05] binder: 18652:18673 got reply transaction with no transaction stack [ 305.413735] binder: 18652:18673 transaction failed 29201/-71, size 0-0 line 2759 [ 305.438463] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 305.445451] binder: release 18652:18655 transaction 787 out, still active 03:35:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0xc, {{0xa, 0x4e24, 0x4, @loopback, 0xa6d}}}, 0x88) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 305.454186] binder: undelivered TRANSACTION_COMPLETE [ 305.459361] binder: undelivered TRANSACTION_ERROR: 29201 03:35:49 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:35:49 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/21) getsockname(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) shmctl$SHM_UNLOCK(0x0, 0xc) [ 305.540827] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.546434] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.595399] binder: send failed reply for transaction 787, target dead [ 305.610515] gfs2: gfs2 mount does not exist 03:35:49 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = getpgid(0xffffffffffffffff) sched_getscheduler(r0) 03:35:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1a, 0x2, 0x3) getsockname$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x14) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x1, 0x400) 03:35:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x26ce, 0x400000) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x81, 0x401, 0x101, 0x7, 0x10001, 0x80000000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000380)=0x83eb, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0xef, "073d3eb95e2f90a665c794f9ecc80b2f513961cb1c2f62369bd7135e667e8ddd784b830159b42ecc1ca474fb31e08d001a390b984d14da3256ac16b07947c9fa796bd44fcbc0116f6fba62b562c4e0fb96e4b3844f427175eb0cd1c08fda993da18037cacede558650e3c0c625a7bfdc339cb01cf20d704ec47ac629553167c75f36c0a98b353771ce6acbfa83576694e9e24dc152dee7207e2d9702ad0d7f7f756b8c1e155186b695fa004c2fc9a50b468266e452148d40203d86d1d2005b6bc16d7ff9178c39985b44a0faf90722a6ee567ad0293dcb20b98151b6aa7bda93f1c9675fc37f7ee96f61d6b6efbd34"}, &(0x7f0000000340)=0xf7) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0x4070aea0, &(0x7f0000000000)) [ 305.722264] binder: 18718:18722 got reply transaction with bad transaction stack, transaction 792 has target 18718:0 [ 305.734144] binder: 18718:18722 transaction failed 29201/-71, size 0-0 line 2774 03:35:49 executing program 5: r0 = socket$inet6(0xa, 0x401000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = fcntl$getown(r0, 0x9) sched_getattr(r2, &(0x7f0000000080), 0x30, 0x0) r3 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r3, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:49 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x3, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:35:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='/dev/ptmx\x00', 0xffffffffffffff9c}, 0x10) sendmsg$nfc_llcp(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x27, 0x1, 0x1, 0x7, 0x5, 0x4, "f91e5da7f7fd2d8d57750bb2193833619366020be7a2b24de24a876334b07fff5e3f1194fdef67ab1777abe2a0d87e6d59e553034a776427ea1f73c1111841", 0x28}, 0x60, &(0x7f0000001480)=[{&(0x7f0000000200)="d7b9bea36512130766275c821cfe85fcf4eef6075f034ccaaff1491d7353b51780691c7e1878b7b010c0aad27af961c8b1b8defe625c10", 0x37}, {&(0x7f00000002c0)="9a12deaec1fe0656e0374c5a80109e9679272b41bafbd8714efc10fa0b708d2851d57f5f6191433a63a15db5ed19870aa527fd6f4773464e5182bb2c52a8d0580374a2b48c0214536b55038c09afbf8cb12122700fc05e14906180721d527d288b3858ca1377cc2efa711be3a249493987dc99b592ec89e2c044914749961369affb8a36ff096ed660ba666510f568184f412fd54378217cf27566", 0x9b}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000240)="c4b4ba80ad", 0x5}, {&(0x7f0000000480)="5fec21daed988ba0188122c22019bf028b80e40fb8826ec79d2122dbc4cf59dcc84a7481cbee88740574bc2915d32d2d6cf93987af98f9103d4456db4fd2af57eef3a5a0cf709695b6b7b4a1e953703fd0aa7f32a7a4adbdcbe2f14a283dc9f16cc31fef22f994c936e67261962838e3b118a8f950ff914b9b4f81153cf063edc3e5c426b7b38403b07eec7a2cbcfce3ba7ca8f02af59b46be54615dd25ec5346f50a97f120db113239a4e3bb49cf9959e5f5f910217f156820840274ea2f47a4ecaa5e891c354c60e7414776e500a2945363e996015f5dd1d99d1c0da8bd728cdc62acfa5a584c765a7641eae3ce7d4e23ed6f45858b32dbdca12d3d3c1dfc3c0d129283b2a74fbda9176d5dcf1bde49f747d825a5fb5dd1e400d5b1aeb2c37ceb97b562b9c25b810d7a9fe747a624665aa0ab81212371e886e23b7b44cd3379b4359f4ee15a9ef795693970a251528796be51b07cf6faeb582a3d9d7253048d51861886a6c34e061e37748c432d5739c50b7485ab9d19ec0de7b823031ce084b6325aaf943df2da97871c56d1ed3a47a2b81d329e66730d0b0b5f2082205432e3ba54d3fa8b0e83a1914f40f4c1fa5b386f435baf5f0953b0dcc4f8977da502c7e6f731b350fc89a49f30a812e2e0286b6def359816d6d8b2c1eb474cb0d92e23f59d5315a089a4d324ebc3159e3a76830591e0902180f54f588861ee111957b95438b899f571fd3d23a05064f095388721692fdf19a529629d485250a5e83d43cc5986dc7ef275e089b39d1b075b7fdfd026bedd87ac2770788769ed61652cbd748371997ffaa2de8a0310a75f850f56e7bf85f3a30afb32d1014452e6675149a46d3b3936f8730d744c4f39728bbc9ba281a0bd833d20283bf3c171e0e9dbd11d18236e22ed7137d0891565d5e3b0284ebd543f2541d72ff53c0981c76c29720cc5043c07c1de785529e457962d6eead6e4df2ed657bcb2c633d31d83d8b69d375172e4ebe267cae6f6377c25a8c68d578c072ac80aa181b5e2ffae41bf2e84adc96a6dd851dec77a74b7171afc70f8a2f83cbcda0c7efae8f211bf68d53f811af6b2cba153ca9a2303d231877b0f5da2646a27bf6d92813f988a7fbca581d2e5aa75551b8a8c7aaa142d52f33a4ba13d626ad62a40dc030c875c5a9d9427e27cda810729fdf6adb2636b286abf891a1cba08fccc4bd743fbb74f2ea39b9221f97b623d4360b412a03ec05031306ea911da13369718ec83d325eaf1fcef775451053b6309144aaab8233b679647448c8c9e4946e01b6463634bcdd2994fa7e5c79d9ebede1cd7305975de6ad44ef2d7d3bd420b36e319f8a5e29c476c137ef5036d8b927cec65f4274286f064cdadc201bcfd100ed7f05f730a09446caa6f08d7f710352da2a2289e1cc4dce89961d691d067d0d0d55cea169b06e77b5dd03b4d86f2b7bb6dbe004a29e6d3b9c41d9ec4669611d50514a76f1bab4fd68a42f654e417bb14490231b1d7ab7d6fd500efc21b329c2bf44d5e65f150ee3c116e313e80780b6fdf13f0fedf9cea9504173d746d6aa2981f4d5f3624518c41c278dd42c5540e7ec978faf45c2c3fc3dc22b38b194a8bd27cc3515af28f66486e842af298a682390cf966476030f24d7ccf478b0fd2c30f2084c3222200acccc2f4b90ffe37b94192e9ee6683f32d67a8a69f954d8141c9c95fa8319dd8c4d23598a7351ef678f3a9e08e44e52c0ec328bf1176a41b1edf9d04a1e7f8c467da409ebaea352b2ffd800fc0d8887fdf381cd2adc62c364576f4c2a754a79e8c49021b6eaba61c6f92af4da203faf29d04da38a7101cb5d91f781084341d477abc605154e0475b81f44cc00b9d9697c0f8ad179a726c0eefc5c5cab824a185fd3c8e69aeb93c791aee0abbc7d31d187bdaad1a11297b3d5217deca0cf3008f05cfc485222427391bf652b970630855d90741102b41acfd036c014ab8937ecbd8e545bf085e006e66166ee77d65885582a0840fb18d6d7ed0d3151ff5fd93bace96755f4c220c170cb105ce47369d4a7b6c55dd116318faf40518e6e5a5a5a296b8f9ca900b077ac4a27ddc0fd6f1fe1a0530eeba8148558d91d03dc3a42fd718fe4a7d0016a21714232a47ccc523506aaf2ecd1b59238c1b3b51e3731c966b092ee0029a4b64db04625e252c1d330272db3be9ef1bfda14342aca7f394a0425eb073cf4c14abbf32b5857c47d6cb0dbc385a325301ed575a59f49c431596eaf47b57a5ef9192912c9267ee58d4e98e7e869e64fb8f110d59f04ae4d252d9f483c9bae857981c22f8bfd5ef0436d9e438c9dd635988ca390e111afa289c0e483c634a37750f6968115c6e42fc904eec3bbde6358123909c9a5a53bd5d7ec67681a41eb54e420568deaff7060ec59a8e4fd2ada2d3a98caeaf1c0e64f47b88299c3de5332fe6c72769bd7e13db31d1e57672dbad45b945935d3175cf370266683678896be15337da8e9a8b467533e5222495bd91f81ff9652634b7fd79eed5d02d2d93d7dd1980eccdae254049f71fc3c2a1c57f97d7cca694cdc1f656c9f5f7e4b863e32f0e0266a4fd332aecd8b0bf05776f9545f02fba9ecfca275430ab22e7fcc7152c983d1d44da59c564cb857613114e056c1bc7d81821650f33006375c77091fd00a1ab7090093dfcf8dd5577096df261f8745de54260d05a23218e4490a91b225390d44c3d5ae11697bf23df40e97ae4a9d11e492dd7172667ae263c28ba1794eebdacab8aa5162b806a8732513ebe2feeb98f5770bd79f4091f54905e1467cfd70ae298a501d57ec7fcd16120dd5e0074dcd3ca837b0836b759fdbacabc21e40b4627bbb9bc28f334bf57e918ca884af94ec208ad93aa713418eeb3b8a9f4f9b40436f6262c02ff240739513c730aa54af60484e1e6850af5ff99b68ccc6c658aaf52915912a9c1cd58c8000d15971e7467539ff8852af6df1cbfd9ad5ff47fbbf80733edc91796fc879105c206c9e27e40145858a6cdccd20b368e950313d840d0f6dc4a6646912c7612e641035a8118fe42eec34ca13181991fb4277d3d4e76a42380aac7dd1830ee2f3a7cfaeb7e3430e83ea621e7243c3eaa284a988f6a764c724aeb95c57ffb512c94c2b71f1323ffcaf69bc589f87e6a6f0afc0c1705c7faec7817569c7e3ad2f38d5a3b77b1589133f0b9c00bfe1ad6450dc47b14c31fde34f516e1be04c6f6462968b0e1a3079be2c2061d797661fb25e98d277fc69cfea790b894a9b946de973e86664cc8a330a2e6123490f76abc30c58f11a62a9c021d6e42600a603cc7d510296879b22ed042afd2ced1d0c423c0fe8896717861ac41e22a83cb902ab44ee47f6ae1fc9fa56d3d7895b68185d257be3365eea6fbff3cd2067de707c3f1cf09306a72bbb01d779baa0c6cad5b227df79ea4e6799f2b64f7dbf6679e0a4248253b9712733e965ec25074ff3158dc01073744000806715e3d190ff74bffb1b4cd4988adfb764e149a6c409508705ec6e40564a42fc4cf706affd9b272c5d3d17868fe6e1f7a15e02ee8e7b0bfafc9279436755dcb523ced714b9ae6a3bd3eb585f73f5fcea42e2762dc3e1825a2ed326ee38055d060a4476d672c3909e0f92d87183b576e801c56285e2298b2d89b6ef552ee3623c395d957e7e7b358f44c1d61a2dd222b076fdca0e94a96b1ba3a729fcc4b4c7508468bfc6c0bc206902c1cd9c910d16ac723b4ef85c4f50fb91967f78e6464a600c6ab83698b94ea88bf2394214e1b29acf0841eb89b88ecf76da85bc5acd00d6b02bed0ae43de3a0623327b0d25c35ae0e2bb6d7d06fd46aaca2bf5753016ce6b45da3c8b680bebb8e9e1d31e01267e581ad9a6d3d6dcd957264059c05d60eecc7d1a6ef0b2d1c17e933507f76fe5cd2e07ae33a7a10b441bd597f8f5a64cd4b3ada69ae6c60fe19dcf03a48f21f3920c4a6b83a322bf12e25766f02e76a9d60b167902f891ae0376df81f51602a379d02baae332e114b7645ff429833f411f696c947d8eeaa0d385cc28c920caaf8eb507868317f3d5ce3f3949e1dcc7a032094c64f392974f5db80063eb50bdfe5410eb189209d5722401c6059a0138e76e696ec46d742f8e4bde5057fe5ddb3d17d6a3bcbdc7fa730f96c984a2a5d778a73bca6ec67ec2fbc5a4dc7dc1b43f6f0eedadb281af8014926dc711cb018eae250732c4d5f14897280ae9ae9b50673ca673c88352d231e981ce10982538fca8227d84fcd014caee90cb262f80b44319110c4418b47b6d503ce3ec8ad3bcdde974e8930f8a2a1f3f1596540ac39008198b7b1260070fe60758cdaed63ae89f29fa135a7784939a7eaed49714a088cc7210142fa0e5539d9a2e623dc38759ca22684940869accf563ea8b45c86d27f14ecb35499b7d553faa409cbd605f3e8e95f1bba278d22dfe97830ce4cf31213c96446020af4121aaccf24aea6f477ba68e5f0868587fce32df631d3f4d1dd558a7678acf9712901cd256d74d45aadc93fef0adb00b94a57b43774bb42b378fd7f27017186b48010574b5f0276c3a1d00b46755699a1e8d6196a4ce7aa0eadbe2e96558bc125aaaf648404162e13d0fc50d3d7d1f5becde672c7240f1a4b96354265522f1a3b57badb7d5fe7371f52d94407423bb14b6f849976650265787f97038da6793f07c812755e9dfb2598ff3a6d684d1454efb6f0bd1c032af71f43c1f1d7214fcf15b5b6063c5d514e0d50df9bb4e9d3e9ea198255f18b1a735baf74f87407ff7742e3bc8498fc0134ebe0364d60268dbe482435511381f9051ef812210a23c27362c04ed0179ea73e4edb7cb02916ad933a7d2dfae33c1ccef854a2f205e7aa34b9b50e2ea43b31158c04d166800d41f3d160d30e06822f00666757c12b408344313988b3982a08595f80f300a0bbc8c0bfdef50632cb65412ccf80b54c5526e0ba3e40f95986ac414a223b34152d42d29967a3932269099614f083cdce3d129dd23d74166b33bd5a45a90dbfb621f81b8127877635ca26c3526249c932e11d63cb4471cec052d71e169169795400d3c79e1b5284f50c38e5db9e7205d4a5d5498112d589d9fd0cad4aae0e4419b0711dd162649f12efc04a5a528171ac792a5e30a1ef86242f54c7af298e0c47fd37f71ae4d7aeddfd3cae6dec62ce04114d8d2e4684abdeed6e5cb4a8eab2c340cb3bbc9b6738be610ff147dba39eb26c11bbe87357d0e10618554494f7c9769aef14e0880c4cd75998b8e80c19bd1ad4a6f9c9245a7717d25835f34e51b7dde5681066112200e46776fc6c73495746a2c5bcd3da8ac52be1715ab8e63866a6d3daaddc9d6c362a2c7a7d1ea0acb2adc126b3fb9a35c800963e6443dd3073d8a93ecce729f2ab8a267571d2422834c127a8ad9c927ed2d53841ea65226d8f3e897bbe4ca25ddc1aa7fde5cbd4bf00cfdfc2f8724e80d7880c3b4bb5d7ee45dca59a931667849caee81858437ff1749648caac748c3de1fff926df9d349789b3e72b76ceb43a65eb2695cd47462d1cb2c13d3fc02c59354cd923d4ada759ca1b19663c441f03a1ae08e58da07699c2d4120fe1f172a1a4960faf1d42267758878555fbd56bc9485cfb7a7405b88d6cd0751132f89d0ca449d88d84981e5979e4a892ee1eff766ef810d8772d06705bdba058cad0b4e23a9e8ba5c5d8e824736ef436ff3901d46e0148af6aaf5ad83e4d51079363eacc11725c420782f0072cbfeeb4f814cea83c4b2f97a4cc9b9f5bb35cee6f056fdd8ad69380d5f1c543c8f0", 0x1000}], 0x5, 0x0, 0x0, 0x80}, 0x40081) syz_open_pts(r0, 0x0) close(r0) prctl$void(0x3f) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hci(r2, 0xc00448fe, &(0x7f0000001540)="11b25b6015e1a24192a3503c38a5bd83ef436dd08b7df0d06c425d01513fa7958f644cd4fb0273ac25bd7942e6") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r3) [ 305.817281] binder_alloc: binder_alloc_mmap_handler: 18718 20001000-20004000 already mapped failed -16 [ 305.840260] binder: BINDER_SET_CONTEXT_MGR already set 03:35:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b00000000000000000000000000095000000000000001cb99a032dee269859066043d815b0870b4df2141216d504b057a7e14347abd8d25340a70a5bf89c2be33ef51ceaae3a8f3a2502259f23ec0c1a82b84b6fe94a4e5e8757"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 305.870260] binder: 18718:18729 ioctl 40046207 0 returned -16 03:35:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x541002, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x14, 0x1000000000011, 0x6, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) exit(0x7) [ 305.968141] gfs2: gfs2 mount does not exist [ 305.972246] binder: 18718:18752 got reply transaction with no transaction stack [ 305.980289] binder: 18718:18752 transaction failed 29201/-71, size 0-0 line 2759 03:35:49 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1ff, 0x8000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:35:49 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x84000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100001c0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128102902ccdbdf2503000000080002000a000000080001004e230000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r2 = inotify_init1(0x800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4, r3, 0x0, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x1362}) 03:35:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:49 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) setrlimit(0x7, &(0x7f0000000080)) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) sigaltstack(&(0x7f00004b5000/0x3000)=nil, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x3, 0x30, 0xffffffffffff7fff, 0xfffffffffffffff9}, &(0x7f0000000200)=0x18) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/217, 0xd9}], 0x1) 03:35:49 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/loop-control\x00', 0x402, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001900)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x8, 0x5, 0x24a, 0x0, 0x0, 0x0, 0x40000, 0x2, 0x8, 0x4, 0x9, 0x4c3d, 0x0, 0x6, 0x6f59, 0x7f, 0x8e, 0x1000, 0x3f, 0x9, 0x6, 0x1, 0x1, 0x6, 0x6, 0xe3a5, 0xbc, 0x100000001, 0x40, 0x9a0, 0x8, 0x3f, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x5, 0x0, 0x2, 0x4, @perf_bp, 0x800, 0x0, 0x4, 0x0, 0x8, 0x5, 0x6}, r2, 0x8, r1, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pread64(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x1149002, &(0x7f0000000000)=ANY=[]) sendmsg$rds(r1, &(0x7f0000001800)={&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001280)=""/93, 0x5d}, {&(0x7f0000001300)=""/60, 0x3c}], 0x2, &(0x7f0000001700)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001380)=""/245, 0xf5}, &(0x7f0000001480), 0x52}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x8001}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x28a6}, {&(0x7f00000014c0)=""/18, 0x12}, &(0x7f0000001640)=[{&(0x7f0000001500)=""/143, 0x8f}, {&(0x7f00000015c0)=""/75, 0x4b}], 0x2, 0x20, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffeffffffff, 0x3}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x242c000000}, &(0x7f0000001680)=0x5, &(0x7f00000016c0)=0x83, 0x6, 0x1, 0x5, 0x3, 0x10, 0xd8}}], 0x100, 0x20000000}, 0x0) [ 306.117399] binder_alloc: 18718: binder_alloc_buf, no vma [ 306.123252] binder: 18718:18751 transaction failed 29189/-3, size 0-0 line 2967 [ 306.157530] binder: release 18718:18722 transaction 792 out, still active [ 306.165712] binder: undelivered TRANSACTION_COMPLETE [ 306.171574] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.180324] binder: send failed reply for transaction 792, target dead 03:35:49 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8b07000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:35:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)={0x1, 0x0, 