e2cf3b64eba465baf05f10da0d7a1ca367a07618de2fe45e55ea8354128fcb1e5ff4b7aadcd2e28ea4a3aa3691a37c832f5ba1b5bbb658f3093ee8507032664c", "584e00e629d471d1ab31e4f62793b19cbe0d51d730d54295a2b4497528dffe75", [0xb9, 0x8]}) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x68) [ 2604.019720] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:04 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x119) [ 2604.070523] EXT4-fs (loop1): invalid first ino: 0 05:25:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3000000) [ 2604.178338] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2604.194876] [ 2604.196517] ====================================================== [ 2604.202829] WARNING: possible circular locking dependency detected [ 2604.209173] 4.20.0+ #11 Not tainted [ 2604.212806] ------------------------------------------------------ [ 2604.219130] syz-executor0/5394 is trying to acquire lock: [ 2604.222365] EXT4-fs (loop1): invalid first ino: 0 [ 2604.224670] 00000000473a4b6a (&sig->cred_guard_mutex){+.+.}, at: do_io_accounting+0x1d1/0xfe0 [ 2604.224724] [ 2604.224724] but task is already holding lock: [ 2604.244167] 00000000e1bff22c (&p->lock){+.+.}, at: seq_read+0x71/0x1130 [ 2604.250928] [ 2604.250928] which lock already depends on the new lock. [ 2604.250928] [ 2604.259865] [ 2604.259865] the existing dependency chain (in reverse order) is: [ 2604.267470] [ 2604.267470] -> #3 (&p->lock){+.+.}: [ 2604.272850] __mutex_lock+0x12f/0x1670 [ 2604.277022] binder: 5397:5399 ioctl c018620b 0 returned -14 [ 2604.277260] mutex_lock_nested+0x16/0x20 [ 2604.287521] seq_read+0x71/0x1130 [ 2604.291488] proc_reg_read+0x29a/0x3c0 [ 2604.295889] do_iter_read+0x4a9/0x660 [ 2604.300190] vfs_readv+0x175/0x1c0 [ 2604.304232] default_file_splice_read+0x50c/0xac0 [ 2604.309602] do_splice_to+0x12a/0x190 [ 2604.313912] splice_direct_to_actor+0x31b/0x9d0 [ 2604.319096] do_splice_direct+0x2c7/0x420 [ 2604.323762] do_sendfile+0x61a/0xe60 [ 2604.327988] __x64_sys_sendfile64+0x1f8/0x240 [ 2604.332942] binder: release 5397:5400 transaction 503 out, still active [ 2604.332997] do_syscall_64+0x1a3/0x800 [ 2604.340031] binder: send failed reply for transaction 503, target dead [ 2604.344155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2604.344160] [ 2604.344160] -> #2 (sb_writers#4){.+.+}: [ 2604.352683] binder: undelivered TRANSACTION_COMPLETE [ 2604.356525] __sb_start_write+0x20b/0x360 [ 2604.356540] mnt_want_write+0x3f/0xc0 [ 2604.356555] ovl_want_write+0x76/0xa0 [ 2604.356581] ovl_create_object+0x146/0x3b0 [ 2604.367374] binder_alloc: binder_alloc_mmap_handler: 5397 20010000-20013000 already mapped failed -16 [ 2604.371754] ovl_create+0x28/0x30 [ 2604.371770] lookup_open+0x1332/0x1b80 [ 2604.371783] path_openat+0x1983/0x5650 [ 2604.371794] do_filp_open+0x26f/0x370 [ 2604.371805] do_sys_open+0x59a/0x7c0 [ 2604.371816] __x64_sys_open+0x7e/0xc0 [ 2604.371830] do_syscall_64+0x1a3/0x800 [ 2604.371844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2604.371848] [ 2604.371848] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}: [ 2604.378547] binder: 5397:5400 ioctl c018620b 0 returned -14 [ 2604.380484] down_read+0x8d/0x120 [ 2604.380513] path_openat+0x25e1/0x5650 [ 2604.380537] do_filp_open+0x26f/0x370 [ 2604.380549] do_open_execat+0x20e/0x930 [ 2604.380587] __do_execve_file.isra.0+0x18cf/0x2630 [ 2604.380600] __x64_sys_execve+0x8f/0xc0 [ 2604.380613] do_syscall_64+0x1a3/0x800 [ 2604.380626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2604.380633] [ 2604.380633] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 2604.391871] binder: BINDER_SET_CONTEXT_MGR already set [ 2604.394759] lock_acquire+0x1db/0x570 [ 2604.394772] __mutex_lock+0x12f/0x1670 [ 2604.394784] mutex_lock_killable_nested+0x16/0x20 [ 2604.394803] do_io_accounting+0x1d1/0xfe0 [ 2604.401919] binder_alloc: 5397: binder_alloc_buf, no vma [ 2604.403160] proc_tgid_io_accounting+0x23/0x30 [ 2604.403175] proc_single_show+0xf6/0x180 [ 2604.403186] traverse+0x1d6/0x760 [ 2604.403199] seq_read+0x8f8/0x1130 [ 2604.407715] binder: 5397:5400 transaction failed 29189/-3, size 0-0 line 3035 [ 2604.411910] do_iter_read+0x4a9/0x660 [ 2604.411923] vfs_readv+0x175/0x1c0 [ 2604.411934] do_preadv+0x1c4/0x280 [ 2604.411946] __x64_sys_preadv+0x9a/0xf0 [ 2604.411961] do_syscall_64+0x1a3/0x800 [ 2604.411976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2604.411980] [ 2604.411980] other info that might help us debug this: [ 2604.411980] [ 2604.411983] Chain exists of: [ 2604.411983] &sig->cred_guard_mutex --> sb_writers#4 --> &p->lock [ 2604.411983] [ 2604.412002] Possible unsafe locking scenario: [ 2604.412002] [ 2604.412010] CPU0 CPU1 [ 2604.597116] ---- ---- [ 2604.601781] lock(&p->lock); [ 2604.604878] lock(sb_writers#4); [ 2604.610843] lock(&p->lock); [ 2604.616455] lock(&sig->cred_guard_mutex); [ 2604.620763] [ 2604.620763] *** DEADLOCK *** [ 2604.620763] [ 2604.626805] 1 lock held by syz-executor0/5394: [ 2604.631372] #0: 00000000e1bff22c (&p->lock){+.+.}, at: seq_read+0x71/0x1130 [ 2604.638566] [ 2604.638566] stack backtrace: [ 2604.643062] CPU: 1 PID: 5394 Comm: syz-executor0 Not tainted 4.20.0+ #11 [ 2604.649885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2604.659226] Call Trace: [ 2604.661815] dump_stack+0x1db/0x2d0 [ 2604.665437] ? dump_stack_print_info.cold+0x20/0x20 [ 2604.670451] ? print_stack_trace+0x77/0xb0 [ 2604.674682] ? vprintk_func+0x86/0x189 [ 2604.678569] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 2604.683937] __lock_acquire+0x3014/0x4a30 [ 2604.688083] ? mark_held_locks+0x100/0x100 [ 2604.692326] ? mark_held_locks+0x100/0x100 [ 2604.696610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2604.702143] ? check_preemption_disabled+0x48/0x290 [ 2604.707155] ? debug_smp_processor_id+0x1c/0x20 [ 2604.711818] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2604.716746] ? debug_smp_processor_id+0x1c/0x20 [ 2604.721422] ? __lock_is_held+0xb6/0x140 [ 2604.725504] lock_acquire+0x1db/0x570 [ 2604.729324] ? do_io_accounting+0x1d1/0xfe0 [ 2604.733659] ? ___might_sleep+0x1e7/0x310 [ 2604.737802] ? lock_release+0xc40/0xc40 [ 2604.741775] ? is_bpf_text_address+0xac/0x170 [ 2604.746268] ? do_io_accounting+0x1d1/0xfe0 [ 2604.750590] ? do_io_accounting+0x1d1/0xfe0 [ 2604.754901] __mutex_lock+0x12f/0x1670 [ 2604.758780] ? do_io_accounting+0x1d1/0xfe0 [ 2604.763092] ? do_io_accounting+0x1d1/0xfe0 [ 2604.767406] ? rcu_read_unlock_special+0x380/0x380 [ 2604.772330] ? rcu_softirq_qs+0x20/0x20 [ 2604.776305] ? mutex_trylock+0x2d0/0x2d0 [ 2604.780362] ? __lock_acquire+0x572/0x4a30 [ 2604.784596] ? is_bpf_text_address+0xd3/0x170 [ 2604.789084] ? kernel_text_address+0x73/0xf0 [ 2604.793483] ? __kernel_text_address+0xd/0x40 [ 2604.797977] ? mark_held_locks+0x100/0x100 [ 2604.802213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2604.807748] ? check_preemption_disabled+0x48/0x290 [ 2604.812761] ? debug_smp_processor_id+0x1c/0x20 [ 2604.817421] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2604.822363] ? kvmalloc_node+0x68/0x100 [ 2604.826337] ? traverse+0x401/0x760 [ 2604.829960] ? seq_read+0x8f8/0x1130 [ 2604.833668] ? do_iter_read+0x4a9/0x660 [ 2604.837639] ? vfs_readv+0x175/0x1c0 [ 2604.841352] ? add_lock_to_list.isra.0+0x450/0x450 [ 2604.846278] mutex_lock_killable_nested+0x16/0x20 [ 2604.851114] ? mutex_lock_killable_nested+0x16/0x20 [ 2604.856124] do_io_accounting+0x1d1/0xfe0 [ 2604.860272] ? get_pid_task+0xd4/0x190 [ 2604.864155] ? find_held_lock+0x35/0x120 [ 2604.868211] ? get_pid_task+0xd4/0x190 [ 2604.872096] ? proc_pid_stack+0x430/0x430 [ 2604.876242] ? rcu_read_unlock_special+0x380/0x380 [ 2604.881172] ? kasan_unpoison_shadow+0x35/0x50 [ 2604.885769] proc_tgid_io_accounting+0x23/0x30 [ 2604.890349] proc_single_show+0xf6/0x180 [ 2604.894404] traverse+0x1d6/0x760 [ 2604.897853] seq_read+0x8f8/0x1130 [ 2604.901397] ? rw_verify_area+0x118/0x360 [ 2604.905537] do_iter_read+0x4a9/0x660 [ 2604.909338] ? dup_iter+0x260/0x260 [ 2604.912962] vfs_readv+0x175/0x1c0 [ 2604.916499] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 2604.921859] ? lock_downgrade+0x910/0x910 [ 2604.926006] ? trace_hardirqs_off_caller+0x300/0x300 [ 2604.931799] ? __fget_light+0x2db/0x420 [ 2604.935765] ? fget_raw+0x20/0x20 [ 2604.939213] ? kasan_check_read+0x11/0x20 [ 2604.943358] ? _copy_to_user+0xc9/0x120 [ 2604.947336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2604.952868] ? put_timespec64+0x115/0x1b0 [ 2604.957019] do_preadv+0x1c4/0x280 [ 2604.960707] ? do_readv+0x300/0x300 [ 2604.964339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2604.969879] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2604.975237] ? trace_hardirqs_off_caller+0x300/0x300 [ 2604.980343] __x64_sys_preadv+0x9a/0xf0 [ 2604.984315] do_syscall_64+0x1a3/0x800 [ 2604.988205] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2604.993133] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2604.998149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2605.002992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2605.008172] RIP: 0033:0x457ec9 [ 2605.011364] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2605.030265] RSP: 002b:00007fcf5d0bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2605.037986] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 2605.045261] RDX: 00000000000001fe RSI: 00000000200017c0 RDI: 0000000000000004 [ 2605.052521] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2605.059783] R10: 0000000000000068 R11: 0000000000000246 R12: 00007fcf5d0bb6d4 [ 2605.067047] R13: 00000000004c4861 R14: 00000000004d7d20 R15: 00000000ffffffff 05:25:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000140)=""/69) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8001, 0x400400) 05:25:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x2) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4000000) 05:25:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x7f, 0x20}, &(0x7f0000000100)=0xc) [ 2605.081011] binder: 5397:5399 ioctl 40046207 0 returned -16 [ 2605.098933] binder: undelivered TRANSACTION_ERROR: 29189 [ 2605.129401] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2605.135979] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2605.151550] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2605.166928] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:25:05 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11a) 05:25:05 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000041040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x80000000000000) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2605.200428] binder: 5405:5408 ioctl c018620b 0 returned -14 [ 2605.209627] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2605.230981] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:25:05 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000000080)='cgroup\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000180)='cgroup\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000140)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x1, 0xfffffe9c) [ 2605.265793] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2605.273323] binder: send failed reply for transaction 506 to 5405:5418 [ 2605.280252] binder: undelivered TRANSACTION_COMPLETE [ 2605.292946] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2605.298201] binder: undelivered TRANSACTION_ERROR: 29189 [ 2605.305224] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' 05:25:05 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) [ 2605.313165] binder_alloc: binder_alloc_mmap_handler: 5405 20010000-20013000 already mapped failed -16 [ 2605.328212] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2605.338443] binder: 5405:5408 ioctl c018620b 0 returned -14 [ 2605.345248] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2605.352511] binder: BINDER_SET_CONTEXT_MGR already set [ 2605.359710] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2605.369496] binder_alloc: 5405: binder_alloc_buf, no vma [ 2605.375100] binder: 5405:5418 ioctl 40046207 0 returned -16 [ 2605.381526] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2605.383351] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2605.388090] binder: 5405:5426 transaction failed 29189/-3, size 0-0 line 3035 [ 2605.402929] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' 05:25:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x712, 0x400000) getpeername$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) 05:25:05 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11b) [ 2605.418695] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2605.431545] binder: undelivered TRANSACTION_ERROR: 29189 [ 2605.444767] EXT4-fs (loop1): invalid first ino: 0 [ 2605.453500] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:25:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5000000) 05:25:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/112) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000000c0), 0x0, 0x68) 05:25:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="14ddf4eb698c4693e810dc04000000000000007c9ada43fca11a184d76d047c3b9ee4637e1092ea0c1fff885fbe26b37de3521204c4f2a26ce1102715f50cd9dfe7ddfe903a2db312bf58716694e78f012654bde0b725c1d4570ea58d1af6e794c7156569460587b651d07bb80555d6edad8a89c964a0ccc3200bc6ac3cbb400e36d0eb7707de36a8ea227e6872f6553acde0e0309be21ce343544197c5566d4f01ec7e11914f582df2ec48c14e5c2a13c7d96e2d6ebcd2912822c66284512c9dfd4e79a4401995ca1265ee0d5399bec47e4e9fd3008bd3866c0b1f39ac831304070aa4dcf0cefab71092d108b6783c1b10c0b786ba777168b", 0xf9}, {&(0x7f0000000200)="6eb41abba594ffc2446f36de9349e5ec99f8352d2d816d85a7410d49dd7b560b2d4528d96f8c874a416e24a21452ec87a4c43269be7791cebd5d79f69ab2ce48602fa154bd0d958972343252845604776c6843b224abdfe25751f03d28fbe42e0b1f8709bfa9734fde7efe7e2c667d45cc7e5dc10b3837b04d505bb0b98969bb1136bd9ba743d8bc697bf3faeef80f93b20debc69095a3ab2069", 0xffffffffffffff89}, {&(0x7f00000002c0)="727048db5101e80c41a4663256f9a40a0263cd1e3537d592cd997be81eee81ce3260451bb989f150df56cf9b5caf5027c49e132c7385306826d0abbc32b87270346e415f4b4b651cf05765f2f2b79d10f8459d6a2198d018e50e51af3a3d1e67dda46c86efc028c21be4c7feb2e63d9dc37db5bbf9be2b3bb901c3b1913556f004898f9657c686592f8fdf51d2cd3750935aedf0a74044f41f82ecd0d0d41cd74bddb2ec96a32b235a3f9dfa3f455e224440b90eea1260f7d4de81c1e34b12afcb095c9c1c308278d412eef04df575", 0xcf}, {&(0x7f0000000000)="a3ec09d42e2664260e2a227a9f9944b4", 0x10}, {&(0x7f0000000040)="4217af526f18b97cf11cb0b20e659d7c6e9bd0", 0x13}, {&(0x7f00000003c0)="0b94a1c10cf1696ee47faaea436f7fa74efc9ad6565788da975442134e7720afd88e743f14", 0x25}, {&(0x7f0000000740)="7d8dae8446e9242edb409a549ed5ede09a792864c9f87cecd03c3459d16827f684277017db5017bcc948877efa8cd97ae70264a513", 0x35}, {&(0x7f0000000440)="56f2e71a4395c8b793853ccdc2346809d51d44fa128b8ac7cbff3ffffb4c9dcfaaf965cc84f094d07b69", 0x2a}], 0x10000000000000df, 0x2000000063) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x106) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040040000000000000000000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="b0ac2db29bc7b30008000000"], @ANYBLOB="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"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000003800000000000000180000000000000030000000000000000000000000000000"]], 0x4e, 0x0, &(0x7f0000000680)="c48ff185cc59b8487c018f41202d7533738bcf7ffb6f943fd12ba86653d6593ee726171169d6d62732cf952351d6f83f39c2d13a8694f91e5d02bdc2c6fe2ed60da0a6923a27b4db4fbabc7d9971"}) [ 2605.489926] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2605.496520] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' 05:25:05 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose, @null, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) r3 = semget$private(0x0, 0x4, 0x400) semctl$SEM_INFO(r3, 0x5, 0x13, &(0x7f0000000200)=""/253) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000100)=""/240) dup2(r2, r1) [ 2605.534162] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2605.544375] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2605.563469] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2605.575233] binder: 5439:5440 ioctl c018620b 0 