0x100000001, 0x0, 0x0, 0x3f45, 0x0, 0xffffffffffffffff}) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 306.256511] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.262289] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.307745] gfs2: gfs2 mount does not exist 03:35:49 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/197, 0xc5, 0x2000, &(0x7f0000000140)={0x1a, 0x33f, 0x0, 0x4, 0x10000, 0x80, @local}, 0x10) 03:35:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2a2e2e6530f0", 0x0, 0x0) link(&(0x7f00000000c0)="2e2f66696c65302f2a2e2e6530f000", &(0x7f0000000100)="2e2f66696c65302f2a2e2e6530f000") [ 306.399911] binder: 18786:18790 got reply transaction with bad transaction stack, transaction 797 has target 18786:0 [ 306.410946] binder: 18786:18790 transaction failed 29201/-71, size 0-0 line 2774 03:35:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r2 = fcntl$getown(r1, 0x9) sched_getattr(r2, &(0x7f0000000080), 0x30, 0x0) r3 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r3, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x100, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:50 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) [ 306.554433] gfs2: gfs2 mount does not exist [ 306.580149] binder: BINDER_SET_CONTEXT_MGR already set [ 306.602330] binder: 18786:18809 ioctl 40046207 0 returned -16 03:35:50 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="0f232664660f001626814200000000000f32c4c1fd6a31c4c2d909b600000000d18202000000653636643ef40f1857f7670f01df", 0x34}], 0x1, 0x22, &(0x7f0000000240)=[@flags, @vmwrite={0x8, 0x0, 0x100, 0x0, 0x227, 0x0, 0x8, 0x0, 0x7ff}], 0x2) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x2e, "66922741d31e1c921600bf3d9be1dab68db054be3c99cf14dbbf4c41313f59af973bca314563c1609184cbccce06"}, &(0x7f0000000100)=0x36) 03:35:50 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0xffffffffffffff4f}, {0xa, 0x4e21, 0x0, @loopback, 0x2}, r1, 0x9}}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) 03:35:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 306.635222] binder_alloc: 18786: binder_alloc_buf, no vma [ 306.641080] binder: 18786:18790 transaction failed 29189/-3, size 0-0 line 2967 [ 306.666637] binder: 18786:18809 got reply transaction with no transaction stack [ 306.674249] binder: 18786:18809 transaction failed 29201/-71, size 0-0 line 2759 [ 306.705940] binder: release 18786:18790 transaction 797 out, still active [ 306.713088] binder: undelivered TRANSACTION_COMPLETE [ 306.718292] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.725711] binder: send failed reply for transaction 797, target dead [ 306.735296] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.741060] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.835596] gfs2: gfs2 mount does not exist 03:35:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x400200, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0xbfcc, 0x7, 0xff, 0xb6}) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r3, 0xe5, "812bc2", "003d29abb3de255a343a3e9817c0cb35099ef3bc04976e91e7b0277eaa379763f9d00caba7ef86366855ca3671d13021d7a1e48806a0650e7824199a352cf97f4912dd875f07969387b81af480c5fde236a44f2c1d4340576c59987e94e39fa02a981e9d3eb4b7806c7539d33cb5483aa48e3697f37ab1c30e15e140983b76c9017eea4a59b866dd073f12c6f5cdf7b8ada5bcaa7df5b441a3163d46850f239ed84a8e9be7b40e6f15aa5a6608f45791a02e242edd3920672713cd356c315b639bb9dd121d0d0e8cd040dc049ff735c6366fb938c7e0a8028b5e06ae06faaa5aea87e8c7de4c44c2cad7d602a597ca23c7021eca91fb0db2335e164c20155942"}}, 0x110) 03:35:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2) r2 = memfd_create(&(0x7f0000000340)='$vboxnet0vmnet1bdev)\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="87000000a2109e0147bb49c759e141bc1b1fb156f7de3d812103a60a750cb6275b843e71fe3e4af999e96097960f90bc6394185eb7f92195ff053c2f0000000039966acd66159a15ddaaef144075a1c112b75a6b2ed64ceb8b0e57d99eda879206d84757cd913bf9e2bd2a0500e4b7773e87c174423e7f52256dd284d46adcdc1d77ed3d4e78bc9273df6d"], &(0x7f00000002c0)=0x8f) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x7ff, 0x0, 0x80000001, 0x80000000800000, r3}, 0x10) r4 = fcntl$getown(r1, 0x9) sched_getattr(r4, &(0x7f0000000080), 0x30, 0x0) r5 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) getsockopt$inet_dccp_buf(r0, 0x21, 0xcc, &(0x7f0000000140)=""/62, &(0x7f0000000180)=0x3e) mq_getsetattr(r5, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:50 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x6d, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200081, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 03:35:50 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 307.054652] binder: 18838:18841 got reply transaction with bad transaction stack, transaction 802 has target 18838:0 [ 307.065641] binder: 18838:18841 transaction failed 29201/-71, size 0-0 line 2774 [ 307.078753] binder: BINDER_SET_CONTEXT_MGR already set [ 307.084970] binder: 18838:18841 ioctl 40046207 0 returned -16 [ 307.092085] binder: 18838:18842 got reply transaction with no transaction stack [ 307.099767] binder: 18838:18842 transaction failed 29201/-71, size 0-0 line 2759 [ 307.106511] binder_alloc: 18838: binder_alloc_buf, no vma [ 307.113294] binder: 18838:18841 transaction failed 29189/-3, size 0-0 line 2967 [ 307.127767] binder: release 18838:18841 transaction 802 out, still active [ 307.134938] binder: undelivered TRANSACTION_COMPLETE [ 307.140100] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.146248] binder: send failed reply for transaction 802, target dead [ 307.172289] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.177900] binder: undelivered TRANSACTION_ERROR: 29201 03:35:50 executing program 7: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x364, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/145, &(0x7f0000000100)=0x91) setgroups(0x36a, &(0x7f0000000100)) socketpair$inet(0x2, 0x2, 0x6, &(0x7f0000000000)) 03:35:50 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:35:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1d, 0xfffffffffffffffa, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000140), 0x1}, 0x20) 03:35:50 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)=0x1000) mknod$loop(&(0x7f00000029c0)='./file0\x00', 0x6009, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000000000002004e20ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d17d4a50ee9b0d0000000000000000000500000002004e24ac1d14bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2200000fff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414aa0000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x310) 03:35:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2202, 0x0) getdents(r3, &(0x7f00000001c0)=""/170, 0xaa) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='nsfs\x00', 0x88, &(0x7f0000000300)="a8ce8a90119554932c2c9a6bef0316dbea2731276aac65356b88e218896433f48e214476df99ab8ba380747577d3150fa6b33fc89b49f1102383bfa6edf208d8508437d7c116a9f3e08093d2c42a61d3bd2244ef0bf7c23e85e5ab0f8c42ec8f0c6191e11c6a776cef5c94a7fc931c36741bf2f5de3cd6c1c2f073a5624b0afc944249ad91c75568efe67ed7871479288597ac3f1b48b68b22d61eafa9162983d900c4abf3d8c9ee04f0912cfa4cabfd4603b03f95f77c23e448c359e35148c8d3c467f14be54fb665783086") 03:35:50 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:35:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup2(r0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x34, 0x71) fcntl$notify(r0, 0x402, 0x12) 03:35:51 executing program 2: shmget(0x3, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x20520, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:35:51 executing program 3: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3fa, &(0x7f0000124000/0x3000)=nil, 0x2) mincore(&(0x7f0000124000/0x2000)=nil, 0x6e1d618312435888, &(0x7f0000d6e000)=""/34) [ 307.461621] binder: 18867:18874 got reply transaction with bad transaction stack, transaction 807 has target 18867:0 [ 307.472607] binder: 18867:18874 transaction failed 29201/-71, size 0-0 line 2774 [ 307.492195] gfs2: gfs2 mount does not exist 03:35:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/252, 0xfc, 0xfffffffffffffff7, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x440, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000200)={0x20, 0x0, 0x1, {0x6, 0x4, 0x5f39, 0xfffffffffffff801}}, 0x20) fsync(r1) r2 = socket$inet6(0xa, 0x80803, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) sendto$inet6(r2, &(0x7f0000000c00)="616d17d99c55", 0x6, 0x0, 0x0, 0x0) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 307.514247] binder: BINDER_SET_CONTEXT_MGR already set [ 307.520676] binder: 18867:18883 ioctl 40046207 0 returned -16 03:35:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 307.564976] binder_alloc: 18867: binder_alloc_buf, no vma [ 307.570844] binder: 18867:18874 transaction failed 29189/-3, size 0-0 line 2967 [ 307.577572] print_req_error: I/O error, dev loop13, sector 0 [ 307.585697] XFS (loop13): SB validate failed with error -5. [ 307.600268] binder: 18867:18883 got reply transaction with no transaction stack [ 307.607926] binder: 18867:18883 transaction failed 29201/-71, size 0-0 line 2759 [ 307.624384] binder: release 18867:18874 transaction 807 out, still active [ 307.631487] binder: undelivered TRANSACTION_COMPLETE [ 307.636687] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.719074] print_req_error: I/O error, dev loop13, sector 0 [ 307.720310] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.730643] binder: undelivered TRANSACTION_ERROR: 29201 03:35:51 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:35:51 executing program 7: syz_read_part_table(0x400, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)='RDSK', 0x4, 0x10001}]) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000000c0)=""/182, 0xb6) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000002c0)=0xfffffffffffffe22) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000240)=0x7) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x80000001, 0x4) 03:35:51 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) modify_ldt$write(0x1, &(0x7f0000000000)={0x100, 0x20001000, 0x1000, 0x6, 0x6, 0x7, 0x8, 0xffffffff, 0x6, 0x1}, 0x10) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') 03:35:51 executing program 3: prctl$getreaper(0x2f, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)=0x2002) [ 307.761573] XFS (loop13): SB validate failed with error -5. [ 307.762264] gfs2: gfs2 mount does not exist [ 307.798738] binder: send failed reply for transaction 807, target dead 03:35:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x5) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfd06) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007640)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000007680)={@mcast1, 0x61, r3}) recvmmsg(r2, &(0x7f00000040c0)=[{{&(0x7f00000012c0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/195, 0xfcf6}], 0x1, &(0x7f00000018c0)=""/185, 0xb9}}], 0x2, 0x0, &(0x7f0000004280)={0x77359400}) 03:35:51 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 307.909680] binder: 18932:18939 got reply transaction with bad transaction stack, transaction 812 has target 18932:0 [ 307.920684] binder: 18932:18939 transaction failed 29201/-71, size 0-0 line 2774 [ 307.933545] binder: BINDER_SET_CONTEXT_MGR already set [ 308.030579] FAULT_INJECTION: forcing a failure. [ 308.030579] name failslab, interval 1, probability 0, space 0, times 0 [ 308.042070] CPU: 0 PID: 18959 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 308.049452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.058819] Call Trace: [ 308.061431] dump_stack+0x1c9/0x2b4 [ 308.065088] ? dump_stack_print_info.cold.2+0x52/0x52 [ 308.070311] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 308.075197] should_fail.cold.4+0xa/0x1a 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1f, 0x200000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x5000, 0xf, 0xf0ea, 0x2, 0x2, 0x9, 0x7, 0xebb3, 0x40, 0x1, 0x7ff}, {0x3004, 0xd000, 0x3, 0x2a, 0x3, 0xff, 0x2, 0x9, 0xf2a9, 0x7, 0x8, 0x1f}, {0xf000, 0xd002, 0xe, 0x6, 0x8, 0x9, 0x100000000, 0x2, 0x4, 0x7, 0x5, 0x10001}, {0x0, 0x2, 0xe, 0x400, 0x5, 0x7ff, 0x8, 0x7fffffff, 0x26, 0x8, 0x8001}, {0x11000, 0x14004, 0x0, 0x5, 0x7fff, 0x4, 0x0, 0xa000000, 0xc6b, 0x5, 0x3f, 0x4}, {0x0, 0x11d000, 0xd, 0xb34, 0x0, 0x94, 0xffffffff, 0x2, 0x86, 0x3da5d62c, 0x5, 0x765}, {0x2004, 0x5000, 0x9, 0x0, 0x7, 0xb706, 0xeec, 0xc0f, 0x1, 0x0, 0x0, 0x7f}, {0x0, 0x7002, 0x0, 0x4, 0x1342, 0x438a, 0x28000, 0x85, 0x7, 0x7, 0x0, 0xc000000000000}, {0x6000}, {0x0, 0x2000}, 0x10, 0x0, 0x1000, 0x400000, 0x7, 0x4000, 0x6000, [0x3f, 0x9, 0x7f, 0x7fffffff]}) r3 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mq_getsetattr(r3, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 308.079294] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 308.084435] ? lock_downgrade+0x8f0/0x8f0 [ 308.088627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 308.094195] ? proc_fail_nth_write+0x9e/0x210 [ 308.098722] ? find_held_lock+0x36/0x1c0 [ 308.102836] ? check_same_owner+0x340/0x340 [ 308.107193] ? __lock_is_held+0xb5/0x140 [ 308.111385] ? rcu_note_context_switch+0x730/0x730 [ 308.116353] __should_failslab+0x124/0x180 [ 308.119394] binder: 18932:18940 ioctl 40046207 0 returned -16 [ 308.120624] should_failslab+0x9/0x14 03:35:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [0xc0010058, 0x1]}) 03:35:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="600001dc569131e842851cbda0c4df0dff9230"], &(0x7f0000000340)=0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x0, 0xe000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 308.120647] __kmalloc_track_caller+0x2c4/0x760 [ 308.135039] ? strncpy_from_user+0x510/0x510 [ 308.139502] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 308.145069] ? strndup_user+0x77/0xd0 [ 308.148898] memdup_user+0x2c/0xa0 [ 308.149629] binder_alloc: 18932: binder_alloc_buf, no vma [ 308.152458] strndup_user+0x77/0xd0 [ 308.152482] ksys_mount+0x3c/0x140 [ 308.152505] __x64_sys_mount+0xbe/0x150 [ 308.152526] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 308.152549] do_syscall_64+0x1b9/0x820 03:35:51 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x28840) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) shmctl$SHM_UNLOCK(0x0, 0xc) [ 308.152567] ? finish_task_switch+0x1d3/0x870 [ 308.158185] binder: 18932:18939 transaction failed 29189/-3, size 0-0 line 2967 [ 308.161726] ? syscall_return_slowpath+0x5e0/0x5e0 [ 308.161743] ? syscall_return_slowpath+0x31d/0x5e0 [ 308.161764] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 308.161783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.175881] binder: 18932:18965 got reply transaction with no transaction stack [ 308.178196] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.178209] RIP: 0033:0x455ab9 [ 308.178214] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca [ 308.182874] binder: 18932:18965 transaction failed 29201/-71, size 0-0 line 2759 [ 308.190259] 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f [ 308.200251] binder: release 18932:18939 transaction 812 out, still active [ 308.205526] 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.205607] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.205623] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 03:35:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x311) getdents(r1, &(0x7f0000000140)=""/2, 0x450) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 03:35:51 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:51 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x2125, 0x492400) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000300)) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x4, 0x40181) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0]) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x14) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20002, 0x0) accept(r3, &(0x7f00000000c0)=@nfc, &(0x7f00000001c0)=0x80) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x6, 0x0, 0x81, 0x9, 0x6ae, 0x1, 0x1000, 0x100, 0x100000001, 0x42f0, 0x0, 0x1}) close(r3) close(r0) [ 308.205635] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 308.210520] binder: undelivered TRANSACTION_COMPLETE [ 308.217894] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 308.217903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 308.217911] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000000 [ 308.313596] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.319451] binder: send failed reply for transaction 812, target dead 03:35:51 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 308.329495] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.335208] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.481771] FAULT_INJECTION: forcing a failure. [ 308.481771] name failslab, interval 1, probability 0, space 0, times 0 [ 308.493273] CPU: 0 PID: 18990 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 308.500654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.510020] Call Trace: [ 308.512631] dump_stack+0x1c9/0x2b4 [ 308.516369] ? dump_stack_print_info.cold.2+0x52/0x52 [ 308.522275] ? __save_stack_trace+0x8d/0xf0 [ 308.526645] should_fail.cold.4+0xa/0x1a [ 308.530758] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 308.535909] ? save_stack+0x43/0xd0 [ 308.539642] ? kasan_kmalloc+0xc4/0xe0 [ 308.543583] ? __kmalloc_track_caller+0x14a/0x760 [ 308.548444] ? memdup_user+0x2c/0xa0 [ 308.552165] ? strndup_user+0x77/0xd0 [ 308.555970] ? graph_lock+0x170/0x170 [ 308.559792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.565165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 308.570696] ? proc_fail_nth_write+0x9e/0x210 [ 308.575187] ? find_held_lock+0x36/0x1c0 [ 308.579258] ? check_same_owner+0x340/0x340 [ 308.583569] ? lock_release+0xa30/0xa30 [ 308.587533] ? rcu_note_context_switch+0x730/0x730 [ 308.592470] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 308.597481] __should_failslab+0x124/0x180 [ 308.601712] should_failslab+0x9/0x14 [ 308.605503] __kmalloc_track_caller+0x2c4/0x760 [ 308.610162] ? strncpy_from_user+0x510/0x510 [ 308.614560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 308.621418] ? strndup_user+0x77/0xd0 [ 308.625213] memdup_user+0x2c/0xa0 [ 308.628768] strndup_user+0x77/0xd0 [ 308.632389] ksys_mount+0x73/0x140 [ 308.635921] __x64_sys_mount+0xbe/0x150 [ 308.639904] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 308.644931] do_syscall_64+0x1b9/0x820 [ 308.648809] ? finish_task_switch+0x1d3/0x870 [ 308.653298] ? syscall_return_slowpath+0x5e0/0x5e0 [ 308.658235] ? syscall_return_slowpath+0x31d/0x5e0 [ 308.663157] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 308.668516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.673352] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.678540] RIP: 0033:0x455ab9 [ 308.681716] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.701039] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.708740] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 308.716000] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 308.723261] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000200)={0x6, 0x2, 0xffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000180)={0x800000000000000, 0xfffffffffffffeff, 0x4, 0x4}) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:52 executing program 2: shmget(0x0, 0x4000, 0x42, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0xfdd001f7c8063df1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0xa6d9, 0x1, 0x0, 0x1, 0x19ff, 0x4, 0x4, 0x80000000}, &(0x7f0000000040)={0x1c9, 0x9, 0x5, 0x200, 0xffffffff, 0x1000, 0x0, 0x5}, &(0x7f0000000080)={0x4, 0x101, 0x40, 0x4, 0x400, 0x5, 0x5, 0x2}, &(0x7f0000000100)={r0, r1/1000+30000}) r2 = shmget$private(0x0, 0x1000, 0x850, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 308.730528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 308.737817] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000001 [ 308.791944] binder: 18992:18996 got reply transaction with bad transaction stack, transaction 817 has target 18992:0 [ 308.803024] binder: 18992:18996 transaction failed 29201/-71, size 0-0 line 2774 03:35:52 executing program 6: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000001fe8)) socket(0x10, 0x2, 0xf) r0 = syz_open_procfs(0x0, &(0x7f0000000440)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a89d78dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e07000000000000007d656f") sendfile(r0, r0, &(0x7f0000000000), 0x80000002) 03:35:52 executing program 4 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 308.899133] binder: BINDER_SET_CONTEXT_MGR already set [ 308.905116] QAT: Invalid ioctl [ 308.910935] *** Guest State *** [ 308.914474] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 308.923392] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 308.932307] CR3 = 0x0000000000000000 [ 308.936137] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 308.942181] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 308.948291] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 308.948966] binder: 18992:19002 ioctl 40046207 0 returned -16 [ 308.955017] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 308.955093] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 308.955111] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 308.955127] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 308.955146] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 308.955162] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 308.955173] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 308.955190] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 308.955202] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 308.955220] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 308.955232] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 308.955244] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 308.955256] Interruptibility = 00000000 ActivityState = 00000000 [ 309.050345] FAULT_INJECTION: forcing a failure. [ 309.050345] name failslab, interval 1, probability 0, space 0, times 0 [ 309.055415] *** Host State *** [ 309.055430] RIP = 0xffffffff811f3d34 RSP = 0xffff88019bb67350 [ 309.055455] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 309.061705] CPU: 0 PID: 19011 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 309.061717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.061730] Call Trace: [ 309.072979] FSBase=00007f0dd2cbd700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 309.076100] dump_stack+0x1c9/0x2b4 [ 309.076127] ? dump_stack_print_info.cold.2+0x52/0x52 [ 309.082097] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 309.088462] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 309.088492] should_fail.cold.4+0xa/0x1a [ 309.095939] CR0=0000000080050033 CR3=0000000198032000 CR4=00000000001426e0 [ 309.105258] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 309.105276] ? kasan_check_read+0x11/0x20 [ 309.105298] ? trace_hardirqs_on+0x10/0x10 [ 309.107882] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 309.115638] ? find_held_lock+0x36/0x1c0 [ 309.115673] ? check_same_owner+0x340/0x340 [ 309.119295] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 309.124446] ? rcu_note_context_switch+0x730/0x730 [ 309.124464] __should_failslab+0x124/0x180 [ 309.124483] should_failslab+0x9/0x14 [ 309.130358] *** Control State *** [ 309.135168] kmem_cache_alloc+0x2af/0x760 [ 309.135188] ? find_held_lock+0x36/0x1c0 [ 309.135208] getname_flags+0xd0/0x5a0 [ 309.139274] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 309.146360] user_path_at_empty+0x2d/0x50 [ 309.146377] do_mount+0x17a/0x30e0 [ 309.146396] ? lock_downgrade+0x8f0/0x8f0 [ 309.151493] EntryControls=0000d1ff ExitControls=0023efff [ 309.155617] ? copy_mount_string+0x40/0x40 [ 309.155633] ? __sanitizer_cov_trace_cmp8+0x18/0x20 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x8000000000080, 0x0) r2 = fcntl$getown(r0, 0x9) sched_getattr(r2, &(0x7f0000000080), 0x30, 0x0) r3 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) r5 = getegid() write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78, 0x0, 0x1, {0x4, 0x8, 0x0, {0x1, 0x5, 0x401, 0x200, 0x2e0ac328, 0x245, 0x63f, 0xd7f, 0x40, 0x3f, 0x1, r4, r5, 0x81, 0x71}}}, 0x78) mq_getsetattr(r3, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340), &(0x7f0000000380)=0x4) 03:35:52 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0x1) [ 309.155651] ? __check_object_size+0x9d/0x5f2 [ 309.159884] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 309.166528] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.166547] ? _copy_from_user+0xdf/0x150 [ 309.170614] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 309.181152] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.181168] ? copy_mount_options+0x285/0x380 [ 309.181185] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.187240] VMExit: intr_info=80000306 errcode=00000000 ilen=00000002 [ 309.192133] ksys_mount+0x12d/0x140 [ 309.192151] __x64_sys_mount+0xbe/0x150 [ 309.192170] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 309.196406] reason=80000021 qualification=0000000000000000 [ 309.200177] do_syscall_64+0x1b9/0x820 [ 309.200191] ? finish_task_switch+0x1d3/0x870 [ 309.200210] ? syscall_return_slowpath+0x5e0/0x5e0 [ 309.203671] IDTVectoring: info=00000000 errcode=00000000 [ 309.207779] ? syscall_return_slowpath+0x31d/0x5e0 [ 309.207800] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 309.207819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.211893] TSC Offset = 0xffffff577f961fe0 [ 309.215681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.215694] RIP: 0033:0x455ab9 [ 309.215702] Code: [ 309.222393] TPR Threshold = 0x00 [ 309.226490] 1d ba fb ff c3 66 2e 0f [ 309.230083] EPT pointer = 0x000000019a74801e [ 309.234180] 1f 84 00 00 00 00 00 66 90 [ 309.247244] binder_alloc: 18992: binder_alloc_buf, no vma [ 309.248887] 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 03:35:52 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x100) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0x6, 0x4, 0x5}) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x6000, 0x3, &(0x7f0000ff8000/0x6000)=nil) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x40000) 03:35:52 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00') r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)={0x10000000}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fallocate(r2, 0x21, 0x800, 0x5) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000140), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0xffffffff}, 'port0\x00', 0xe1, 0x100000, 0x2, 0x1, 0xfffffffffffffffc, 0x7, 0xc, 0x0, 0x2, 0x3}) 03:35:52 executing program 4 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 309.253566] binder: 18992:18996 transaction failed 29189/-3, size 0-0 line 2967 [ 309.260410] 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 [ 309.277675] binder: 18992:19014 got reply transaction with no transaction stack [ 309.282389] 2e 0f 1f 84 00 00 00 00 [ 309.282429] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.282445] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 309.282455] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 309.282463] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 309.282472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 309.282480] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000002 [ 309.383821] binder: send failed reply for transaction 817 to 18992:18996 [ 309.389362] binder: 18992:19014 transaction failed 29201/-71, size 0-0 line 2759 [ 309.431945] kvm [18978]: vcpu0, guest rIP: 0x0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 309.444801] binder: undelivered TRANSACTION_COMPLETE [ 309.475444] QAT: Invalid ioctl 03:35:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="400fc5e3d6b9800000c00f3235000100000f30670f35b8010000000f01d9c74424001f010000c744240200000000ff1c240f20d835200000000f22d86466f365f2460f21e40f20c035000000800f22c0b9800000c00f3235000400000f300f01c8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munlock(&(0x7f0000fe9000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="460f18820e000000c4617829420db97b0900000f32f3400f2c2666baf80cb835f49183ef66bafc0cb0f3eec481e9f3cd64410f35660f38823d21a60000660f3808af2600000048b8926d0000000000000f23d00f21f835300000010f23f8", 0x5e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 309.481566] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.481575] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.481786] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.503170] kvm [18978]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 309.503783] binder: undelivered TRANSACTION_ERROR: 29201 03:35:53 executing program 1: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3b7a, 0x80400) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)) 03:35:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000010000/0x3000)=nil) unshare(0x2000400) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x1, 0xffff}) 03:35:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80040, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x0, 0x3ff, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000280)={0xb4ad, 0x0, 0xb1, 0xc3d, 0xffff, 0x4}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101040, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)="0000e6c42b482ff293b000") r4 = fcntl$getown(r0, 0x9) sched_getattr(r4, &(0x7f0000000080), 0x30, 0x0) r5 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mq_getsetattr(r5, &(0x7f0000000040), &(0x7f0000356000)) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000200)=0x92a, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 309.686501] binder: 19033:19041 got reply transaction with bad transaction stack, transaction 822 has target 19033:0 [ 309.697480] binder: 19033:19041 transaction failed 29201/-71, size 0-0 line 2774 [ 309.715125] FAULT_INJECTION: forcing a failure. [ 309.715125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.726994] CPU: 1 PID: 19044 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 309.734382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.743778] Call Trace: [ 309.746400] dump_stack+0x1c9/0x2b4 [ 309.750062] ? dump_stack_print_info.cold.2+0x52/0x52 [ 309.755287] ? trace_hardirqs_on+0x10/0x10 [ 309.759590] should_fail.cold.4+0xa/0x1a [ 309.763687] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 309.768828] ? trace_hardirqs_on+0x10/0x10 [ 309.769154] binder: BINDER_SET_CONTEXT_MGR already set [ 309.773081] ? graph_lock+0x170/0x170 [ 309.773104] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 309.773124] ? print_usage_bug+0xc0/0xc0 [ 309.773161] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 309.787974] binder: 19033:19050 ioctl 40046207 0 returned -16 [ 309.791224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.791247] ? should_fail+0x223/0xbed [ 309.791267] ? lock_downgrade+0x8f0/0x8f0 [ 309.791287] __alloc_pages_nodemask+0x36e/0xdb0 [ 309.791308] ? kasan_check_read+0x11/0x20 [ 309.791329] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 309.791349] ? trace_hardirqs_on+0x10/0x10 [ 309.791368] ? find_held_lock+0x36/0x1c0 [ 309.828659] binder_alloc: 19033: binder_alloc_buf, no vma [ 309.829473] ? check_same_owner+0x340/0x340 [ 309.829497] cache_grow_begin+0x91/0x710 [ 309.829522] kmem_cache_alloc+0x689/0x760 [ 309.829549] getname_flags+0xd0/0x5a0 [ 309.829570] user_path_at_empty+0x2d/0x50 [ 309.829590] do_mount+0x17a/0x30e0 [ 309.829609] ? lock_downgrade+0x8f0/0x8f0 [ 309.829630] ? copy_mount_string+0x40/0x40 [ 309.829647] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 309.829666] ? __check_object_size+0x9d/0x5f2 [ 309.833983] binder: 19033:19041 transaction failed 29189/-3, size 0-0 line 2967 [ 309.837968] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.837984] ? _copy_from_user+0xdf/0x150 [ 309.838005] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.908605] ? copy_mount_options+0x285/0x380 [ 309.913093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.918627] ksys_mount+0x12d/0x140 [ 309.922248] __x64_sys_mount+0xbe/0x150 [ 309.926216] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 309.931227] do_syscall_64+0x1b9/0x820 [ 309.935104] ? finish_task_switch+0x1d3/0x870 [ 309.939599] ? syscall_return_slowpath+0x5e0/0x5e0 [ 309.944541] ? syscall_return_slowpath+0x31d/0x5e0 [ 309.949470] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 