returned -14 [ 2605.586086] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2605.598164] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2605.610002] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2605.628390] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2605.638083] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2605.649090] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2605.657956] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2605.668629] binder: send failed reply for transaction 509 to 5439:5455 [ 2605.675514] binder: undelivered TRANSACTION_COMPLETE 05:25:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @default, @bcast, @null, @bcast, @null, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 05:25:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0xf0, 0x9) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) 05:25:05 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a000700000000010000000040000f1740000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:05 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = dup2(r0, r1) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0xde5, &(0x7f0000000040)=0x4) [ 2605.708193] binder: undelivered TRANSACTION_ERROR: 29189 [ 2605.716450] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2605.725849] binder_alloc: binder_alloc_mmap_handler: 5439 20010000-20013000 already mapped failed -16 [ 2605.728074] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2605.740881] binder: 5439:5440 ioctl c018620b 0 returned -14 [ 2605.751353] binder: BINDER_SET_CONTEXT_MGR already set 05:25:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11c) [ 2605.758208] binder_alloc: 5439: binder_alloc_buf, no vma [ 2605.777804] binder: 5439:5455 ioctl 40046207 0 returned -16 [ 2605.784433] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2605.796236] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2605.814662] binder: 5439:5457 transaction failed 29189/-3, size 0-0 line 3035 05:25:06 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) 05:25:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000000) [ 2605.917248] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2605.955059] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' 05:25:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0) fsync(r0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) 05:25:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') bind$netrom(r0, &(0x7f0000001180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default]}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0xfdbf, &(0x7f0000001100)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="60cc7f2d56eceb9b3937943cb520c9c92a18090d422f55aae941a605fcd3cf703552a90e487f61d20af683e04ef5a6a1bceaf6f342d7cde8404e5e3d09b4d5d1c8ec7e93fb124ec28266d1e7482f959b6a4d1035e451af60c5a628e76c9bb57204292c94e684c991c76a95fb0270b229ab3de9d64fe6fbd22811be17f6513213b6", 0x81}], 0x2}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2605.977877] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2605.984898] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2606.002174] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2606.003969] EXT4-fs (loop1): invalid first ino: 0 [ 2606.041947] binder: 5484:5487 ioctl c018620b 0 returned -14 [ 2606.060965] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2606.069263] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2606.082702] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' 05:25:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 05:25:06 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) syz_init_net_socket$rose(0xb, 0x5, 0x0) [ 2606.085045] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2606.105697] binder: send failed reply for transaction 512 to 5484:5494 [ 2606.112549] binder: undelivered TRANSACTION_COMPLETE [ 2606.118444] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2606.125893] binder_alloc: binder_alloc_mmap_handler: 5484 20010000-20013000 already mapped failed -16 05:25:06 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000001a80)='cgroup\x00\xcd\x9f!h\x94u\x8c2\xfbo\xd7dk\x98\xdf\x18\xd5\x02\xed\xfc\x88\f\xe2\x8b\xd7\x00\x9b\xbf+4fc\xf7\xc37\xee\xc7{dRA\x81\xd0\x94\xe0\x94/\xdb,\xf2\x91\xfc`\r\xbb\xdc\x00_\xfa\xc5\x1f$\xd7\xaf\xbc\xb2\x03\xe0\xa8\x93|\xce\x86\xfa\xa1 \x86\x1b\x19\x83i\xfa2\x150K\xc8~\xf6\x00\x00\x00\x80\x00\x00\x00\x00\xf7\xf37\x13\x9c\xd3\x04IY\xe3\x1e\xe8\xf4\x93]0\xb2B\xe8`\xe9\x19\xa8\x90\x9c\"\x919\xcf\xee|\x85\nM') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg(r1, &(0x7f00000018c0)={&(0x7f00000001c0)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="2a5b2d6d97883617062a6fa953e8a1ed50253e9d329dcdd41c95c7903843871a736e58", 0x23}, {&(0x7f0000000380)="fc860d5318bdc7a9fe20d6630708bc303fc643b1c21088587f0c4212d7c301785233eb0708ad49c33f043309748e2ff77b338db71022fa320d9c341991668d71b3491e0d1d10187b2cfe7884510942b487f3fefb5059d35e910a5b99545c5227986cdc7e5f41da8befbbba5b83e6534fbf92996fc9593415478515a37e6b342daec0f7d3464a9018c446798a4e8afde669005c6583d91899011521d8a68f6068a2c52f5504cb", 0xa6}, {&(0x7f0000000440)="ff69bad86e6482e2ba102c4e7e990d4d97c168ef551ae9426a2285f7bd39edca30469066c3b03118b6486f103f347b6732673d2917797ba87fb163cd39f5198ce64e9cf9334116a1a006625ace42c51b51a1fbf475e6011aacb8749d191b314d5202eab68288a32564e9565a792ee5109ffe28580650e93920686eaf16f15def94b230680c48a9e79907c0d3132c94c01e644fda45dbd7be240f81b6", 0x9c}, {&(0x7f0000000500)="f05c2b32b11f5a063cd70c30ec84693455bb360f0b2f9ffaafb9533c79b255ff53ae3c7cdee1b992d1c8a7a187d422a0b6445a77c38fe3f4e16354f9e69595e9003181e1c6a20e48666a2ea7261b4ea723ade210c7d9e55cfedf87247177d627f129b7547f903df5f53a2a9e077efdca02a6503c58b5d77bca5640b4fb70f0900130bc14897621f7f7628716a07678d99a5e5c714697b5ba0c80f39b0768c0e9ca9022e626396f04b874d399b4730f50f91c3816ffbe2866c0036613489b5ff136bf419efe1be58b442849a3e0311246bde7483c33f71cd3", 0xd8}, {&(0x7f0000000600)="445c3ddbce354d49154f4ed9aa02b6b0fc7a9eefef811af0df9dff947ec1eec4766a26fcce811144a3ed0de3a8acdabad612ee609df263ca84f973c5578d4a2b24eeb32d68552c1e3e", 0x49}, {&(0x7f0000000680)="dec0f36b154d010bd50c95c0133fe0590bc5bdd0b04ed09761a5ea4dce05f3875f276e1b651ce0c7a386354b13475313c29184774cb83f977aa59b3234190a8e6c4ffcdad77e45d567324cc30bb1d2b7d562d1b98ae0e20aec86bc02d423ac", 0x5f}, {&(0x7f0000000700)="64c60a0e3085381517d33b7fbea3cfb7ee36ce60318e3c1f13e8abfc447e1ebb69e576751f01c1ffec69c97586a211cae7cad865dbb2ab5062d7108563400b21d130b492e1a9ac89f72731f4190428f667ae4160191edc770378aeffe428348a98c45a8490b942019c8b732cc8ca8129b41a7e3670b87bd6cfb6e913de16361fc8501f45aceb1720230d3818d30efd54644f57f02d1fadf0f54d81068217eabb76a0859d1c993e085354764468b199ff29611a2c3f5efa6abfc62920878a41a5cc7da3c37b6458800a392814e0ca458337f0d18232b9b7ffb168fd32a25a509a9eb563d12173ed35dbab3d63b8043d26a238548ad44528156ec9a1ed6a64899d0a72405e0383c031e133c56306a0e6fb625daca0a31a866996f899de8e060a39e5965ce9afd8b2ea0223b084e2a07cfe428e57ee4b47f3ebb640e959b37c974cf486d25662a6b452a19f2fc65ddf0b6262862b258271aadc450bb1a71510fc8a7e7e4eb7d9f2b83ad475be46b59e35b47d34cbc3447984d32383b2ad9ccc82f6fd4dcff145c0b1980ee5b5a83b45d63985db98baa49e21d761c20b54fe5f53269e082f890273dc95393181792356673f05bbfdc379eacf8c5169a3c51d12b450b025dcb91b2edf155b9f6329b5064b2f6a43e7cac04ae66ac5ad2635f889761f3e0d03bfe2d0ab1bca356271f7f9e89ac5c2a417ff8ac9195319c205c396c43091b8865695a951bed681098146762a466ebac111f66528ab7eaf39b8ea66c85516c7798d6747a0bcb5aa40edf150988fb1324f9b80297d4d1c363cba124eef78d91a0c9dc3b37940aec2f2bb1188df69057e67b4614f2d715475c2dccbf4ed6f286c945caaba86c2b0818b6f4be5c8ebc04cdf7f461612cb237f7102c4d3599f9af4aaebc50678703dedf9384fad966ac0d5b3aaa3f111136f1f6a19e94766a86a3a6e7a63502719ff92b625592655bbd4df6948a8deebe00ee83166a257e0ff0360408d7dbceb6c17c5966c8f9f3c686a2e5c4d719704afcb45b2413feb25137f898894b5d76a0a77fdc6fa44f6dedb6e96fe30de90c0a0694c3ce588e2b55f3b4b60c0b03d921d6eca5e2ab75d96ed92ace4c5b59014118400a2910b871cf7c4117d3d764ee533e4a6c41a822feaff45e749ac461f465124b2dce24841eb36451503710f6d5e59f85a9af5be4f7592b12da4e1e2ecc9e70a4faf5c209a26e9db46dd6a3722800ea51ad