309.954848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.959693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.965078] RIP: 0033:0x455ab9 [ 309.968343] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:35:53 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x2000, 0x120, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 309.987716] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.995630] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 310.003163] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 310.010435] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 310.018223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 310.025496] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000003 [ 310.042229] QAT: Invalid ioctl [ 310.076684] QAT: Invalid ioctl 03:35:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000800)=0x0) mq_notify(r0, &(0x7f0000000840)={0x0, 0x7, 0x1, @tid=r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/53, &(0x7f0000000040)=0x35) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) sendmsg$rds(r2, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/44, 0x2c}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="30000000000000001401000003000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="b200000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="2000000000000000580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='A_\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="26f9cb4d00000000"], @ANYBLOB="0000000000000000ff030000000000000100000000000000faffffffffffffff28000000000000008000000000000000580000000000000014010000060000000000000009000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="f8ffffffffffffff"], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="2cd4000000000000"], @ANYBLOB="0000000000000000000000000000000006000000000000005e08000000000000080000000000000000040000000000001800000000000000140100000c000000ff03000000000000180000000000000014010000020000000700000001000000580000000000000014010000080000000200000008000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="0500000000000000"], @ANYBLOB="00000080000000000700000000000000feffffffffffffff010000000000000021000000000000000200000000000000580000000000000014010000ff000000000000000080ffff5e20d34d3b003410c648c374eed25d496f2264104e3583", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="7c4a00000000000005000000000000000002000000000000af0b0000000000001000000000000000d800000000000000"], 0x1c0, 0x8000}, 0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x8922, &(0x7f0000000180)) [ 310.111712] binder: 19033:19050 got reply transaction with no transaction stack [ 310.120176] binder: 19033:19050 transaction failed 29201/-71, size 0-0 line 2759 [ 310.129570] gfs2: gfs2 mount does not exist 03:35:53 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) r1 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r1, &(0x7f0000000040), &(0x7f0000356000)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x28, &(0x7f0000000140)}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:53 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = fcntl$getown(r0, 0x9) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r2 = shmget$private(0x0, 0x3000, 0x1040, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000100)={0x40, 0x2, 0x40, 0x1, 0xffffffff}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic}) 03:35:53 executing program 4 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 310.196672] binder: send failed reply for transaction 822 to 19033:19041 [ 310.230955] binder: undelivered TRANSACTION_ERROR: 29189 [ 310.236662] binder: undelivered TRANSACTION_ERROR: 29201 03:35:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8907, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 310.291824] binder: undelivered TRANSACTION_COMPLETE [ 310.297225] binder: undelivered TRANSACTION_ERROR: 29201 [ 310.302795] binder: undelivered TRANSACTION_ERROR: 29189 03:35:53 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/100, 0xffffffffffffffe1}) sendmsg$alg(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="c925a04244c558a3eb31f912e25e28a7ac7e3de08bb6ab4e390d13f2459ef24689236b27299c795c8503edbc06f9bee545b0b5bdeed834212e1a528d60a5391b25363bd4e05d83054269b3c2746a8f19d88ec6c153d2f312d2394fe85b9c5a9fe49157695643b885f509d068f7c0fe284a2cffed998cb38226fca319eb11aef9c6faaf3533f7c3d8e31edbd3bad1be5898ec8f48fca06bc312f28e058b2b780a323d6b724096dd9a38ecae4e3b89fa80ff20b342eb0e1f546bf697ac63b2f5e334768648b73b09c85df8d5b2d530876a624740b27f19839437ee76c58686167c63a5f9a71bf0e634d917ade3b8fee65785e40a4e0fd1fb98", 0xf8}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="7aff44af9dd6288ca9bac348f59e89f70ac59d2e251754875e63", 0x1a}, {&(0x7f0000002280)="cb2d1df7c055557171539d3a008f08d5cbc8abaca0b24967f566d10952e2575fc9581915be61df436b3099b51ca88fb0919bfbfb6f0e541970036e046a0342f45cf4bfcc3b0424d71c2a1f24b03c6946e1a8e69080f20560a6c338b8ace509a4445144487eb8f55a2aeef57b41948e9344bf3fb79537f84abd96c06a9d77fdab9e574d177ffb01bd5d4f9995cd4d795a9c914e5a18e9ec7adba4ba6729a5a765f9096b5dfea8465696fe051edd021d5e7e3bebea100bda34e1472b31e3097fe1", 0xc0}, {&(0x7f0000002340)="35e03eb0a581ca2ee780d69802a9a4b2a8cfc523d5934ffea533a50da2a6a1f744837f064f44c7579f29f3e6ce934c", 0x2f}, {&(0x7f0000002380)="5a27de7810159a5c4ebd860e70280e23c95b4ff3641156d4ba51f5d01b40953172b39e8b7fe022ddb0b7e7b7af52a0c91fabcff251d244bf13a220b4bbf5dbc2ced8b9b51cdd9e81b27996e61db5ba6f79210fe367da1943f2aac39832e170833c7ccffa86e7b5a7ea4c70fc6541beef5aad4b680cad9d1ceb48addc954278ef0342d4f3a8e8d813eabffe967addfc9cb7fb03232a1d664c7bdd6026de93b4d9c0c5a79816ff119a775bc089e917a024842e6dbf1180babd7197ea0ea1b40c08d76b3cef23d2fd26f008a12e10d5fee4aefbeb6b4f145a9625e54d48cf51c1c112ea56dbabe18f5ba8df5bfbe9e2d904785ce959cb8136", 0xf7}, {&(0x7f0000002480)="61e305b3342efb3407f52d774e18aac5d7de6122646a02aa48763021454e3cad4e11c0e29cd4e30d1cc9f0dbbbb9a13d97c39c69acca149b8c8a113c75a879f88aa941c243f3a5ccef563e039f2337eb363ad2981bbff53ccd1d6953f2052a2a6c3ddedcbb3eb27a3ebe3d097e2fa0a155e4846360ff684491d2406bd984efa8795545c82ded6b900cf7b35e727fa76ecea00ca6ed5b8dad6422185fd8828e2f924eae2815d9f80bc54f1d932d8c6ab77e1f5583d3538014", 0xb8}], 0x8, &(0x7f00000025c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20044050}, 0x400c001) mkdirat$cgroup(r0, &(0x7f0000002640)='syz0\x00', 0x1ff) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) connect$l2tp(r0, &(0x7f0000002680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x1, 0x0, 0x1, 0x4}}, 0x2e) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000026c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000002700)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002740)={0x0, 0x6, 0x30, 0x20, 0xd9}, &(0x7f0000002780)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000027c0)={r1, @in={{0x2, 0x4e23, @remote}}, 0x7471, 0x1}, 0x90) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000002880)={0x10000, 0xbf40}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000028c0)={0x3, [0x1, 0x10000, 0x9]}, 0xa) seccomp(0x1, 0x1, &(0x7f0000002940)={0x2, &(0x7f0000002900)=[{0x3ff, 0xff, 0x5, 0x7f}, {0x0, 0x8, 0x0, 0x5cb}]}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002980)={r1, 0x0, 0x7, [0x7, 0x0, 0x1, 0x100000000, 0x5, 0x5, 0x7fffffff]}, &(0x7f00000029c0)=0x16) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000002a00)={0x2, [0x9, 0x3]}, 0x8) get_mempolicy(&(0x7f0000002a40), &(0x7f0000002a80), 0x6d8f, &(0x7f0000ffd000/0x1000)=nil, 0x2) r2 = accept4$packet(r0, &(0x7f0000004280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000042c0)=0x14, 0x800) sendmmsg(r0, &(0x7f0000004dc0)=[{{&(0x7f0000002ac0)=@pppoe={0x18, 0x0, {0x2, @empty, 'bridge_slave_0\x00'}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b40)="354e6caafd0bc577f637cd711fc09c443f29f50412de43fe50fe2173bf6dff96656cff9e44d2d2e49f78996e2c4a654b19d3d1834f1a20cef6c3182e9e9775d43d020be08311b5bc7f1a00b6e91e0503240a3328338a5ebd63924b6773cd29fca2f9715d4adcceed25d7ba0ddd08029081b6328fac8f0d2dfda5f459c8c907afbf50d1f3488c0fc3fb6d9e02e7a9db1dc983611a77c177ecf783d06d31fb2785a145a45628a295ff90d858b23527", 0xae}, {&(0x7f0000002c00)="d4f9ff7ab2355b9b22d0242a49ea599082d8", 0x12}, {&(0x7f0000002c40)="5736951165d6a33eb3fbaa5f735c24da232c599061ba74e3e20281544586154326eb687791009a9c4be0f9e9cfc2e94694df1b162488675a443181e1a644f1ebd4cb6a452d9759882f9d629705d6dcbf9ef6604c0756cee782e73904c8d65d68d42893bde444344959953234324864e6c5e3ab13f18b8dd26a", 0x79}, {&(0x7f0000002cc0)="8e4173896aff814e3d303f274d9edb35d932454a0a9e249db09acd67c32b3d548dcb1947138783e07173873d5ed0e44d48b370ec826e1c90f0ace822751780427a661b2373ab012ae7eb60c35695e4a526b5eb9fb5add00334963a09a45d26f706efce5281778adc93073db14e5a7f", 0x6f}], 0x4, &(0x7f0000002d80)=[{0x110, 0x10f, 0x90000000000, "c47344a6777e3f2346b8001f0020b3dd9ae34e43ac71641e29e2e58ef4eef5b8265cd356bff77bf96ae03c37891abff27926ac3d81923bb79248bc5f0f64e5141f3aeb7019f9e3f8cdc42c3b049d576e3a1556234a350ed8d58c20421eae390dad8a81f2f7a88c5f4edaa69a716be4e66fd740f4443aee6288d88be5d4c8f60af181c6424afc978ea01c009af078c1b557a39f37b1c8539a0c3dcb896b289ff04816649b93e7673e8784c78194b6c11e59f1ca82307095fafdcbd07ab3b4b30f305541002f6945564ec07ccb5c4e389f738dcccf20ab048e62ee0ab9e228c1cc23c7638d834f97f0f3c2622a1c1022f7850cd5483f2652a424"}, {0x90, 0x119, 0x6, "84d0d8af151992f5dc89a5548071a41d7399ec10bfb0df50f1a72526f2123e190f6706d3bd025778501030e7d3bf4d43c7e92a6607c1d8cebf151a1cbbaccd5aeaededba96cf33086360c755968793ea1e0e42b81dbdbddd9fd0c671aa688920d94c8cd13780b57ad21330dae31154b21d6f42515bfbdff881"}, {0x78, 0x118, 0x10000, "d174b597b13c9fd19cdc67d263f2d2d29ee2403469ac8a220ee4654921dbcaa99f628e42055f8f3e76b0a3eab54ec16ebecc4a6a1329f38285876775a5df5392fe04adfc1999d4130055f2bbf617c0f62f0b0dcfd8a39ef4dc0a0060d3522c3d24e4eb2872cb6a47"}, {0x20, 0x11f, 0xfffffffffffeffff, "6acc2f62f52ae85919"}, {0x1010, 0x103, 0x8, "7fad194f35a77e675d04e1ca2fd0b5e565caefa655f52a26a87923b4c42ccac3f225cad287bbc367c68bf51643a9b517f7f5c16b5622c75e759055910175cbd6782e0227d30bfc0e05d30d65c643d81dde71ba39b314b456d9ed3e022f725f2b6eab33f8700431a309d0ab874f7e88e4159eeafa4eb998c149c1fd67d46bc8e0d89babd1778a41b6d64bcb31b6ff0da37f98a3a4c2e045581a7321f667ebecbe11c74fb3e910316e592f4a042968082f372e5183013377c9c255d82db7df78d3cda3060b1a9b564b518a499734c1901f83ce852f463e2b8ed253fadf8ff8c68f0d8b19bae1cee3f7fa8e8f3edfe3b2aba6b654b127488b1db851c1617d46841d81e27126802a5a496ae70febba63254edeb84c8cdd02769e13619243b8398a980d2697126db882ad753f6916762756e6d4141c50de5d03038e19301a32c725a6219f6ffef3661898d8f9602e41168e5dcc54b8a87b537ca02b796dfa7586f3b76dcf19e060a626f370e95545d5ec74b6a3bfbb64e044c37fe7d0b9d5ed574061b2d4b405170965661c34afeb226a3afbe93cfb72270d11d4a0f5590eead3bccb801e6869166d49ce78f3c0aec79e6ba138e3db808ecd228520779f8c558463e828b9565ede41eafd0f97e0869688532d6a7fe0a6dcb778be1db57c1b69d2a3d154ed7a1051552390d7f32ec4892f5b55d212eaa8f9587f87e2b0dd50ac9eaffd15bae04733add0f2935d3014f37b4b321a9b7c453a817f4c0460fed0e1ea6e321eb75cea80b90d76fee6b3bf81dc1e76c080f2015ad2ccaafd2d9a85478d174c1c2b4b9a59cba5c0c9f2cba6239c93540916ca58580d67ba5174f3488733a60e0ae5a4ed4ff9bbd9a50d439ccb2b6c59825c766ed58acccf6c939d1a71a0b067dc6e91431fa4ab8a0adce6fd7fa36f3857743f0a28de68dbf671c5b060ed40b329eb63ce7e231c17a8ae5b2051c2f19a3c3b581c7ecbc422bcb7f6ef2027cada4c6bdc4b84bf712b55cbfeee0bde69788712b4a418760234bf0cffb4f25e692cc8155057301d6e4f09e9e7321a76752369f8923df197ad3d03f9ea96b075ed6c1d21c5d4b92ac7d9b72db406b8b5cee72c673de17aaa7792486b8be7f36b4e19d521a696e191ccd1d74df73391710af201a4e7a228ac47dfcaf9c543b7486c2b01da3bd4d03dcac6388d6b7a69fa39bd0370dc73e3e5e95d118a5448eda8ba15377a3d4a82b256d1a1605faeacad8285c7567181f0c698ce3b3850fbd655c37a7f196fe4275838420fd6aa1441c887847bf8be70a123a73aa43bf619c4a44a90d7c6723371407740d5579f06c7ef4a0c07e194df21fac4479015a8d0a6447a5e6a561bb8c3a5be340c12fcccdb95dd6d9908d0bc8f483f58fc0fa1ec464b3f1c4c3b18cbad7edc1f686ff7211f2c5a5268c388786542f20e4563f7d106d741f642d262a8aa3a662631c3a7b2341b17264ff8a254a2dcb0e75056b9098b1c9ef6a082c61b2365a8862a29f221704799b898b6c7824e594fe9865369610534425fe07cb439f74b3d1fd3f8be4e72139d3e3dec82352c50c4ac7616dd181819f74f77e3b71020b4d77cbb429f48c338dad5b0b3c077cb02ff5a32a03040981ae0a13d2341f23bfe3c97b5eff7d2d7f4cb84fb721bc9b6f302366faa5cf1a15814a3b0c793183c46e3712d6fe11ab658f953a7a21fca40d8fbc8b4c9a0273a6efe54f1accfe3d9ddd46955d3b173fb129efcbbe0c4f1438f742bc8aa2c6e6c8cfcb9db2b4cef603bd24a35e30c2090b58396908c4540aa155ad3902e20580e5fdf843ecc92069b815a9bbda0834993f7727e329aeee1736e5d23dd27b3c8d9fef664922b442613130806b34f45c4e7f59425085426df91259a689329dee480d97361cee90ef8a0bca959d36d8684d77b58ac5772b9a5d0a5894118be8f6ec4607fba5f03c03b60f3297bd92b1c96cde70023b6b4c531bb974620e8462a93b31252b0f6564aa10897d3d6a82ad3c1b2a20de14524c66a9f83de06907a32af1a4320cc5e3646ec0780ba3bc3db25c5ebda1617138d3a77fd25a4f5fc81b7cec2706e30cde4eca27d96a99c2814774cd5bcf4c6ab632ec0a971ac10a1a6cf88c8bf8c1d162ac4eb4a7bd2840272be6e36f31078b29a9ced13087677852cfcd1c4da465b5d03bfb6812156302b3035e748596ce766d2abb3015fc9eab06570298e0d55ddd44e53b18632a36935daf38e5eb66c906c62e8d46e536c0415543c8b102711e1602120d45e6e4503d78b4bfd11db2cdc255761733a92cbeebcca3e8c5b19729a7eba1a63e037cbba04c070c38adb86cfb30157631710db79d19335a8b26cdda1a57cd0e897631d7149da689bdb4ccaea66bdd898fb58815a2a128bd8f6f501ed5dfa5dbeb6dca2b1ff4ec9a5c2b8825eb9e06c733ccb2d3152a1f33ddee2298efbca9d5a2bd5a260389cc97b079d451ee38d5cb8a47cf1db3c59550f67b55e31eaec5669bee60861ff9978a77c9443879031f47bdf4db1422e5e6360c74b97c13f46b3d834f77aa3e66646b229be2dedfd7ccdff8f7de90bf9cb576f5547ae5d9436b68491d6c91ebe62d96c3c2c0a11bd99409741fb5e6b136248601b5a7048bcb8524910419da2e82174cc4193bea26da662caeab841d531f7e4595cf15f6aa8b75efcf5942d888e3f14d283ce97a5346d9b8dd23d5aa9e2b88849c2803f18faf7286b761f168fc916581d9d4791e6f6cc5b620e31cbb19a27bfe9744eae99d374b67855a4b154c7b09663544ea1585f16a02e633f1dbb6f8ebd8d054173e1617a1ccc676547075c6f38c125df06e043c0fc58f172f58aa662307d8d594d3c742d2f644f77539a050f1b07b27497a356b156f5ed9ced99dc314892eb9c61a1bed61dfbfb9989751d53244f3add62aa4e79bdb0fed8ed76259e35092397eefbd1ea1f4b963819121f70172d2c490e59c1c2f65ff63de66ac48deaa22bc949203b82858a13147f60ddd2d07f542bd323e358a6655186b823cee4f239a687ee1ba52c5de4eb40e86c0567df2db3c8d9c63d546b605cbe7fdeeefe69a2e0d9ab6cf3881f21c075a69083d646e6002f11ab7be3cc97bfe3242ce305a26844af28f20717a0b9d05334a33ce524d1c4a02bd3f034e8f00b20936e1f063cf27cc7e91f137a7a80652ffa227be05247688c1126e3b9dd34dc43df199a9117ea2d0281ac5c13a994bc0fe33f640ffd0bca5843b4fa4dc62bbdd0d17dac91e812fdb362f49eb3700dd1904eece8a6d70a4b6dfb1a822a4a5ac729cadb1611910331646b5e75ebd4e986a0392513ef1a3ca669b6d2892da2c3c88814566c74807ee28a7bf946172cb546ff9fe6033d3567366f50d95230fd64d8c557adbf413297caebec13699630da5dcb299f8a15971cf7d474ec98732cec61d54be2375dd7357461266dfcf3d8fc3626dd3e40c86ba5ceeaea6905331f601c1ee1baf2cb3762417078cd64cd2cdcd85d850c4d58d1e3fb025295986ae18b721229669b213f81c2240bd38a4e31dd8539a921ae33d9c0c0146c1e8cae084dbdc0d8dcda032915c8a8a50b1e0c255454f3d2a830f2aeb532bee87878b876b8c588c07d6724f9725a78f11629b0c61bd06f25992e43f43d619e0cc20b3ee2d44cee4bbe7ba533dc4cbe4f5c949ff6b1bf0f30264a4ed2b6e23845af1e7244c55b7b2adf88436ca895f4a52b00b892f13b1b221a66877c32f3792ed1aa9d0c195233987b174cd0200497110fb0702cf9fd613a7501e3906d752d963b8d27472eb34a424f3ebf1ebbb4e6cf45d6b7bfc2257be86b534f8a037f83bbe830f353cf3a1d90a2cb2b6a966f170a26eb8abe33759b7ebf8cc24a8b8e14945b250b337d62918054f14092786aea1ef8c2f54ecdcb5b7e2ecd7a4ef24a9cea4827f6af8e9c0517982017d5b9996c805fa6abcfc8c263505bb221ea2945da5420efeaa3e437791fb6add25af3655bb1f08f1972460bf92bfd638bf5bd13854ce14b11a1d23b63dd45a06b3570044abe1f3c86be48034711c69eceed9c695de4321672d4d3f49f28cbb86139ffb864e4a2c2c80600d53ebb8fef864e3700d9a9a078c6e34fc20d99cfab4e9979e6556ecc851aaadeaaa0208121ee571b8dffb2933afbcaf423c73c508692e6c2d2e18b0b266110cdcfec6f553e58fcc5246ab95973797b874b39d154e0d3cd6d8efa7c01ff5ca899ced90394df0092a106c0f15c56e9ef96f8cc493e00bf5a15777b28fdf156e590498c310b69895d8a4ddfd6b76ceee2afa2173db68ca4afc3547009e73b00f2e5b4794358608bbda3a384d58693c60cece6a41e4327e9832b9abda7b8ee1bc67c42bd856d0f7fb656f6b7f0495a70a4e558355fc61fa30db8e21e58d7307cef270be5848b79792cf68570684bcd44d37b08dc23ebc9c8e3b6440e69023e3cc628c6c74759bd67176cbea1dc5d5b3880cb8896bc22b3e8f8a8b0f1f0d2503fe2b3bfe8a7c8139f8cfa18f217790b67eef7ccf55f9c2655cba4d9dc5c463331ac890354ee869f5849c9fa1790aa7d6a276c49f9ccf798aa0192b9ca96b911056bb6a26e5337db5c06c0e6bdcb269f0c76fbcc67541be1af21973917cfa2cc83e3ecf732414a21912ccf420db6b524398598da8cdb70ca874411701c25ad6f2bb1072a8a82900516a82e460f583ada8ecf2c03451b0f84cb222cbbaeaac11151f982886563aa06727511402e18cdc42199290ec21177ada1f7214015b0b33fa83e7040d7632d416d955754cd6780cddf0a8b2c237da5a34e33c66205cf0ff79d0d96df5937d60cb3f22890992f58ede120fda1e67df52c185b7cc76f916b76cd7f8cc5b49320aea8a60c2dfcd33be4f2111e179c2d473348109045d71154ffc9b0f23eddbbfd6a14f23502be0f73b90704a1292c1fa7e7d958022ddfb95372846bfcaa0488bb7de6e2016b636b0e80f5552dc33c3dfe8675d6ec165589514149ea209bede9760a38cbae96ebab0a9d977707b43383c7dd0853feb1cd19dc16350654854ae119c9c74c697c2a769826eab2fc40fcde6264d3843729c311589683279e0507dafb10176c28ecad0b01ab00e7f14ed1a364696087ec8c682c0a23a9b1e2b63fcd7a000a2b440017cc1ca12158e0887e8ef0d1f031eac85eb5a280bfc5be04707cdd3060f2d74a388c62d60389f43afe9c5fbf90df8ce637511d74b35e62bb27538c75e26e5134b8b9ebdc1bb3d8c1257bb3c3bc60892b86d304b7d4191d039b28a7c15f3f9500ae22df99d245b8ce61c985c54eca37436bc14daf7f30cb697185dc0efe4516a3093c148cf34ff49267273ca4768f92f25b35bb4e63a914166a04509e1270efdf2dce94b93040b716fb8910cbd6dca58bf332de3b4a217a5ba3b9232027d14e16417797473ea14f4d51417ac4ca59063412e4879e92a0556b9434babf6b946af4f5eab0650d7ff4065a23bbab32aea540bc50d8848feddf24901cc5f59630cafa421e5143a9428c6e91b09802451c9c6126c53b475328826b0b0f94067a1f78f921988f3150ecc803208000a9538dae86f5fa9db4d08511599da8a2d135a11fbbfe05163f0ddd6c25cc9f012e6c04af67e46bf8941a8bf3b02552bc205913b5569206a0e4c25f46408040cbf5f525a29bd0bd197ca66825110637d539b7775bd073c4ae2fcf7dd2b2e667b1f5697b0c863575b2e20c8015a82687d6e54a83bc8ec6971aad5f81c0b144b23899afa2b5c6f082ce5e69227f95d2f8f424bd0bde639a66ebe640ec4aa77a4aa1fc7829ff2dcf95ea"}, {0xe0, 0xff, 0x40, "c4699f21647df4c06491a892ba2f9658aac07e462bfa4f2e1be2efd12df376e04591ebc6ed6ffb96a112a758face4994e197141f34864afdc7d650ab795f4eaf98c7d7bfec26f950697f4a6d74688ab1483b0b7a2f1359eff2d0de1c9118167c7a5c91f6a59d9cc1d4e3fd01120259222e88e80929bff1f093acf3469f0b59b104c733010d19ecfb13723f1524ad5243dc130b348660a98164b6bd5e712ce8cc70db2733931c059aa323ae65f76618445d93229039628e3238f90673dc9464bbb0c43f2052cd95e4423a23"}, {0x100, 0x102, 0x401, "c77d845cd9eb7497d944a363e8cf1ba0a422f1e05e57be42eff54f4a24e8156a160c55bb2d5758a0418ecd0869e421de6ba6ccb37c12b136f039be209f5b6fc72609d6ce96f931cd9f8537d88e12ff5c3b0744166bff9c04d01b6b39c3ca02389076f145ccca78219f97aa230fab667227994b1818ca7043b855e4abab5f5e7ec64fbbfdb3042ddffcf5a53e25bcdf3d924ef54df399c7c3c7bbbc36ac6a7a348b7be665ffc3f7a933231d71a6394cd2027d5f255c8c49e528f6132b8c6f4960426f671e81d31c9eccca3dfeab9b65d64d72858537be07c5b9975265d5c4e763a217f440cc50372d0738005c9838"}, {0xa8, 0x10f, 0x9, "1322953037b56c598995678ce0faa4a6fb2a404803ae114e0dbd059da5e169bd7bdf7421014cc109c934f718349076ba4ac5c20fd218e5e7e8be3c22de4cc21c4e15027e1cc62d5e804ff33b52f7fcb9acc785b7ba09cf49e7ba1b80ce93e070554b285a5c71697eba9c160e60245a10af7f069faeb04224db1d6b8f6dc7f04b9ec57ab8fac719ad74ee2126d82b170f7dbe84cc10dc523e"}], 0x14d0, 0x4000000}, 0x8}, {{&(0x7f0000004300)=@can={0x1d, r3}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004380)="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", 0xfc}, {&(0x7f0000004480)="443684adf336b0c49ce5bb255d5910451072fed26aedbc715a58361c31d8e938cbddf74de8301ae26d794019a4ed796c684a48f75c926ca9a2b6bad5379df5532b055718420dbb8c36fc688b9dd9fe6aa04fd6aeedff0bdcfab5398886b56da76622b293fa3e96f802d7941e3bf20ec867c5df9d9410cf8b7ca89a4f5a17", 0x7e}], 0x2, &(0x7f0000004540)=[{0xe8, 0x113, 0xd9d, "8b6188922bcb8f19c16851edb932943ea2e1bb73751f238f74a070247bcc52470cc49f61448cd83d42e5a7084752c62a8a39faa7382dfe18f7dd0ad3e039e85e24e80488da36443707dfbf67b42fff445c5d14220976079a00b00db6b92910aa2a57951a264a250737b30f6d63bc2cd3c9c818535518e80b21ea16307a46f2a1ab2a9597d8a1a8ee2caed3c7d2fc0915350cd916e5bf2341f7450a2701c81f2767d09d63f0c5a510fb5c1f3c0846a5582822abfd3878279b358773d03910eb7d0dde5318d87dbd8784f03da1ab5789a630aa26"}, {0x58, 0x107, 0x898, "79c69b709e3741e24963c39345c8d8c32cb3fcaff9b3df5b224e40ff811872e3429f6f1d6ef99581996cf00d7bd9c30f8915be556deea62e133e386243309886268ed8a1a4d937"}], 0x140, 0x1}, 0x7}, {{&(0x7f0000004680)=@sco={0x1f, {0x5, 0x80000001, 0x2, 0x0, 0x7fff, 0x6}}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004700)="94513f0c308f559594b4cca1c4c5caa8ff743bfc7651abadb22093d267b89dc127f66be93ef6348119d86e813ae9a06aa330b842a35bc1b958ef2eab366fad5fc6bfe3c98f4e9fbd799c4ace36a09f1d6595067c059ad8eb9071dc55ebe9d628a77f78cbc2ca9ed8d075848970e055c1a8f6c009dd75502bf74a81ea2efa4cc0c77c5d984f5d2ab0bd35b4d986667ce70040ef3719660d943a358ce7f2d0107851afd33b7c2f8fca7a7da600bf09f268192d", 0xb2}], 0x1, &(0x7f0000004800)=[{0x48, 0x115, 0x4, "d2471bdf94c3497451aec3a6287d4378424fad621328f5bcc4551c134a155df869210cdbfb7f07c78ccb11235c404a9304d21b3f507206bb"}], 0x48, 0x4}, 0x7}, {{&(0x7f0000004880)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004900)="c3e39dbea2c396131de46bd8bfa816fee5a285d459046c8abbe8b11b99e01f4e2345", 0x22}, {&(0x7f0000004940)="b900a985c758af7616347766c0e1b6d401142ba39ed8f16fa174b99762c20fe41eced147cb48be00d386a69d3904fefe35e4fc7b7ab70ff20c35d99c9e28967ffb9300803c9a9e16e7d1d68bdfe3e7459cb31e89c1491522c68172150e7bfc31209cf7ea5c133539f74b575e90fc87d6907bb2f4d956d5f63da704da455d8daf11f77748ef13c40121408a2699baaf4664611b8bc52aa1916b970c40288b22", 0x9f}, {&(0x7f0000004a00)="5054fa33ad9cc631d832b4e4ca289b02e97f5789ba902fe611ce36a1e4af513fe3e7a84b", 0x24}, {&(0x7f0000004a40)="48a9d52ed5b6a1082357318518ef4a25e617fb6eb28af753cf0763e7aa47a6879885901b32303fbd60ce2bd854688bd21206d3e74f6128d21e5a7f92442b60c2e8337ea66795dfb5c27f06435325bd50315491d926473c67afb4142638eacff5f901f91f6438e8f9feefd1622387d8784d55691a5a69dbc9c4c8dee370b6762d619eb9e8fa2f71904e1cbcbbf7ec26d8954b69ebaef9611dd0e606574f4203ec71e37fd96144b9b16bde7f63b7ce25a284d8b5c5f4a85f", 0xb7}, {&(0x7f0000004b00)="75aee147fb565b6fcf283876b69b4877863a9ef7c0bbd68e9ff91100aa222a8f9c260a114bcf07", 0x27}], 0x5, &(0x7f0000004bc0)=[{0x110, 0x117, 0x5, "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"}, {0xe0, 0x13f, 0x81, "73e38d05f446483f2664ef94e10ac9dec3161cb7109d425491615038e877d90124ab40883726629be8662afec674304c10dd2298fab9ca11d8b4bede54766a1e76290a574bb179fc1b0ed90fb9e930d317a60d8e2ea9355988171410611f2610a6277b7cd023e21a58a5b003caeb1ab335deeb129124bf78a647b57368ebdf9887044e85587dc3764c22063675c79bda4d0bda05b60bdebcc928cf0c0ba25b7994ff1b50c645e8249deaf400905091196741a0cdf080a3e817e8f75fea320b4b94c51d2c748805014f241c528da19c"}], 0x1f0}, 0x70000000}], 0x4, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000004ec0)={0x5, 0x0, 0x3}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = dup3(r0, r4, 0x80000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000004f00)={[0x1f000000, 0x0, 0x7, 0x4d1, 0x8, 0x6, 0x7ff, 0x8, 0x9, 0x4, 0x4, 0x0, 0x81, 0x4, 0x1f, 0x6], 0x6004, 0x400}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000004fc0)={0x1, [0x2]}, 0x6) sendmsg$alg(r5, &(0x7f0000005540)={0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000005000)="8b36cd343d6d0dd062d4e813d377db8a8c2e5c06181f27cb", 0x18}, {&(0x7f0000005040)="0726c0d906e7f1558758ab53716cd9f3102188490b4b72fde83ec82669040be6ebcc7e5daf952b9725de93bac91eb79df24abc498057d9726a1282990ad5b8a4e84a25cbb81413861dda42b7b0d0e74724d7aa8be5355ab08f3c4864f3ada52a98e1325879eafe4249cd449e5abedff7f7b42e891e4762788f322642d7b97264add844f55464d2224dae29bffc1c5dfc0b368fe2ff237bb9460fe464da312efeac595947eed245def16221b13f2e9eb62945d87458", 0xb5}, {&(0x7f0000005100)="9c4a9ef9d1b2d1ce3ee6f392304a96d308011e03481a4b916c6d45546d4072f1829707388f8ba10dfe879c6c4ad60c4b1a7a69ccb67589b6e05cf4c10ecc3748d746aa57d567c69a73ad9dd2b1cc52f4aaa585116f", 0x55}, {&(0x7f0000005180)="459ed11600d093f018c56d2e6639821aa2327b273698aa2b7283a40fb944f78de6253f907c81289ab0decd04caa64ceddd2f433a0030b26c3672f96f6107f187992ef00a505c4180afedd428b5486ebbafa3114ca6b7968890d4448e57992a3896cac882d633e9ca7c17a98a6d118edb61c80fe0ac8d735153ad0d554f53b760bf74b3d1f59683f601a5725426033adc4137b8e6f8fc0847135e9a183c504bfdbdd1f2f489f47fee98c386f3cd16ce667ac2357c453ac42796608e19e6cda60043832e3e78bc53a5b481a59ba51526c557cf55f3dc6b77d0", 0xd8}, {&(0x7f0000005280)="5cb2", 0x2}, {&(0x7f00000052c0)="15c477c70ab3463409fa221bdc59ea9bdea6c1192667857ba8b9b68b6f268f9150f90fbb47990cad8e05e02f20e8ab16b8971f2503aa7567f737c309e045a96a052b10dc4f8c15cb0ac381310fd24d1c983c0075bb4e973f99b3d17d130a71d776afc2c64316b1dcba3e9b9279118e88d3923da155b1e4574432d53746807c27b448aebfc49995b203098678120db4c19e351f819646df85c91461a2f63d45373045785412cc2a2ce44dc3bec08fee5a286f04a7bfd99daeaa977d1e80b50cd6d4222365", 0xc4}], 0x6, &(0x7f0000005440)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x7c, "2ffdf12755b3254d02df7d31e291cb9127d4ad5e727763056482269f2692b55cbe871964f05b7334cc2025c8012fcf5ba23183c16305e5d6dc8ef38aa412401654f544c2242063fb35074fd9147efd0b29ca7d5dea5efedcde77fe55012968f742621e37f6afd9c95744620ee24e2330c6624a048d6a5718b6d9e8ba"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0xd8, 0x805}, 0x40000) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000005580)={0x1, [0x1]}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000055c0)=@req={0x20, 0xfffffffffffffffc, 0x3, 0x9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000005600)=""/140, 0x8c) 03:35:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0x101000, 0x0) sendto$unix(r3, &(0x7f0000000500)="2dfbadb0c75e99c606128d714039640a1e7e23ac343ff094f34018525e2a4923f602636ec6a3ee1c46fef9209ceadf4fd5b64752557092a3ae5db72ead233458a8ec3c0dc5a1936b75ffd933b813b78aa4979093497c1ea26502a5cb7ea9ce70ef9086f38129a4866e6bb8a0ab7f8e9bb10b1ea6f6dc5fba47c96bbf18dba78d2adc9a1d2b87b98ad1816f475c6c5c54b1db01ec3f6abc1f901f00", 0x9b, 0x800, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="f2410f1b1c74460fc71a66430f3881a00a0000000f20e035004000000f22e066ba6100b00deeb805000000b9a82e00000f01d966ba4000ed663ed9f7c442c1aac6c4c1245ce4", 0x46}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0xffffffffffffffff, 0x28}) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x202) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)=0x5, 0x4) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x7d42a6a4869dde78}}, 0x20) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000680)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r5, r4}}, 0x18) listen(r3, 0x8b8) shutdown(r6, 0x2) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x541b, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x7b13, "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", 0x47, 0x4, 0x9, 0x0, 0xcb7, 0x13a83, 0xfffffffffffffe01}, r5}}, 0x128) 03:35:53 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x503041, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000180)="bd2d7d2f757365726b657972696e6700") r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0xb}, 0x3, 0x3, 0xff, 0x4, 0xffff, 0x6, 0xc06}, 0x20) r3 = semget$private(0x0, 0x0, 0x8) semctl$GETZCNT(r3, 0x7, 0xf, &(0x7f0000000080)=""/169) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000140)=0x80) ioctl$ASHMEM_GET_NAME(r1, 0x40087705, &(0x7f0000000200)=""/4096) 03:35:53 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x5f0f, 0x109000) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000002c0)={0x4, 0x400}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000200)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/44, &(0x7f0000000240)=0x2c) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xfffffffffffffd34, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) close(r3) [ 310.420343] FAULT_INJECTION: forcing a failure. [ 310.420343] name failslab, interval 1, probability 0, space 0, times 0 [ 310.431708] CPU: 1 PID: 19088 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 310.439090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.443635] binder: 19087:19089 got reply transaction with bad transaction stack, transaction 827 has target 19087:0 [ 310.448460] Call Trace: [ 310.448493] dump_stack+0x1c9/0x2b4 [ 310.448515] ? dump_stack_print_info.cold.2+0x52/0x52 [ 310.448534] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 310.448553] ? lock_downgrade+0x8f0/0x8f0 [ 310.448576] should_fail.cold.4+0xa/0x1a [ 310.448597] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 310.459767] binder: 19087:19089 transaction failed 29201/-71, size 0-0 line 2774 [ 310.462273] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 310.462297] ? is_bpf_text_address+0xd7/0x170 [ 310.462320] ? find_held_lock+0x36/0x1c0 [ 310.462359] ? check_same_owner+0x340/0x340 [ 310.514200] ? kasan_slab_free+0xe/0x10 [ 310.518165] ? kmem_cache_free+0x86/0x2d0 [ 310.522302] ? putname+0xf2/0x130 [ 310.525748] ? rcu_note_context_switch+0x730/0x730 [ 310.530672] ? ksys_mount+0x12d/0x140 [ 310.534465] ? __x64_sys_mount+0xbe/0x150 [ 310.538620] __should_failslab+0x124/0x180 [ 310.542854] should_failslab+0x9/0x14 [ 310.546655] kmem_cache_alloc+0x2af/0x760 [ 310.550813] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 310.555924] ? do_raw_spin_lock+0xc1/0x200 [ 310.560525] alloc_vfsmnt+0xe8/0x9f0 [ 310.564245] ? mnt_free_id.isra.27+0x60/0x60 [ 310.568648] ? kasan_check_read+0x11/0x20 [ 310.572788] ? graph_lock+0x170/0x170 [ 310.576579] ? rcu_pm_notify+0xc0/0xc0 [ 310.580458] ? putname+0xf2/0x130 [ 310.583929] ? find_held_lock+0x36/0x1c0 [ 310.587996] ? lock_downgrade+0x8f0/0x8f0 [ 310.592143] ? module_unload_free+0x5d0/0x5d0 [ 310.596636] ? lock_release+0xa30/0xa30 [ 310.600614] ? mpi_free.cold.1+0x19/0x19 [ 310.604676] vfs_kern_mount.part.34+0x90/0x4e0 [ 310.609255] ? may_umount+0xb0/0xb0 [ 310.612878] ? _raw_read_unlock+0x22/0x30 [ 310.617039] ? __get_fs_type+0x97/0xc0 [ 310.620921] do_mount+0x581/0x30e0 [ 310.624453] ? lock_downgrade+0x8f0/0x8f0 [ 310.628598] ? copy_mount_string+0x40/0x40 [ 310.632833] ? __check_object_size+0x9d/0x5f2 [ 310.637334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.642867] ? _copy_from_user+0xdf/0x150 [ 310.647016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.652556] ? copy_mount_options+0x285/0x380 [ 310.657048] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.662759] ksys_mount+0x12d/0x140 [ 310.666396] __x64_sys_mount+0xbe/0x150 [ 310.670456] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 310.675476] do_syscall_64+0x1b9/0x820 [ 310.679361] ? syscall_slow_exit_work+0x500/0x500 [ 310.684199] ? syscall_return_slowpath+0x5e0/0x5e0 [ 310.689119] ? syscall_return_slowpath+0x31d/0x5e0 [ 310.694045] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 310.699413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.704261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.709440] RIP: 0033:0x455ab9 [ 310.712620] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.731899] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.739598] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 310.746853] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 310.754126] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 310.761385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 03:35:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xc52, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0xfffffffffffffffa}, 0x8) r2 = fcntl$getown(r0, 0x9) sched_getattr(r2, &(0x7f0000000080), 0x30, 0x0) r3 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r3, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) [ 310.768654] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000004 03:35:54 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x7000, 0x78000000, &(0x7f0000ff9000/0x7000)=nil) shmget(0x3, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmget(0x0, 0x3000, 0x54000010, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x803, &(0x7f0000ff7000/0x4000)=nil) shmget(0x0, 0x3000, 0x80, &(0x7f0000ff6000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x18, &(0x7f0000ff5000/0x4000)=nil) shmget(0x2, 0x1000, 0x80, &(0x7f0000ff7000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff9000/0x1000)=nil) shmget(0x3, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x54000040, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ff6000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 310.835353] binder: BINDER_SET_CONTEXT_MGR already set 03:35:54 executing program 4 (fault-call:3 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 310.873963] binder: 19087:19100 ioctl 40046207 0 returned -16 