9c87cb2ef50ccd40c387631241dba4a5f1976551fae811d358e58f90015efd30353a340d29c2ef2e2f633b8f12fb12646acb5e7fa8af0922c15515843b2b29fe5c8f9f4a9c92f955ff0eb0e2d6d25b03acc3655b1d3392397433b6019bf55cc2ee604d80c5d33cf23840702900fefc972323812953ab63920a10d222f139481edee871625abef18432c32d7aecbcc8252c559981c7ce39d1f00a4bb26fad2ebc65f3bef21bb1a380fdaab7fc9e48611907b3d6bad46136e65fff495a570b0e729579757b6863aacdb3d875db8abe10bdbbca3f84f280d48a62c7cf13b10878623d4dc30dcb1f9e92c02fbd887b272bb605e8c8380064a37833a8a34aaa06913d1f5d34be195a39d57d3d060cdfebeded2c42f450705174662747f16eddac8fa37516a0fe4d0e0d1b9b6b7d6471d4b2b8e16a293b9abb73b8fa6a9adf99ff1a3e257359550ff0958468e657ec99827757bb1bce663d135c3f209aa72d0ddeeb02085b1ff41721f18a3dd594e2c3c3ec6cff3ba5e78a652ddbae88a8072cdfde902c2e0ce7c550f69e4c4921e369f33ff9ad635eebf8fe55d93a77d59f0ad5e82a8abebaf53f05b4de6c7de8f9b34e2035168b71bee251b5bc68c9697ebe0a91d7e1f1a7ad418746fbbd797f94471b563296843bd6a360fc2409115f1672fa8a80520b281d4bebe0b7985bd3d92a45dc36bacb7918f17fc59aadd3f8df5f57dd0e617bc227112b22efd39cb9f462fa00ca4dd7def42a5a621dbce21b693b2a482f855f419444ded61f3a893c567118ca4dd7f93554629e5e342c924152f3f77e6204d6617256bd95c1c7292739403efa00003f25c7e2c46e6c37db0e58d6eb2013ef863ab3730a642fc683bcf908b274ec997dad0adc38f55a6fbd75a631b0f421a73348cfba79935d3eea17caf24f44395b8a9da596de73c7e351cd6d1e93e19c794cadfb7ee25454d7fb5abc6155e994fdf019d838c13f2902228f74ff00111ea5641c37922f43edfcd8f27a7dbaa1c50b632afb58a519411c9fac70dd8f2a251b17f6969594f53ef7268c4bd33b2fb6d5fb8cffeb85cdd0b1e41e43764902323a69bd94caa4f0b34555d09727c060d4c24836a688581182ef1ce710ff617c9633c3434767d51825f632bda6175bd803e9c4e43415296938e6f9acfd6ef98b079bab06f063f1312e53da1abc8a2fbd844acd1e61e70a25d96a7a73d13fe17c096d34ed3f122ca9eba93dd7ee44b4d84c56d3d6bb14f7708b77b7e28a958865f9f33a6bfa08d94490c5dd21e78af479e58bd06ee38b2e228db7d9b9a1ba1c7d69bcb4df9da63c62dcae3b3e56ef85fbaca847b2db0edb2184ff8f18688b5c67f1e00de430fa3a5b7d0ea7054338db7d104a5b4ba6acbffaf276a4e01f4a4c4acde3185af04c5f33558a4e8316640d88d79879f3ef94fb7e2fa6dcc59711cb65ba7590e0bbf5a0542a5eaaddc191967e18cdac28afe68051598cbec49ea1b9a852d669f5782ddf53cefc5ea12e2c5594032a7f99f6b853f92137455920a0a1dc3a0f11e2202ff5e10194bac2c7334b3045c304b3f860399bdef25cb97a04573e2ef01cf42f8d09e9f966247ed6db30abb9e14c391799844a56cdb49713089cd45d9b98682b89eb06ab14b41e63a35fd64df3289ece88671d6123073015ef09568ebbfd42b59120eff9b6ef0309e0a42c7d98d27cc25204a89ab7bc9405420f99db32e30b25d5730ae808ac78211b0038f16f9d18c069ff84cb2a745d37043d0d2443932b0610300d39dc8e6fe26e8e85a64870bdf1dec01726b757ab91aa559a0214366572c1f940461b018936fd0b5053ba9f69198d34c9665cde2fdcd1b2a5237cd9d3bacf2a6e5e327f294249438ea3b5f1654e1d3720606e98df7ebd467abf1b11163f8bbd92f057c3913c6bc058a2258c01cda5edd6a2e5a30e4910357d6abf70998ead50fcd124d2e3d14a752c006726b37c87ae8cd9164d357e3847c6ef7d248390eca1aa30897b6aae6ee090ce228fcc7d54f323fd94b1a18d6d3e6771e8fa1902bfc985714b4dc3ba459c8da14bca5f29bfc6fa5a742ac032eb6cbd89b286119eff0be041c89f9ad8ca1a5be0af099e101d55fe72affb271db9710a3c3bcb872199ae805a984c5bd83b7e1298f4a276a62442cdb503863029fedbf8325b281e642e31acc561f5be9b2796024249c711744de37e3fd5336a148354fd4051aec05343e8b1d81d522168b85ec2ff7ec870706aca1cd503129e638e940161bc10f1b19d409cbabef1af338c361e03291ef0ab2b09ed39cd1d6aa2f7c18ace330648076e0a18254dc3749fdf9e5e3b06d820800f0eba898ff961959ae2c8026a6c9ed15bdb7d8937c77b61c3dc4ae16f171b4bf4e5d2e185d2ac0b403b1aafd004affc7335f4c8a86788d4c89d742a86acf2893c5b9887cdf4b7c81183bb7dbe3ff9ec33a9c0607ee2f19b6397169ed5eb9dab133952bdf65fa2a3659e77f7890735280b13f11326ce6eda7d9fbefd54da8a1f88a70fa361d8624ad181fcde86476817d7144c74a4168020de1b598114d7ea7078c6cc5471f60af09ac171353544ecf6e748db86dc5d648524cc565cdd7a6f2a52d8a3dc5c6a9925a5b573169299de90b06803e96372f4fcf2144a59e27a02c071b47754025a935999264832499e81b2a47b50083b565457be5815356dac2fd54c376065037d90564284b1db14ea82ffaa7d5cecf8a93bbad929968e03dfaabc187c4bdc12074628a84e8b65f27556a6f987d62aa5170f07db98ed403bd1d255da49d8da7ba6a0a91a460823ab202b9fda293cbd5ab1d6024d3d8422a461bc718ac072d6bdb46139d33a8693c3698c8a5ccd79ec3960fe1194065caa7755848a1b3f0185c4c84bcc08d501a7e77ded49d90e284ae12592b7d76f334898d57127ded17eb09f64497b8d8ba51c172666d97c690884f41cdec51af6b2104ec364fa4ce5bb7b72036b1e062ef89218549c08c8d3234c28b842c4a3c84e67c9094002e37e2d077f939cf3d8ea469571f0ee30f21e79d949b0f5baff9b6881f96b12dfa612ab253ba56ad7bcab9876d42e0f73bdfe1f8db724d648a5057430a3956aedb9c752500f971cca5eda8b429ef581480cb526faddc13ac26ec651b484e32071b0e6b1a3380fca06d96667205683d9305fe26f269df046803778810efbcba03a9e94a2bcb6bc4770f5154ffe8f4333084cf849aa9e291625062e1be5baeea571602faeffced57c3e4cbeb62caf1741f7c01ff7b9fd5dad14597d0f8844d9f719a56185e64fa8fda43b92dce18882c1a4c19f31fda3910fbd12942a8af7b4d18a12df170ed4a6c0445392ee3b2773fb701e3df8d239d0ddd8adc51c5d7ca27414bfd88685148af32456a096c4bf211117172ff2d12e0fb46b1f327b6b7d6c715707be72ebcf44b1808c60c09dd6e651fa1871998772a02a8fa4030875f14358524c51ca7be8505a7bfe282c06ca72261b55cdb0c5d304940ede99247dcca1b602fc74093955611ad3e8a6f8ab5316a5c4fd00eefcf98c67886efeabd4cc76591577c05772a43e468904f94395f97ebb5ab7fb81ab65f277209a8b9343ce39ff5b8498d46bb1e441ce7391941e6b0195af09464a5416dded57d739fee20e816d1c31a8fa7360ae06b75a5190aaa86079d142d22ee0a825ab3ae1bfb5814345045c754475ffa204cad2e7a937ede4843f3e478cbb407fc2b8544ab03d5580ac0e16af2fc3cdaa85acd6bdbf6d03cb59fc4d22d82377bab742da8389f93faa2048fff885d08245677b41f6c44e8291e445edb0004377089e09dc873e811f614bd09edfd3ed1b9aedce20beaca520ca8d4c21357f9df3342b250e444c8fe5101a75199982d530596ff86cf9253ea67eaae2b811664d42fa4b2c0a6f5138f20665e64bd798262aa254641423f7758ff2cbea0713874e1e977a76fb9e8929e73b546c75120a5b914272ccc5fb25de32395f71fc00bb83b22ceca6b094c54619018b834685cae98263e0d4c6be4e5a4565e7b1cd0ea0cf9863a72e3e2feb609c7648ab1865f58ed5acff96a05021be44c4865d4154beff1428c839d101039ef2dc89f59f5de68c8a25ec01050300ecec7cc293de26a6e9c11b479a0653bd37a1edc27391beb8ce7310a86b7e6d606b81c27bd51a8f2a83842345249dd6114f3637637e58ccc71f181dc8e26d6f6579a8836cbbfedcd8a616fc68c66bf5cafa11d33ea1fbf9bc04b28e275f7bbedb114f0631218c398c53f3301ddb07af6480ac02eff1ea6694521c87abdba87b3fff1fd8586ffebd712fa8cacce418273c6d66c35b2e3668ee03366ee1f67513ba9ff459617fc242c2c02e95e6819b5f2f939ae3ff526e6009e4e91337c09f578d60a92fa740704764b7e31ecb6933b55a1316cbbefd399d561363c6aa30332773716a0b31935303f7a0f4d81410312be3658c7eb3d1d1ea291aa0f86a86ad629521f9f462390ee5a84a93581333d83f01e2eb6de9eec577211a4a6f11fef467f457d0125793c663dd996698cbe34d3e22e1bed6c6c84a5ef", 0x1000}, {&(0x7f0000001700)="8fe280c371e0f23ca6691b5d578178eeac61d2d2daccafa4491736b1ea096509c994f741b52dec57bcf8bd4c42d33bf69c101d305a80acb6f5f211a121a1ea96abb5fc1cbedf7129048ddb1faba0b5aaa918852e6fc4f605", 0x58}, {&(0x7f0000001780)="fd29a8cca8688fd92b4cc5d37f40f7c53a5f6d1376193f03ac1a39fa00ece7b19451803298e8e537ac08dd60245c6a773c4ad4cef344f423ff0808f670f15e328187d8f6a3782df9d3b2ada05e2a5c610c0db74aaee4d95cebc515aacce77b6b56d5f88f37794ea1b56fa25aedbe0bfe29d6ddb4", 0x74}], 0xa}, 0x20008800) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001940)={'NETMAP\x00'}, &(0x7f0000001980)=0x1e) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001900)=0x1c, 0x800) accept4$packet(r1, &(0x7f0000001a00)={0x11, 0x0, 0x0}, &(0x7f0000001a40)=0x14, 0x800) sendmsg$nl_route(r1, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)=@ipv4_delroute={0x40, 0x19, 0x11, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0xb0, 0x5, 0xff, 0x3, 0xff, 0x1, 0x400}, [@RTA_ENCAP={0x8, 0x16, @generic='1'}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x8, 0x0, r3}}, @RTA_DST={0x8, 0x1, @empty}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x40800) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/102, 0x66}], 0x1, 0x2000000000) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 05:25:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11d) [ 2606.149909] binder: 5484:5487 ioctl c018620b 0 returned -14 [ 2606.165668] binder: BINDER_SET_CONTEXT_MGR already set [ 2606.165996] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2606.178405] binder_alloc: 5484: binder_alloc_buf, no vma [ 