03:35:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3f, 0x100) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x800) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, r3, 0x2}, 0xc) process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/247, 0xffffffffffffffbc}], 0x1, &(0x7f0000001480), 0x10000000000001f7, 0x0) 03:35:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000140)={@rand_addr=0x80000000, @dev={0xac, 0x14, 0x14, 0xd}}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:54 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0), 0x10) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@rand_addr, @empty, @loopback}, &(0x7f0000000280)=0xc) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="100000000500000000", 0x9}]) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000200)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r0, r1]}], 0x28, 0x1}, 0x4) 03:35:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000012c0)={&(0x7f0000000100), 0xc, &(0x7f0000001280)={&(0x7f0000000e80)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0701ff09960300008f03000000000000ff0700000100000000000000000000004b16227d7f2f3011fbab021afed579a8138a23dc6ca1a04d9b6c0cf375b8608a7d00b41fc1642edd810e83ce0aa1ff893f374eb3b947d390f5180a8333418d241d9438d4bd1293e2a21028291fe8690c9936a422344a0556c6867a2738c877099b79fd413ff2ff58ee1e16fe23a0249c91c228ed692614000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000467d0b456d28255100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x697) recvmmsg(r1, &(0x7f0000003500)=[{{&(0x7f00000002c0)=@ethernet={0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/55, 0x37}], 0x1, &(0x7f0000000500)=""/29, 0x1d}}], 0x1, 0x0, &(0x7f0000000180)={0x77359400}) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x200000) [ 310.925672] binder: 19087:19100 got reply transaction with no transaction stack [ 310.925720] binder_alloc: 19087: binder_alloc_buf, no vma [ 310.933570] binder: 19087:19100 transaction failed 29201/-71, size 0-0 line 2759 [ 310.946969] binder: 19087:19089 transaction failed 29189/-3, size 0-0 line 2967 [ 310.997915] binder: send failed reply for transaction 827 to 19087:19089 [ 311.005703] binder: undelivered TRANSACTION_COMPLETE [ 311.011081] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.016613] binder: undelivered TRANSACTION_ERROR: 29189 [ 311.028312] binder: undelivered TRANSACTION_ERROR: 29189 [ 311.033917] binder: undelivered TRANSACTION_ERROR: 29201 03:35:54 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 311.129900] FAULT_INJECTION: forcing a failure. [ 311.129900] name failslab, interval 1, probability 0, space 0, times 0 [ 311.141236] CPU: 1 PID: 19127 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 311.141247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.141252] Call Trace: [ 311.141278] dump_stack+0x1c9/0x2b4 [ 311.141300] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.141333] should_fail.cold.4+0xa/0x1a [ 311.141352] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.141374] ? kasan_check_read+0x11/0x20 [ 311.182807] ? rcu_pm_notify+0xc0/0xc0 [ 311.186735] ? find_held_lock+0x36/0x1c0 [ 311.190858] ? check_same_owner+0x340/0x340 [ 311.195211] ? rcu_note_context_switch+0x730/0x730 [ 311.200353] __should_failslab+0x124/0x180 [ 311.204632] should_failslab+0x9/0x14 [ 311.208491] kmem_cache_alloc+0x2af/0x760 [ 311.212680] getname_kernel+0x54/0x370 [ 311.216602] kern_path+0x1e/0x40 [ 311.219997] gfs2_mount_meta+0x85/0x2a0 [ 311.223980] ? init_sb+0xcc0/0xcc0 [ 311.227530] ? lock_downgrade+0x8f0/0x8f0 [ 311.231680] ? module_unload_free+0x5d0/0x5d0 [ 311.236184] mount_fs+0xae/0x328 [ 311.239545] ? mpi_free.cold.1+0x19/0x19 [ 311.243613] vfs_kern_mount.part.34+0xdc/0x4e0 [ 311.248190] ? may_umount+0xb0/0xb0 [ 311.251810] ? _raw_read_unlock+0x22/0x30 [ 311.255965] ? __get_fs_type+0x97/0xc0 [ 311.259856] do_mount+0x581/0x30e0 [ 311.263402] ? lock_downgrade+0x8f0/0x8f0 [ 311.267721] ? copy_mount_string+0x40/0x40 [ 311.272490] ? check_same_owner+0x340/0x340 [ 311.276811] ? __check_object_size+0x9d/0x5f2 [ 311.281331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.287297] ? _copy_from_user+0xdf/0x150 [ 311.291449] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.296976] ? copy_mount_options+0x285/0x380 [ 311.301636] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.307168] ksys_mount+0x12d/0x140 [ 311.310792] __x64_sys_mount+0xbe/0x150 [ 311.314769] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 311.319796] do_syscall_64+0x1b9/0x820 [ 311.323682] ? finish_task_switch+0x1d3/0x870 [ 311.328176] ? syscall_return_slowpath+0x5e0/0x5e0 [ 311.333103] ? syscall_return_slowpath+0x31d/0x5e0 [ 311.338039] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 311.343404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.348361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.353540] RIP: 0033:0x455ab9 [ 311.356716] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:35:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x220040) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x3, 0x9, 0x0, 0x3}, 0x9, 0x7ff}) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0xd9f, 0x63, 0xd5, &(0x7f00000000c0)="a3b0ef06a397acf6b7c21b74be01b3f0f4cf9560239eefdfdbc7d64b9bbf931c3f95e8d39d1e981259f75abee8018be186964a24bf6d09752fc464c94002c862b1e13ad0776908fee8e3aad93c91818237147878cb958f52fb2b61102484b37a4cc66c5aff856d208b9905a75f5059dda646971c4c8d9dba391a519f79d2971bd16f0fe5c510d74ef5fbf3d7905aa7faab7266437ceea302792c45669eb0ee3c0de9e32da1bcdaca0cd9e78bd98051b914cf564995f4ac69be89a7e8aa33f3937864846038820d12ed263160ac1ca905ad1e066931"}) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x1000, 0x5, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000200), 0x4) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000240)={[0xf000, 0x6000, 0x104001, 0x102001], 0x7f, 0x41, 0x1}) 03:35:55 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140), 0x1}, 0x20) [ 311.376161] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.383863] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 311.391211] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 311.398483] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 311.405746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 311.413033] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000005 [ 311.420655] gfs2: path_lookup on ./file0 returned error -12 03:35:55 executing program 4 (fault-call:3 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:55 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmget(0x3, 0xc000, 0x140, &(0x7f0000ff2000/0xc000)=nil) shmget(0x0, 0x1000, 0x204, &(0x7f0000ff6000/0x1000)=nil) shmget(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x480, &(0x7f0000ff4000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x54001024, &(0x7f0000ffe000/0x1000)=nil) shmget(0x2, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) r0 = shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:35:55 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080), 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)=0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) fchown(r0, r1, r2) 03:35:55 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f0000459000), 0x3cb) r1 = gettid() timer_create(0x0, &(0x7f0000c00000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0), &(0x7f00000012c0)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = dup2(0xffffffffffffffff, r0) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000040)={@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffff7, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="9e5bb26a8a300467a26a3221733ecfffb7b169c898776684b3125880e5a117b599a3a3fa9becf7baf4451ee267894847dd762ba427", 0x35, 0x9}, {&(0x7f0000000140)="6f5e64303900999a74eaf2216528d8687e36f3d1d328438cd77845d16809008950922220a9d8c28439e3745ca6aaf89f087b4dc49b10672bc93bdf86173291446d90971896638341405a24cb4c5da08b80e4a9a31969477d4cd836739708d028608f8b419653fe107b08243d5bad84e8eec9afdfb01aba8205286bc3c3f9a5a932159d6b5eca21eaef98f1f915f0339d2a42debe6a529420a348bab3642f818a88c09b6f6883afb41f005ec6319f89ed68986f9f1f038a37bfb30e493363f19f801bbfe9ce5bbf7a0b811666", 0xcc, 0x1000}], 0x802010, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x1, 0x8000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) tkill(r1, 0x1000000000016) 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) ioctl$FICLONE(r0, 0x40049409, r2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x80000001}, &(0x7f0000000180)=0x8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0xc0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) pread64(r0, &(0x7f0000000280)=""/35, 0x23, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0xffff, 0x20, 0x1ff, 0x4}, &(0x7f0000000200)=0x18) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:55 executing program 1: inotify_init() r0 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0xffffffffffffffff) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0xab49) [ 311.528270] binder: 19132:19137 got reply transaction with bad transaction stack, transaction 832 has target 19132:0 [ 311.539430] binder: 19132:19137 transaction failed 29201/-71, size 0-0 line 2774 [ 311.578461] binder: BINDER_SET_CONTEXT_MGR already set [ 311.584186] binder: 19132:19153 ioctl 40046207 0 returned -16 [ 311.593182] binder_alloc: 19132: binder_alloc_buf, no vma [ 311.596132] binder: 19132:19153 got reply transaction with no transaction stack [ 311.598887] binder: 19132:19137 transaction failed 29189/-3, size 0-0 line 2967 [ 311.606382] binder: 19132:19153 transaction failed 29201/-71, size 0-0 line 2759 [ 311.625415] binder: release 19132:19137 transaction 832 out, still active [ 311.632484] binder: undelivered TRANSACTION_COMPLETE [ 311.637664] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.647356] binder: send failed reply for transaction 832, target dead [ 311.678366] FAULT_INJECTION: forcing a failure. [ 311.678366] name failslab, interval 1, probability 0, space 0, times 0 [ 311.689699] CPU: 1 PID: 19159 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 311.697689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.707099] Call Trace: [ 311.709715] dump_stack+0x1c9/0x2b4 [ 311.713378] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.718608] should_fail.cold.4+0xa/0x1a [ 311.722711] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.727848] ? kasan_check_read+0x11/0x20 [ 311.732017] ? rcu_pm_notify+0xc0/0xc0 [ 311.735955] ? find_held_lock+0x36/0x1c0 [ 311.740065] ? check_same_owner+0x340/0x340 [ 311.744413] ? rcu_note_context_switch+0x730/0x730 [ 311.749377] __should_failslab+0x124/0x180 [ 311.753636] should_failslab+0x9/0x14 [ 311.757466] kmem_cache_alloc+0x2af/0x760 [ 311.761658] getname_kernel+0x54/0x370 [ 311.765576] kern_path+0x1e/0x40 [ 311.768979] gfs2_mount_meta+0x85/0x2a0 [ 311.773009] ? init_sb+0xcc0/0xcc0 03:35:55 executing program 7: syz_emit_ethernet(0xe, &(0x7f0000000180)={@local, @dev, [], {@generic={0x88f5}}}, &(0x7f0000000080)={0x0, 0x0, [0x186, 0x0, 0x0, 0xffffffffffffffff]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) r0 = getpgrp(0xffffffffffffffff) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x1, {{0x7, 0x400, 0x3, r0}}}, 0x28) 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3, 0x400801) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000180)="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", 0x1000) io_setup(0x3, &(0x7f0000001280)=0x0) io_submit(r2, 0x1, &(0x7f0000001580)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000014c0)="8f1d1d1507a4835db6f84f81968015d2797bdd46cb40993551983f7286ff9b09fee31436f66341c5fa9cd13013ed593396de47f4b45914aafdf016ea04c4fc70649150bda2666644456e857904ae9fe81a04d50d06928892a7245f9dcd46602ae06f8f038cb1301c07fe93263e457fe8053aa39da0f55d", 0x77, 0x44ad, 0x0, 0x0, r1}]) r3 = fcntl$getown(r0, 0x9) fremovexattr(r0, &(0x7f0000001180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) sched_getattr(r3, &(0x7f0000000080), 0x30, 0x0) write$binfmt_misc(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="73797a3106a6dc2f3e08b01e5f3f1f7775e2aad9f93a66aa1fae342c1c73192d8f05e834c38978341d610ffd3d21eba6f4ea14df2fc90d000000000000ce7517cee39246bcacbf58575be85e281901c7b8a51fcc91125d2c42d2120ebc6cce0c3974c3"], 0x1b) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001400)={@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, {&(0x7f0000001340)=""/192, 0xc0}, &(0x7f0000001240), 0x10}, 0xa0) r4 = mq_open(&(0x7f00000000c0)='wlan1\x00', 0x0, 0x0, &(0x7f0000664fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) r5 = shmget$private(0x0, 0x2000, 0x78001400, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f00000011c0)=""/92) mq_getsetattr(r4, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:55 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6bc80a57dd85", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "cb155d", 0x5800, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x68, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xc}, 0xffffffff}, @in6={0xa, 0x4e21, 0x1ff, @mcast2, 0x7f}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x5}, &(0x7f0000000200)=0x8) [ 311.776579] ? lock_downgrade+0x8f0/0x8f0 [ 311.780760] ? module_unload_free+0x5d0/0x5d0 [ 311.785292] mount_fs+0xae/0x328 [ 311.788687] ? mpi_free.cold.1+0x19/0x19 [ 311.792772] vfs_kern_mount.part.34+0xdc/0x4e0 [ 311.797388] ? may_umount+0xb0/0xb0 [ 311.801216] ? _raw_read_unlock+0x22/0x30 [ 311.805385] ? __get_fs_type+0x97/0xc0 [ 311.809302] do_mount+0x581/0x30e0 [ 311.812866] ? lock_downgrade+0x8f0/0x8f0 [ 311.817067] ? copy_mount_string+0x40/0x40 [ 311.821323] ? check_same_owner+0x340/0x340 [ 311.825670] ? __check_object_size+0x9d/0x5f2 [ 311.831418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.836976] ? _copy_from_user+0xdf/0x150 [ 311.841159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.846721] ? copy_mount_options+0x285/0x380 [ 311.851244] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.856818] ksys_mount+0x12d/0x140 [ 311.860469] __x64_sys_mount+0xbe/0x150 [ 311.864468] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 311.869517] do_syscall_64+0x1b9/0x820 [ 311.873431] ? finish_task_switch+0x1d3/0x870 [ 311.877954] ? syscall_return_slowpath+0x5e0/0x5e0 [ 311.883438] ? syscall_return_slowpath+0x31d/0x5e0 [ 311.888580] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 311.894021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.898896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.904099] RIP: 0033:0x455ab9 [ 311.907309] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:35:55 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 311.926661] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.934833] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 311.942126] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 311.949446] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 311.956734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 311.964036] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000006 [ 311.971539] gfs2: path_lookup on ./file0 returned error -12 03:35:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001480)=ANY=[@ANYBLOB="060000000000000000000100000000000100000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="000000000000000000f00100000000000010000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000620100000000000ae00000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00=\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000001000000000003300000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000020000300008600000000000000103ff7605bc2d3c276712fa5319dc68127bef18e4c63971d", @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @broadcast, 0x2000000800000000, 0x0, 'dh\x00', 0x3, 0x4000000}, 0x2c) [ 311.988595] binder: undelivered TRANSACTION_ERROR: 29189 [ 311.994165] binder: undelivered TRANSACTION_ERROR: 29201 03:35:55 executing program 2: shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x9, 0x7, 0x8, 0x0, 0xff, 0x0, 0x6, 0x400, 0x9, 0x5, 0x8, 0x7fff, 0x9, 0x100, 0xfffffffffffffe67, 0x7fff, 0x2, 0x5, 0x8, 0x200, 0x40, 0x4, 0x8, 0x9, 0x2000000000000, 0x7fff, 0x5, 0x4, 0x9, 0xfffffffffffffffb, 0xef83, 0x5, 0x1e09d15, 0xa5, 0xde1, 0x0, 0x4b2, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x24, 0x1000, 0x80000000, 0x4, 0xfffffffffffffffd, 0x5, 0x80000001}, 0xffffffffffffff9c, 0x4, 0xffffffffffffff9c, 0x1) fsetxattr(r1, &(0x7f00000000c0)=@random={'osx.', ':&GPL@vboxnet1eth1(\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x1) 03:35:55 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x3, 0x4) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000180)=0x8, 0x4) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r0, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000000)=""/151) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000001c0)={0x800, 0x0, {0x0, 0x3, 0x4, 0x2, 0x3}}) futex(&(0x7f00000000c0)=0x1, 0xf, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x2, 0x2) 03:35:55 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x21}, 0x13280000000}, r1}}, 0x30) [ 312.037798] binder: 19183:19186 got reply transaction with bad transaction stack, transaction 837 has target 19183:0 [ 312.048885] binder: 19183:19186 transaction failed 29201/-71, size 0-0 line 2774 03:35:55 executing program 4 (fault-call:3 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 312.092262] binder: BINDER_SET_CONTEXT_MGR already set [ 312.102565] binder: 19183:19194 ioctl 40046207 0 returned -16 [ 312.120407] binder_alloc: 19183: binder_alloc_buf, no vma [ 312.126311] binder: 19183:19186 transaction failed 29189/-3, size 0-0 line 2967 03:35:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000c43000/0xf000)=nil, 0xf000, &(0x7f0000002300)=""/227) mincore(&(0x7f00003e4000/0x4000)=nil, 0x4000, &(0x7f00000012c0)=""/4096) fcntl$setflags(r0, 0x2, 0x1) tee(r0, r0, 0x3, 0x2) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) ioctl(r0, 0x8, &(0x7f0000000140)="e4582738f8096382ba6ecef7f2a104bcd18cfd0183b864ba1ddb860dd9dc628d8493aa2b77d5a3cd62aa0fe925f7d80c1299b05056cc285dd6c2253c125b1ee0e584e79ae2f26e") r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 312.135434] binder: 19183:19194 got reply transaction with no transaction stack [ 312.143050] binder: 19183:19194 transaction failed 29201/-71, size 0-0 line 2759 [ 312.153174] binder: release 19183:19186 transaction 837 out, still active [ 312.160264] binder: undelivered TRANSACTION_COMPLETE [ 312.165438] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.172809] binder: send failed reply for transaction 837, target dead [ 312.176644] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 03:35:55 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 312.198137] binder: undelivered TRANSACTION_ERROR: 29189 [ 312.203784] binder: undelivered TRANSACTION_ERROR: 29201 03:35:55 executing program 6: socket$nl_xfrm(0xa, 0x3, 0x87) r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0649d55931130000000000010000000000aafe80000000000000f7ff0000000000aa000000000700cdc99cfc3022d108b082104f5d83f870d53c0b8d9958ee1d3a00ccedce18bba5a2eb7e065eed2485254b54c25b0ebd1bf3ab8e3b0878130975ff02814e1ae3130b2340834633c93483065f99eeb6000e3a9e50d2bae1123725261b57365bc73b5d9799fc5aff981e67bd53c2b6ab2958bcc6a57214c6a4fb07ff80fb366a403165c1cac1472b893728df40b3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)={0x0, 0x4, [0x0, 0x8cb]}) unshare(0x400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0x3, 0x1, 0x48000000000, 0x7f, 0xd1b, 0x40, 0x5, 0xa4d0, 0x5, 0x0, 0x7fff, 0x4, 0x4, 0x8, 0x4000000]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x6}}}, &(0x7f0000000300)=0x84) 03:35:55 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x408, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x0, 0x3000, 0x610, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0x110, 0x110, 0x110, 0x230, 0x230, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f0000000040), {[{{@ipv6={@remote, @dev={0xfe, 0x80, [], 0x17}, [0xff], [0xff, 0x0, 0xff, 0xffffffff], 'bond_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x3b, 0xffff, 0x2, 0x2}, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', 0x10001}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d3, 0x660d9acf, 0x3f}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x8, 0xffe0000000000000, 0x3ff}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x0, 0x7, 0x8, 0x100, 0x1f, @mcast2, @mcast1, @empty, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xff0000ff, 0xff000000], 0x4, 0x1008}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x7fffffff, 0x8, 0x7ff}, {0x3, 0x8, 0x7}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r3 = fcntl$getown(r2, 0x9) fcntl$setownex(r2, 0xf, &(0x7f00000005c0)={0x3, r3}) shmctl$SHM_UNLOCK(r1, 0xc) 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x2, 0x0, &(0x7f0000664fc0)={0x0, 0x0, 0x0, 0x20}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x48) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffff7f04f90415ae967d9f"]) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000340)=0xe8) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = geteuid() getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) sendmsg$netlink(r3, &(0x7f0000000800)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)=[{&(0x7f0000000200)={0x1c, 0x2e, 0x104, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0x20, @u64=0x5}]}, 0x1c}, {&(0x7f0000000400)={0x1f0, 0x33, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="d7bb7dbdd891eb2243068706d5493385564520db3dc272ccde81fc70fd0f593370db5b2ee768ef2861bbe6f201eb6f3fba5ee4ac1a1fdb24fabbaebd06c805a5216292d25ae758b96f569428db9856d4380bd0a36d42cf9a78f94f5db7e799e29ae57934820e7512d702f442d212ded06421df247ef6de63e7ae3417361888e9777c0674d83f431e0c6e4a5f7119898bcd8705a05f696d7c122f89496fc1c1ed1e23b5c369f61aeccd0b5f7549", @nested={0xc0, 0x24, [@typed={0x8, 0x6f, @uid=r6}, @generic="21ac55f5172a738f864bbcbf857a28dd9e713cb25bfd9c5b882fed8680cf4bb13e34ee653ead76aeadc0172924587739c2900020d48c4fd03f010f4df4bdb6ff79e4272115e4d8f4f38e681e1f9784", @typed={0x5c, 0x1e, @binary="36e71a02c0a3c48ee970c273c29ecaf6a5e9fed61d3b429972301cf6065f3404f641df662fa03a7548a72b05332e7a2f670cacd3182f433bcf33c48c5424553558621537bd23055275e55928dcd7e6a128e06c86e96b"}, @typed={0x8, 0x4c, @uid=r7}]}, @typed={0x8, 0x83, @pid=r5}, @generic="e25a7d7aacc91cf23c659ef607b4ca276c3c17ee141461846d91b0d6b757f27cf6f982a72ebcb7b62b225aac53ab96705a090cffb445e1716bcd64e55ae94af2824cd90a0c255a43ffa4553c61b552ea5c56a7b0fcb61a6c53a72f", @typed={0xc, 0xffffffff, @u64=0x80000000}, @typed={0x4, 0x51, @binary}]}, 0x1f0}], 0x2, &(0x7f00000007c0)=[@cred={0x20, 0x1, 0x2, r1, r8, r9}, @cred={0x20, 0x1, 0x2, r1, r10, r11}], 0x40, 0x8800}, 0x40000) [ 312.332233] FAULT_INJECTION: forcing a failure. [ 312.332233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.344110] CPU: 1 PID: 19218 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 312.351484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.360852] Call Trace: [ 312.363470] dump_stack+0x1c9/0x2b4 [ 312.367163] ? dump_stack_print_info.cold.2+0x52/0x52 [ 312.372393] should_fail.cold.4+0xa/0x1a [ 312.376489] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:35:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000edfb55ff2d0d90b542efa1ba110084600000005"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x100, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f00000000c0)={0x40cae510}, 0x8) 03:35:55 executing program 7: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffe00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000940)="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", 0x1000, 0x6f07}, {&(0x7f00000000c0), 0x0, 0xff}, {&(0x7f0000000100)="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", 0xfd, 0x1}], 0x1000, &(0x7f0000000280)) mount$9p_fd(0x170, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 312.381628] ? wait_for_completion+0x8d0/0x8d0 [ 312.386268] ? trace_hardirqs_on+0x10/0x10 [ 312.390532] ? kasan_check_read+0x11/0x20 [ 312.394703] ? rcu_is_watching+0x8c/0x150 [ 312.398893] ? rcu_pm_notify+0xc0/0xc0 [ 312.402823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.408410] ? pcpu_alloc+0x190/0x13a0 [ 312.412344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.417933] ? should_fail+0x223/0xbed [ 312.421850] __alloc_pages_nodemask+0x36e/0xdb0 [ 312.426555] ? __alloc_pages_slowpath+0x2d90/0x2d90 03:35:56 executing program 1: r0 = socket(0x0, 0x80002, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001600)=[{&(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x80000001, 0x200, "da70c215a6b0e4dab1872bbe8df6049467903a6cf324e55dc7aff460cd23b3e53591b69eb0e33192be976a1a275e0b2496fac9fc1dee6a207bf81c27f1a644", 0xf}, 0x60, &(0x7f0000001500)=[{&(0x7f0000000180)="5ccac56118f72e33058f99688484d60821c149e0046ff6508ea1c3c084c86104b7fb87514a802ab1cf900b34da50bfe4d6c7cb179c3b85a6ad12c34198502635feb3e34b78e9f4c9bd97ff14d0e9ab98c89f", 0x52}, {&(0x7f00000000c0)="9b19eb8b0eb8d7b01a9a01df411468803a07a3da90527462a27266e118e599fb76807f8ed16d4510d9f1b262865691b67829a3fc5b589878", 0x38}, {&(0x7f0000000200)="69da3c6704edd83789941556749aee3407e29f9346fb07b5535f4c3c556f3590b4a39765fcfef4c19405e15b975dfe18a09d03aa1c40f4b747fa21bf1715e8d0077152fc9d4e3b0d2535a6623b3d86f2fa5f06da39173d39c55432d0fdc292269b911c3c971f3ae8c23a0218084dca289069a9ba306adbabed18b1c608ec7cce839e76795efe36d509c215a7a0c191a46c3f14bbf7ee0239b9fba654273de7bd90d80e5275849289732a09bdaf2233fdf0e3816789f404056299b51c19317bb5fa67d9df737a534356366aac04a59ac4420df3", 0xd3}, {&(0x7f0000000300)="d468c04de4af28241247d7f3dc924423e876da0feb23503e", 0x18}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="a7b39770b14b3d35302db10934250e97ddecfc0b631fe632c5151090798aaf73f21e1438e7fa0fefd61162ffacbcbfd465553fb38d98e7975fed04bcd7556a125a5134a26bffceb0dac470b2a80e7b9a9c9f770c0a50d883fcfafbb6c63ca447e17134afab3fac4980a62c849e53659a433ad8adbf91340f10f4c65e40fe62d7bdfef30f2df76d84985b04951e6ce87b99b0d310", 0x94}, {&(0x7f0000001400)="4921cd5011169835fcf1582c2770841faa2ad538811bc002897d80e1c89296d40b741073bd5d1ec6d0ec7aa088c370fc4becbe285322a905f0ea6e8a36f0b643ac38a54804d484e44cc850418c65f9e143c83a5b515464f50df12f2e83e1ad51096642cc66b06ec061747014815425fa9335113ebebe1bfd96b4ad134e3082e0e2d8d54c934f3a0bf4790c11182a66f401e24fde00dcb635eb6e711dfaad37e805941898b1eb6adad6c1e68ede8b2e28303646d51efb3f0974c2d1ce71e22b5de083ba12463bc1", 0xc7}], 0x7, &(0x7f0000001580)={0x78, 0x116, 0x7, "062ad0a7cf5d71968fdb5969331c3235153d002fe271bd84acd02c63a9215848359f19e9b1023e5d59acdba1569549118e5967f2a2ed113fa7971f84dcad804f4a1af76d91c4e2f1c7bde7fd26f2002682872076aa3a0f42ed68ee44ad20e28d8027"}, 0x78, 0x1}], 0x1, 0x4081) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000100)=""/82, &(0x7f0000000000)=0x52) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001640)={0x5, 0x8, 0x10001, 0x40, 0xffffffffffffff7f, 0x800000000000000, 0x6, 0xfffffffffffffffc, 0x4, 0x48, 0xff, 0x4}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000001680)) [ 312.431645] ? rcu_pm_notify+0xc0/0xc0 [ 312.435573] ? find_held_lock+0x36/0x1c0 [ 312.439674] ? check_same_owner+0x340/0x340 [ 312.444030] cache_grow_begin+0x91/0x710 [ 312.448128] kmem_cache_alloc+0x689/0x760 [ 312.452324] getname_kernel+0x54/0x370 [ 312.456247] kern_path+0x1e/0x40 [ 312.459687] gfs2_mount_meta+0x85/0x2a0 [ 312.463864] ? init_sb+0xcc0/0xcc0 [ 312.467437] ? lock_downgrade+0x8f0/0x8f0 [ 312.471741] ? module_unload_free+0x5d0/0x5d0 [ 312.476292] mount_fs+0xae/0x328 [ 312.479783] ? mpi_free.cold.1+0x19/0x19 [ 312.483879] vfs_kern_mount.part.34+0xdc/0x4e0 [ 312.488486] ? may_umount+0xb0/0xb0 [ 312.492139] ? _raw_read_unlock+0x22/0x30 [ 312.496309] ? __get_fs_type+0x97/0xc0 [ 312.500224] do_mount+0x581/0x30e0 [ 312.503788] ? lock_downgrade+0x8f0/0x8f0 [ 312.507960] ? copy_mount_string+0x40/0x40 [ 312.512212] ? check_same_owner+0x340/0x340 [ 312.516552] ? __check_object_size+0x9d/0x5f2 [ 312.521082] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.526636] ? _copy_from_user+0xdf/0x150 [ 312.530805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.536358] ? copy_mount_options+0x285/0x380 [ 312.540862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.546410] ksys_mount+0x12d/0x140 [ 312.550044] __x64_sys_mount+0xbe/0x150 [ 312.554014] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 312.559040] do_syscall_64+0x1b9/0x820 [ 312.562944] ? finish_task_switch+0x1d3/0x870 [ 312.567438] ? syscall_return_slowpath+0x5e0/0x5e0 [ 312.572359] ? syscall_return_slowpath+0x31d/0x5e0 [ 312.577291] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 312.582653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.587512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.592693] RIP: 0033:0x455ab9 [ 312.595872] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.615224] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.622945] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 312.630204] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 312.638519] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 312.645782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 312.653059] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000007 03:35:56 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) 03:35:56 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x0, 0x4, 0x8}}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f0000000080)=""/7, &(0x7f00000000c0)=""/188, &(0x7f0000000180)=""/72, 0xf000}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000240)="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") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001240)='/dev/sequencer\x00', 0x80, 0x0) getresuid(&(0x7f0000001280)=0x0, &(0x7f00000012c0), &(0x7f0000001300)) r3 = getgid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000001340)={0xb8, 0x0, 0x2, [{{0x0, 0x1, 0x8, 0x0, 0x200, 0xde24, {0x6, 0x2, 0x86, 0xdb3, 0xfff, 0x0, 0x5, 0xffffffffffffffc7, 0x7000, 0x3, 0x1, r2, r3, 0x0, 0x81}}, {0x5, 0x9318, 0xa, 0x0, '/dev/rtc0\x00'}}]}, 0xb8) fstat(r1, &(0x7f0000001400)) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000001480)=""/217, &(0x7f0000001580)=0xd9) flock(r1, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000015c0)={0x0, 0x8, 0x6, 'queue1\x00', 0x5f3}) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000001680)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000016c0)=0x0) capset(&(0x7f0000001700)={0x399f1336, r4}, &(0x7f0000001740)={0x100000001, 0x2, 0xcb8, 0x9, 0x1, 0x3}) write$P9_RCLUNK(r0, &(0x7f0000001780)={0x7, 0x79, 0x2}, 0x7) inotify_init1(0x80800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000017c0)={0x0, 0x4}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001840)={r5, 0x96, "fc6c85d3a72b6356f7f46fc54697058f093786d17892757ca05543feaeb06ba985f74aab86afdb854806ea2d147d17fccaff19351e2d15ed5fab46079801edd49cc3604154628618aa4adf184b1817cd564a29a62d78a73572de861a9b46b4770d578d1466397e26b4b379175295e9f370f74c2b83b4ec0e9b5f8942eb6a5bbbe07fda6ee85a28ef99e24f2453e9c50677b825d90e23"}, &(0x7f0000001900)=0x9e) r6 = dup(r1) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001b00)={0x6, 0xfff, &(0x7f0000001940)="cb2ac6d5fcc0009dcd67395c2d8793390ab4221a71b2510f4fd50d304b3c357f126befaf7d67a4aaa82f416bc0c1f64984ee65163df3d4d482c0d0337c7d705f15e75aa8de08e3af8a2551b17178e9eaf631e9cff82bd3898c578ec1e1f64aaaf60d04c3750fd46270e4d64e91014cad3ae03e4da3348384be52c33151c63b55f180512ba7f2788a3998de61fed0f70b42155f1f748e02e8638a6321", &(0x7f0000001a00)="7c150e620a218635d830c5900a655f2d12b1151f2ff7fa9f2d600b5cb0b9732c8e9c105a4d1bdffd934c716f225b3ad69d99451810fcfc944419678f59cda5ee1a918536a2b2fb4ba0aab3b54a22e23fe0c46979dda6776974e6fd1ca4103e0ffb47bbbbe4d31bee6cd72efc8c688deecafc05acc3b6b41d625973d9b37dbb34f580dbd263d4c8a2ca6667136ea97b23a1c8ca5125c63bdaec224b2e43b502934e41934f018e9a322b71bb99588163585af5157d6e7e3daf5cd21a7c05745eca3c70426fd4519bb2a870d3d0156a6ac291740dfc5fed873e0ddba9493998f3b1f3357f3ec1a0d4bbe254b3f834bdd5dd", 0x9c, 0xf0}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) r7 = semget$private(0x0, 0x0, 0x20) semctl$GETPID(r7, 0x3, 0xb, &(0x7f0000001b40)=""/104) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001c00)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000001c80)={0x10, 0x30, 0xfa00, {&(0x7f0000001bc0), 0x0, {0xa, 0x4e21, 0x1, @local, 0x100000001}, r8}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001cc0), 0x111, 0x1009}}, 0x20) fcntl$getflags(r0, 0x40b) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000001d40)=0xfffffffffffffffb) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000001d80)=0x80000000) 