2606.186645] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env 05:25:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x2) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @null, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/158, &(0x7f0000000040)=0x9e) [ 2606.203491] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2606.215124] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2606.222209] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2606.225124] binder: 5484:5494 ioctl 40046207 0 returned -16 [ 2606.264774] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2606.272437] binder: 5484:5498 transaction failed 29189/-3, size 0-0 line 3035 [ 2606.281937] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:25:06 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000001f40000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:06 executing program 0: r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) 05:25:06 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x640, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = fcntl$getown(r0, 0x9) syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_flowlabel\x00') dup2(r1, r0) 05:25:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7000000) [ 2606.317722] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2606.334284] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2606.354496] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2606.359220] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env 05:25:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000100)='\x00', 0x1, 0x1) [ 2606.363469] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2606.368288] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2606.404225] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env 05:25:06 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x80) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/39, 0x27}], 0x9, &(0x7f0000000640)=""/55, 0x37}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f00000007c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000006c0)={0x0, 0x101, 0x2d3, 0x0, 0x1}) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x68) [ 2606.410827] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2606.446821] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2606.447999] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2606.482928] binder: 5526:5527 ioctl c018620b 0 returned -14 05:25:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x11e) 05:25:06 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x4f, 0x6, 0x1, "0a898e9b9095f431152ea53ab2a96233", "157e08d8790780ff92456ce0aedd403477c82295b1717a8ea1e547bf3688d5488aee83ae40ef8544d14dc09b8a3205f4b2b3a5167de3a3f33d14"}, 0x4f, 0x1) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x20000) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000040)=0x7ffd) dup2(r1, r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) 05:25:06 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400000404) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2606.493048] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2606.494426] EXT4-fs (loop1): invalid first ino: 0 [ 2606.534300] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2606.559683] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2606.574046] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2606.580899] binder_thread_release: 4 callbacks suppressed [ 2606.580909] binder: release 5526:5535 transaction 515 out, still active [ 2606.593312] binder: release 5526:5527 transaction 515 in, still active 05:25:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x1) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2606.601355] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2606.607283] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2606.624521] binder: undelivered TRANSACTION_COMPLETE [ 2606.633182] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2606.643239] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env 05:25:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11f) 05:25:06 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x69}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r3, 0x8, 0x7, [0x5, 0x0, 0xa3d1994, 0x9e, 0x100, 0x3ff, 0x401]}, 0x16) [ 2606.656204] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2606.663486] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2606.672426] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2606.689071] binder: send failed reply for transaction 515, target dead [ 2606.726609] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2606.733271] binder_alloc: binder_alloc_mmap_handler: 5526 20010000-20013000 already mapped failed -16 [ 2606.750398] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:25:07 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000002040000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0x464200, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x9, 0x663f, @buffer={0x0, 0xf5, &(0x7f0000000240)=""/245}, &(0x7f0000000340)="c6f4d12f56797ad4b1", &(0x7f0000000380)=""/15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x400) ppoll(&(0x7f00000000c0)=[{r0, 0x20}, {r2, 0x8040}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={0x23}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) r4 = getpgrp(r3) kcmp(r3, r4, 0x5, r2, r1) prctl$PR_SET_PTRACER(0x59616d61, r3) r5 = syz_open_dev$sndmidi(&(0x7f0000000580)='/dev/snd/midiC#D#\x00', 0x8, 0x40200) syncfs(r5) [ 2606.779350] binder: 5526:5527 ioctl c018620b 0 returned -14 [ 2606.825144] binder: BINDER_SET_CONTEXT_MGR already set 05:25:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='veth1_to_bridge\x00', 0x5, 0xffff, 0x5}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x1) [ 2606.846560] binder: 5526:5535 ioctl 40046207 0 returned -16 [ 2606.856730] binder_alloc: 5526: binder_alloc_buf, no vma [ 2606.859388] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2606.862707] binder: 5526:5561 transaction failed 29189/-3, size 0-0 line 3035 [ 2606.868977] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2606.887147] binder_release_work: 3 callbacks suppressed 05:25:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x20000000) 05:25:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = dup2(r1, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 05:25:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2606.887155] binder: undelivered TRANSACTION_ERROR: 29189 [ 2606.910991] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2606.917452] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:25:07 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x120) [ 2606.976718] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2606.982386] binder: 5571:5573 ioctl c018620b 0 returned -14 [ 2606.999171] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2607.001394] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env 05:25:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2607.026019] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2607.042611] binder: release 5571:5573 transaction 518 in, still active [ 2607.049450] binder: release 5571:5578 transaction 518 out, still active [ 2607.057543] binder: undelivered TRANSACTION_COMPLETE [ 2607.066741] binder: send failed reply for transaction 518, target dead 05:25:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x1, 0x100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2607.082826] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2607.095178] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2607.109703] binder_alloc: binder_alloc_mmap_handler: 5571 20010000-20013000 already mapped failed -16 [ 2607.120781] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2607.122489] binder: 5571:5573 ioctl c018620b 0 returned -14 [ 2607.136922] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2607.145503] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2607.152233] EXT4-fs (loop1): invalid first ino: 0 [ 2607.155879] binder: BINDER_SET_CONTEXT_MGR already set [ 2607.165441] binder_alloc: 5571: binder_alloc_buf, no vma [ 2607.176155] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env 05:25:07 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) [ 2607.182786] binder: 5571:5578 ioctl 40046207 0 returned -16 [ 2607.198150] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2607.200164] binder: 5571:5587 transaction failed 29189/-3, size 0-0 line 3035 05:25:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = dup2(r0, r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2100, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, r2}) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:07 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x121) [ 2607.248518] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2607.266335] binder: undelivered TRANSACTION_ERROR: 29189 [ 2607.273189] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2607.289457] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2607.297027] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2607.343360] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2607.346745] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2607.352044] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2607.363153] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2607.406043] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2607.414609] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' 05:25:07 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000002240000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x8, 0x4, 0x2}) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0xffffffff00000000, 0x2, 0x1}) accept4$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e, 0x80800) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)=0x400000) dup2(r1, r0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/128, &(0x7f0000000240)=0x80) 05:25:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/178) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000100)=0x6) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) 05:25:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3f000000) 05:25:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:crash_device_t:s0\x00', 0x24) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2607.458610] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2607.474600] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:25:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x4040, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @default, @bcast, @rose, @rose, @default]}, 0x48) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)={0x4, 0x2, 0x1}) r2 = accept4(r0, &(0x7f0000000100)=@alg, &(0x7f0000000040)=0x80, 0x80800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) dup2(r1, r0) 05:25:07 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x122) [ 2607.511815] binder: 5614:5618 ioctl c018620b 0 returned -14 [ 2607.539637] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2607.546399] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' 05:25:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1, 0x9, 0x4, 0xce, 0x0, 0xfffffffffffffffe, 0x2, 0x8, 0x7, 0x5, 0x800, 0x64189514, 0xff, 0x8, 0x9, 0xdcb, 0xffffffff00000000, 0x1f, 0x4, 0x8, 0x9, 0x7fffffff, 0x81, 0x80000000, 0x0, 0x2, 0x2, 0x800, 0x6, 0x101, 0x874, 0x2, 0x5, 0x101, 0x7, 0x80000001, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x2}, 0x22c0, 0x1, 0x2, 0x7, 0x8, 0x66, 0x101}, r1, 0xc, r0, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x6, 0x4) [ 2607.576476] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2607.588611] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2607.604701] binder: release 5614:5618 transaction 521 in, still active [ 2607.611619] binder: release 5614:5623 transaction 521 out, still active [ 2607.635345] binder: undelivered TRANSACTION_COMPLETE [ 2607.640990] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2607.642066] binder: send failed reply for transaction 521, target dead [ 2607.647537] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2607.666762] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2607.676020] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' 05:25:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @null]}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@null, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose, @default]}, 0x48) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x8, 0x2, 0x3, 0x100000000, 0x2, [{0x6, 0xf5, 0x6, 0x0, 0x0, 0x2000}, {0x0, 0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x1c0a}]}) [ 2607.700259] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2607.711801] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2607.723293] binder_alloc: binder_alloc_mmap_handler: 5614 20010000-20013000 already mapped failed -16 [ 2607.733210] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2607.742979] EXT4-fs (loop1): invalid first ino: 0 05:25:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) write$binfmt_aout(r0, &(0x7f0000000140)={{0xcc, 0xc350, 0x1, 0x19d, 0x285, 0x2, 0x3b, 0x9}, "e513043331b11fcbc6d7bcf57fbe02d121766275c86ae89d1a9b6c1fb3745d021988107548851b1bbf9e0bd1b89de1", [[], [], [], []]}, 0x44f) r2 = dup2(r1, r0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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") r3 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000006c0)={[], 0x40, 0x6, 0x7, 0xffffffffffffffff, 0x8001, r3}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e20, @multicast2}}) 05:25:08 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) sendmsg$nl_crypto(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x802091}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@get={0xf8, 0x13, 0x500, 0x70bd2c, 0x25dfdbff, {{'tgr192-generic\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x40}, {0x8, 0x1, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffffa3, &(0x7f00000000c0)=[{&(0x7f0000000100)='~0x0, 0x58, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x89e, @mcast2, 0x2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0xfe1}, 0x8) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, [], 0x1c}, 0x9}, @in6={0xa, 0x4e23, 0x401, @empty, 0xe4b}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @remote, 0x100000000}, @in6={0xa, 0x4e23, 0xffffffffffff0000, @mcast1, 0x101}], 0xac) write$P9_RFLUSH(r2, &(0x7f00000002c0)={0x7, 0x6d, 0x40}, 0x7) 05:25:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x124) [ 2608.043457] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2608.056291] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2608.074846] EXT4-fs (loop1): invalid first ino: 0 [ 2608.093589] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2608.134892] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2608.149824] binder: 5678:5679 ioctl c018620b 0 returned -14 [ 2608.158285] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2608.174769] kobject: 'loop4' (0000000089414633): kobject_uevent_env 05:25:08 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xffffff6a) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000240)={0x9}) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r1}) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x8}, [@null, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @default]}, 0xffffffffffffff14) 05:25:08 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) ptrace$cont(0x7, r0, 0x2, 0x6) getpgrp(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/arp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getpeername$netrom(r3, &(0x7f0000000000)={{0x3, @default}, [@default, @remote, @bcast, @null, @bcast, @bcast, @bcast, @netrom]}, &(0x7f0000000100)=0x48) preadv(r3, &(0x7f00000017c0), 0x10000050, 0x68) 05:25:08 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x1, 0xfffffffffffffffd) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x41c0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xab, "668ed332b04f19e1750ca36a659369caf337525680c08bc9f64047adde4dc141bbe110b87dc42d235d6f88f5eea253f803c0354de0466b2f9461ac82953365f01e2bb999cc1a34a1d545e151d384e7d490a7bb7cef483968a065c5327a634e8c89a3bb8ccd4890b2c8d5931aa08cd15e5557aefb151068a69ac8d605323d142cda383033688e0b74d80914c55808cbc06b7440a8b891ff725f9972bd5356d7bdda2f9d81f2f98b1d86b0fb"}, &(0x7f0000000040)=0xb3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @loopback}}, 0xfffffffffffffffd, 0x0, 0x1000, 0x7}, &(0x7f00000002c0)=0x98) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) connect$caif(r2, &(0x7f0000000680)=@dgm={0x25, 0x7, 0x4}, 0x18) getsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f00000004c0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) accept4$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14, 0x80800) getpeername$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000b00)={@mcast1, 0x0}, &(0x7f0000000b40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000e80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b80)={0x298, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x1ec, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x5, 0x4, 0x200, 0x4}, {0xc19, 0xffffffff, 0x1, 0xffffffffffff1f2a}, {0x40, 0x100000001, 0x0, 0x3400000000000000}, {0x7fffffff, 0x200, 0x6, 0x8}, {0xff, 0x0, 0x0, 0x4}, {0x1, 0x2, 0x30, 0x6}, {0xf6, 0x2, 0xb20, 0x4}, {0x0, 0x1ff, 0x2, 0x9dab}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x41}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4040040}, 0x8001) dup2(r1, r0) [ 2608.183007] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.184824] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2608.197181] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2608.237938] binder: release 5678:5679 transaction 524 in, still active [ 2608.247646] binder: release 5678:5687 transaction 524 out, still active [ 2608.259669] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2608.266114] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2608.275889] binder: send failed reply for transaction 524, target dead [ 2608.282997] binder: undelivered TRANSACTION_COMPLETE 05:25:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x125) [ 2608.297666] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.313224] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2608.316782] binder_alloc: binder_alloc_mmap_handler: 5678 20010000-20013000 already mapped failed -16 05:25:08 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000002c40000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:08 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000200)={0x1, 0x6}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000040)=0x54) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x51147d) 05:25:08 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = dup2(r1, r0) r3 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200000, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r5}}, {@dont_measure='dont_measure'}, {@audit='audit'}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x39, 0x31, 0x39, 0x7f, 0x77], 0x2d, [0x67, 0x35, 0x0, 0x67], 0x2d, [0x37, 0x33, 0x77, 0x77], 0x2d, [0x35, 0x32, 0x32, 0x65], 0x2d, [0x77, 0x77, 0x64, 0x36, 0x0, 0x63, 0x31, 0x7f]}}}, {@euid_lt={'euid<', r6}}]}}) [ 2608.386451] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2608.408069] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2608.420002] binder: BINDER_SET_CONTEXT_MGR already set [ 2608.425306] binder: 5678:5679 ioctl 40046207 0 returned -16 [ 2608.426892] binder_alloc: 5678: binder_alloc_buf, no vma [ 2608.437972] binder: 5678:5703 ioctl c018620b 0 returned -14 [ 2608.443125] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.450449] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2608.454965] binder: 5678:5704 transaction failed 29189/-3, size 0-0 line 3035 [ 2608.473330] binder: undelivered TRANSACTION_ERROR: 29189 05:25:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c000000) 05:25:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11}, {&(0x7f00000000c0)=""/51}, {&(0x7f0000000100)=""/73}, {&(0x7f0000000500)=""/97}, {&(0x7f0000000200)=""/214}, {&(0x7f0000000300)=""/212}, {&(0x7f0000000400)=""/106}], 0xd5a0e87cda3dd2c9, 0x68) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0xb15, 0x1, 0x3ff, 0x1, 0x3}, 0xc) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 05:25:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x126) 05:25:08 executing program 5: times(&(0x7f0000000000)) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2608.497672] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.508254] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2608.529911] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2608.536369] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2608.574360] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2608.584199] EXT4-fs (loop1): invalid first ino: 0 [ 2608.594131] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2608.601442] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' 05:25:08 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000240)=[0x200, 0x80]) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@default, @rose, @bcast, @null, @bcast, @rose, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f9f5a3e4", @ANYRES16=r3, @ANYBLOB="04042dbd7000fddbdf25010000000000000008410000001400180000797a300000000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x20008004}, 0x40011) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000200)=0x7ff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4200}, 0x1bfd81b9fa2ddbb9, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000280)=0x7, 0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@int=0x3f, 0x4) 05:25:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42000, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2, 0xf1}], 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) 05:25:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') setsockopt$inet6_int(r0, 0x29, 0x67, &(0x7f0000000040)=0x527, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2608.619420] binder: 5723:5724 ioctl c018620b 0 returned -14 [ 2608.634831] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2608.647211] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2608.663661] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2608.670771] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2608.673298] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.693264] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2608.695217] binder: release 5723:5724 transaction 527 in, still active [ 2608.709545] binder: release 5723:5729 transaction 527 out, still active [ 2608.716310] binder: undelivered TRANSACTION_COMPLETE 05:25:08 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x127) [ 2608.722808] binder: send failed reply for transaction 527, target dead [ 2608.733549] binder_alloc: binder_alloc_mmap_handler: 5723 20010000-20013000 already mapped failed -16 [ 2608.743756] binder: 5723:5724 ioctl c018620b 0 returned -14 [ 2608.758297] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2608.792388] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2608.805407] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.806094] binder: BINDER_SET_CONTEXT_MGR already set 05:25:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="9bcb5b27665d9a4de0c9facea838f0d8c28f21b5e8733cebbbe255727b5b55d1c6cc995b5a00d5a3a9c399dbde2d87d6390bdb9e8c140e9468210dd6606b87a9ae7be2f65c95a387adc78d13e39e5a0be9858cfe9b583c0a8044ad3ff0e72371e4831862552c74a90157f20c116861e59892920e2dd20e4b6bd2079d163cb9784048b81c1eb3c55d67e1909793150468c50eca1877202318eca52139422ab180c62ea0639fb99c25ed840ab9", 0xac}, {&(0x7f0000000100)="8ef5181f08e61906790eb4ae801aea65ed196b455226060d12dddd715c5e54051c783df11ee63ba362f3e5410c22", 0x15}], 0x2}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x68) [ 2608.834560] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2608.839240] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2608.855002] binder: 5723:5739 ioctl 40046207 0 returned -16 [ 2608.873346] binder_alloc: 5723: binder_alloc_buf, no vma 05:25:09 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000002d40000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:09 executing program 2: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0x5100, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000140)="35d35c433b773f246c1550cafa66725a2e9b20f625c4868d8f054c65cc72a275600306b9c8484003d820ac1095cc713ef4922c960d95e29de789e79970d74c5a9dc89843a18411b2f1b9ebfb0a60eb146c03d1a6236446e0824b9da2fc6e498645fcc3938e07a30533f15343cce3224404e8e9c6aac12875cbd4f5a4393926bcf98d45da664279ad829bd3bea8e09a74652d9f92fca0ebb3dc50f4e8c763e2aaca4a3fb7e85c6405686de33f8ffc952bcfd690b12d33bb6850f0c3eb77aed4d2bc65db79098faaf2db9867449a571a4bef1fb71ced596bd9908781b7262a8f", &(0x7f0000000240)=""/185}, 0x18) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000400)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x182) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000000008, 0x14, r3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) 05:25:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x600002, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{}, {}, {}, {}]}) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2608.879030] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2608.888620] binder: 5723:5740 transaction failed 29189/-3, size 0-0 line 3035 [ 2608.906199] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2608.914335] binder: undelivered TRANSACTION_ERROR: 29189 [ 2608.925644] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' 05:25:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="3802deff0400000000000000c889b7ff90d3436c50cff7612a95e5b641c4212cd22c066c567ec56143407245c5b09083a67a879325732a340b3f9574aff2f411a7e503cabadb5e6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x60000000) 05:25:09 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x128) 05:25:09 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x4, 0xfffffffffffff55f, 0xfab2, 0x100}, 0x19, 0x1, 0x0, 0x0, "349f47bf93f463c3dfa4eecb88362bd6c3d6c23486140695ff195a6609303a0a218930c67f9c814723c129aa263d39e8e98e24a228bfc7e68053596c9bd2a789"}, 0x48}, 0x1, 0x0, 0x0, 0xadd25a02fa7ac647}, 0x10) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000340)='ne\xc4\x0f5\x89\xec\x034\xebX\a\x99]\xd3\xeb\xd9\xd6A\fE\xce\xe3\xaa\xf0\xdcp\xcf\xc1\x18\x01\xa0\x9d&\xc3S\x8d\x02Ta\xc6\x01\x00\x00\x00\xecYM\x9f\xd7\xbb;|\xef)\x8a\xd1\x1a\xf0fm\t#V\xe4a\x99\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bind$can_raw(r2, &(0x7f0000000040), 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x68) [ 2608.971494] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2608.989078] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2608.996821] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2609.003094] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:25:09 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) r2 = dup2(r1, r0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x5, 0x80, 0x100000000, 0x9cc, 0x7fffffff, 0x0, 0x3, 0x7, 0x7, 0x8, 0x6, 0x10001, 0x3}, {0xf800000000000000, 0xfffffffffffff98a, 0x9, 0x40, 0xfffffffffffffff8, 0x6, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7f, 0x3, 0x1000}, {0x10000, 0x40, 0x0, 0x1636, 0x1, 0x1, 0x1, 0x8001, 0x1, 0x1, 0xffffffffffffff6f, 0x1000, 0x3}], 0x7}) 05:25:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) [ 2609.035161] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2609.046723] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2609.057336] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2609.068220] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2609.117154] binder: 5762:5764 ioctl c018620b 0 returned -14 [ 2609.149428] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2609.155916] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:25:09 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x4, 0xfffffffffffff55f, 0xfab2, 0x100}, 0x19, 0x1, 0x0, 0x0, "349f47bf93f463c3dfa4eecb88362bd6c3d6c23486140695ff195a6609303a0a218930c67f9c814723c129aa263d39e8e98e24a228bfc7e68053596c9bd2a789"}, 0x48}, 0x1, 0x0, 0x0, 0xadd25a02fa7ac647}, 0x10) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000340)='ne\xc4\x0f5\x89\xec\x034\xebX\a\x99]\xd3\xeb\xd9\xd6A\fE\xce\xe3\xaa\xf0\xdcp\xcf\xc1\x18\x01\xa0\x9d&\xc3S\x8d\x02Ta\xc6\x01\x00\x00\x00\xecYM\x9f\xd7\xbb;|\xef)\x8a\xd1\x1a\xf0fm\t#V\xe4a\x99\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bind$can_raw(r2, &(0x7f0000000040), 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x68) 05:25:09 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/248, 0xf8, 0x200, 0x8, 0x7, 0x5, 0x7}, 0x120) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @null, @bcast, @rose, @rose, @default]}, 0x48) dup2(r1, r0) [ 2609.169022] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2609.179045] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2609.189739] binder: send failed reply for transaction 530 to 5762:5778 [ 2609.196567] binder: undelivered TRANSACTION_COMPLETE [ 2609.205747] binder: undelivered TRANSACTION_ERROR: 29189 05:25:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x68, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0xf37, @remote, 0x7ff}, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast2}, 0x9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000200)=0x10) fdatasync(r0) [ 2609.221839] binder_alloc: binder_alloc_mmap_handler: 5762 20010000-20013000 already mapped failed -16 [ 2609.245181] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 05:25:09 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x302) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040119a5010000000000000002000700ff03000025210000000000004000000000000000060000000000000000020000bd9a3800020002000400060001000000fdffffff04000000000000003706000000000000fbffffffffffffff43000000000000000800000000000000070000000000000003000000b5000000010000000100000005000000000000000c0c000000000000080000000000000007000000000000000000260000000000b813e9eeba242b081f200360ced2ce83b12858a0b9a618097f8dc4cb11ec0a01f9eb56a89b4b5c8d6b60fa8701246221dfd678025aa317be1f825c9ef7a51a203926aa4b6931657238820c97557b3f68b63b388843806b3e040c003651a197e03dfab2b88ce78c872bda6e73c297195e4da55c14bb454128ff3cce365dca9965ad238370dd509638d7562a7152fd7e4b3b1cc1e934fcf3"], 0x129) [ 2609.283866] binder: BINDER_SET_CONTEXT_MGR already set [ 2609.298324] kobject: 'loop4' (0000000089414633): kobject_uevent_env [ 2609.309139] kobject: 'loop4' (0000000089414633): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2609.318911] EXT4-fs (loop1): invalid first ino: 0 [ 2609.339559] binder: 5762:5764 ioctl 40046207 0 returned -16 [ 2609.362451] binder: 5762:5784 transaction failed 29189/-22, size 0-0 line 2896 [ 2609.370183] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2609.389353] binder: undelivered TRANSACTION_ERROR: 29189 [ 2609.397599] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2609.426067] kobject: 'loop0' (000000008a8dd8a1): kobject_uevent_env [ 2609.436804] kobject: 'loop0' (000000008a8dd8a1): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2609.448050] kobject: 'loop2' (00000000da66c6bd): kobject_uevent_env [ 2609.448326] kobject: 'loop1' (000000005053d0e3): kobject_uevent_env [ 2609.454862] kobject: 'loop2' (00000000da66c6bd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2609.466353] kobject: 'loop1' (000000005053d0e3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2609.476710] kobject: 'loop3' (00000000aa671e3a): kobject_uevent_env [ 2609.493599] kobject: 'loop3' (00000000aa671e3a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2609.517184] kobject: 'loop5' (000000004d0722a5): kobject_uevent_env [ 2609.527260] kobject: 'loop5' (000000004d0722a5): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2609.537622] kobject: 'loop4' (0000000089414633): kobject_uevent_env 05:25:09 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="800300000002010019000000e60100006c000000001a00070000000001000000004000003f40000080000000000000006d5ebe5a0000140053efcb0c4baf3cf00512cb9c9708972fad25a8fd27", 0x4d, 0x400}], 0x0, 0x0) 05:25:09 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f000000