03:35:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'ipddp0\x00'}, 0x18) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x109000) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) r4 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r4, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:56 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x0, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x9, 0x4, 0x100000000, 0x4, 0x1, 0x100, 0x7, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={r1, 0x2000000001}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0xffffffffffffffff, 0x80000001, 0xffffffffffffffff, 0xeb7, 0x40, 0x8}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)="6c696d697462de74083f473c2a1f29a99c7300") ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000000c0)=""/100) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000040)=""/57) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x0, 0x3}, 0x8) inotify_init() 03:35:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8001, 0x20000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @broadcast}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1000}, 0x40002000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001540)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000001680)={@multicast1, @multicast1, 0x0}, &(0x7f00000016c0)=0xc) getpeername(0xffffffffffffffff, &(0x7f0000001700)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001780)=0x80) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000017c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000001800)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001880)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000018c0)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f00000019c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a00)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000001b00)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0}, &(0x7f0000001b80)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001cc0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002e80)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000005180)={@multicast2, @multicast1, 0x0}, &(0x7f00000051c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000005200)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000005240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000005280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000052c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000005300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005340)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000005480)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000054c0)={0x0, @broadcast, @remote}, &(0x7f0000005500)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000005540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005580)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000005680)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000056c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005700)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000005740)={@loopback, @broadcast, 0x0}, &(0x7f0000005780)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000006540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000006500)={&(0x7f0000001d00)=ANY=[@ANYBLOB="040d0000", @ANYRES16=r1, @ANYBLOB="0a002abd7000ffdbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="ac00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400f7ffffff38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000001000008000100", @ANYRES32=r3, @ANYBLOB="6002020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100010008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040007000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="980202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000800fd01020000000600dd03080000000101bf00000400000700ff08060000000500ff080400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000008000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r11, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400ffff080001000000000000000000700005000020ff00000001003303ffffffff000007000600000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000900000008000100", @ANYRES32=r12, @ANYBLOB="6c020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002f0d000008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400df00000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001c00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ffffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="ac0002005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400ff010007faa60000d00e0306010000000300000208000000ff0101400100000000008a01050000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000000800010073ef1cec78f7706a8c98b99bb01d35cb6608ee16144c64eac68fc2f916c90c2ff227e278640ee8f9143d5f2de8d9bf25e7f1ae0caa4035511a34dcb3f399b365e4c20fda37de563e698e054ce1c9c193384cd31f4810ac98c10ccd1eebb849423b87dc3a68fa09e0c6ac6845a23d1ab923672dc9dbbf391fe4b810df6b0979d00a4444b937653b2f5f17ac2d01b60e3c81f6fd3ca1071a73dfd64bb5e00af1c64cdfc8d74494cb601bf4e796", @ANYRES32=r20, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000008000100", @ANYRES32=r21, @ANYBLOB="7c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400feffffff08000600", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="800202004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400090004ff070b0000fdff06043f000000000000040800000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400000005860100000008002802050000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400f9ffffff08000100", @ANYRES32=r26, @ANYBLOB="b400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400a7070000"], 0xd04}, 0x1, 0x0, 0x0, 0x4}, 0x20000814) r28 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") r29 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r29, 0x0) fsetxattr(r28, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 312.975675] gfs2: gfs2 mount does not exist 03:35:56 executing program 2: shmget(0x1, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) r0 = shmget(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:35:56 executing program 4 (fault-call:3 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x267db4a38c62ed90, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)=0x9) r3 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r3, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000700)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000003004000018010000180100103002000048030000480300004803000004000000872d27c3b7447b0e42281b3b6020590ce489adf091512e2b220c26a000db9e3192e9020fe0f14209f0a822a3d5c0066c51b8abe07e0d5664f9ec53c91a9ab168acdb470e2c8f2c85044b4415ae34ce692ad338f197a9669e4aa729b3a515fd9fa98527419b033f55f29e75ed3fcda6b38634233ba467fde52343af81d8c5022dcd9a4ea7c9335c5a406cf3bd953d72a846f3f6d1649c1bfd", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434c415353494659000000000000000000000000000000000000000000000800000000000000ac1414bbe000000100000000ffffff0000000000000000000000000000000000000000000000000000ff0000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000004000700000003000169726c616e30000000000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x480) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x89) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), 0x4) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0xffff}) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x79, 0x800) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x7fffffff}) [ 313.056628] binder: 19222:19226 got reply transaction with bad transaction stack, transaction 842 has target 19222:0 [ 313.067535] binder: 19222:19226 transaction failed 29201/-71, size 0-0 line 2774 [ 313.126423] binder: BINDER_SET_CONTEXT_MGR already set [ 313.137148] binder: 19222:19281 ioctl 40046207 0 returned -16 [ 313.153579] binder_alloc: 19222: binder_alloc_buf, no vma [ 313.159393] binder: 19222:19226 transaction failed 29189/-3, size 0-0 line 2967 [ 313.209230] binder: 19222:19281 got reply transaction with no transaction stack [ 313.216895] binder: 19222:19281 transaction failed 29201/-71, size 0-0 line 2759 03:35:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8a07000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:35:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x8001) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in=@rand_addr, @in6=@dev}, {@in=@broadcast, 0x0, 0x833}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 03:35:56 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x1, [0x7]}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={r3, 0x1e, "e85e4186a92cc58c655967acec0c852c5f90f366e2b9b0873100b67857bf"}, &(0x7f00000000c0)=0x26) 03:35:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000140)=""/109, &(0x7f00000001c0)=0x6d) 03:35:56 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x80, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000400)="d1452a5cdc4fa36441df7389cd8459a0407b1222f4e1756e35c7") shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@local, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0xf0, r2, r3, r4, r5, 0x80, 0x4}, 0x100000001, 0x5, 0x401, 0x3, r6, r7, 0x2}) shmctl$SHM_UNLOCK(0x0, 0xc) [ 313.360087] binder: undelivered TRANSACTION_ERROR: 29189 [ 313.365816] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.390949] binder: release 19222:19226 transaction 842 out, still active [ 313.398137] binder: undelivered TRANSACTION_COMPLETE [ 313.403314] binder: undelivered TRANSACTION_ERROR: 29201 03:35:57 executing program 3: shmget(0x1, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) r0 = shmget(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 313.418398] binder: BINDER_SET_CONTEXT_MGR already set [ 313.429610] binder: 19297:19303 ioctl 40046207 0 returned -16 [ 313.436758] binder: send failed reply for transaction 842, target dead [ 313.454189] binder: 19297:19303 transaction failed 29189/-22, size 0-0 line 2852 [ 313.464259] FAULT_INJECTION: forcing a failure. [ 313.464259] name failslab, interval 1, probability 0, space 0, times 0 [ 313.476074] CPU: 1 PID: 19304 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 313.483547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.492918] Call Trace: [ 313.495554] dump_stack+0x1c9/0x2b4 [ 313.499223] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.504708] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 313.509845] ? kernel_text_address+0x79/0xf0 [ 313.514297] should_fail.cold.4+0xa/0x1a 03:35:57 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x375, 0x5, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)="6e6d8f3b2778bc732f75") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc)=0x7, 0x37) acct(0x0) r3 = dup(r2) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x5) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/205) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x20004000, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000400)=0x3, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', r5}) signalfd4(r0, &(0x7f00000003c0)={0xe814}, 0x8, 0x800) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000040)=0x81, 0x4) write$P9_RFLUSH(r3, &(0x7f0000000440)={0x7, 0x6d, 0x2}, 0x7) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000002c0)="4993816c1c2e4edcf6a51a3e3e7b2cb8", 0x10) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000000100), 0x8000fffffffe) [ 313.518401] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 313.523548] ? graph_lock+0x170/0x170 [ 313.527378] ? save_stack+0x43/0xd0 [ 313.531034] ? kasan_kmalloc+0xc4/0xe0 [ 313.534960] ? find_held_lock+0x36/0x1c0 [ 313.539061] ? __lock_is_held+0xb5/0x140 [ 313.543167] ? check_same_owner+0x340/0x340 [ 313.547515] ? rcu_note_context_switch+0x730/0x730 [ 313.549827] binder_alloc: binder_alloc_mmap_handler: 19297 20001000-20004000 already mapped failed -16 [ 313.552467] __should_failslab+0x124/0x180 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) mq_getsetattr(r2, &(0x7f0000000140)={0x0, 0x13, 0x3, 0x55b3, 0x8000, 0xffffffffffff8899, 0x8, 0x2}, &(0x7f0000000180)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) fgetxattr(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='user.]eth\t\x00\x00'], &(0x7f0000000280)=""/85, 0x55) [ 313.552587] should_failslab+0x9/0x14 [ 313.552612] kmem_cache_alloc_node_trace+0x26f/0x770 [ 313.575241] __kmalloc_node+0x33/0x70 [ 313.579076] kvmalloc_node+0x65/0xf0 [ 313.582830] __list_lru_init+0x56d/0x7c0 [ 313.586927] ? list_lru_destroy+0x4d0/0x4d0 [ 313.591280] ? __lockdep_init_map+0x105/0x590 [ 313.595807] ? __init_waitqueue_head+0x9e/0x150 [ 313.600504] ? init_wait_entry+0x1c0/0x1c0 [ 313.604765] ? __lockdep_init_map+0x105/0x590 [ 313.609295] sget_userns+0x755/0xf20 [ 313.613037] ? test_gfs2_super+0x50/0x50 03:35:57 executing program 2: shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmget(0x2, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x94, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x821, &(0x7f0000ff3000/0x4000)=nil) shmget(0x3, 0x2000, 0x78001060, &(0x7f0000ffe000/0x2000)=nil) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmget(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x2000, 0x54000010, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) [ 313.617126] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 313.621993] ? destroy_unused_super.part.11+0x110/0x110 [ 313.627387] ? rcu_read_lock_sched_held+0x108/0x120 [ 313.632432] ? kmem_cache_free+0x25c/0x2d0 [ 313.636695] ? putname+0xf7/0x130 [ 313.640173] ? filename_lookup+0x39c/0x510 [ 313.644432] ? filename_parentat.isra.58+0x570/0x570 [ 313.649561] ? cap_capable+0x1f9/0x260 [ 313.653481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.655713] binder: 19297:19313 got reply transaction with no transaction stack 03:35:57 executing program 3: clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) socketpair(0x0, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000440)={{0x16, @rand_addr=0x75b, 0x4e23, 0x0, 'wrr\x00', 0xe, 0x0, 0x3c}, {@broadcast, 0x4e22, 0x2, 0x10000, 0x6, 0x7}}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="081a0000000000000d7b66380f28db24463a2b2a3919213fd7738a4b7b7c3a66d7e28ef5c6953d73cd2f33c5b07ff685718106c57b74158f8c9788f49a2dea00a0be9b078f66ed8e51049d01cea0a8bf57d170e86f8a2c387dac25dbb1261f21c4dda6a319e8dd9514c9f9ffd1ea361faedf270a48a12065378e0ac1b04b07daa9d6b15dd3ab2ce89640bcd794000000000000", @ANYRES16=r2, @ANYBLOB="050025bd7000ffdbdf250400000008000400feffffff30000200140001000000000000000000000000000000000008000900ffff0000080006000180000008000400000400001800020014000100ff0200000000000000000000000000010800050004000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x4, 0xb3, [], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f00000002c0)=""/179}, &(0x7f0000000400)=0x78) [ 313.659063] ? security_capable+0x99/0xc0 [ 313.659086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.659104] ? ns_capable_common+0x13f/0x170 [ 313.659124] ? test_gfs2_super+0x50/0x50 [ 313.659141] sget+0x10b/0x150 [ 313.659157] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 313.659175] gfs2_mount_meta+0x12f/0x2a0 [ 313.659189] ? init_sb+0xcc0/0xcc0 [ 313.659208] ? module_unload_free+0x5d0/0x5d0 [ 313.659229] mount_fs+0xae/0x328 [ 313.659243] ? mpi_free.cold.1+0x19/0x19 [ 313.659265] vfs_kern_mount.part.34+0xdc/0x4e0 [ 313.666803] binder: 19297:19313 transaction failed 29201/-71, size 0-0 line 2759 [ 313.670880] ? may_umount+0xb0/0xb0 [ 313.670899] ? _raw_read_unlock+0x22/0x30 [ 313.670913] ? __get_fs_type+0x97/0xc0 [ 313.670933] do_mount+0x581/0x30e0 [ 313.739563] ? lock_downgrade+0x8f0/0x8f0 [ 313.743717] ? copy_mount_string+0x40/0x40 [ 313.747944] ? __check_object_size+0x9d/0x5f2 [ 313.752456] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.758071] ? _copy_from_user+0xdf/0x150 [ 313.762235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.767768] ? copy_mount_options+0x285/0x380 [ 313.772260] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.777808] ksys_mount+0x12d/0x140 [ 313.781551] __x64_sys_mount+0xbe/0x150 [ 313.785523] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 313.790629] do_syscall_64+0x1b9/0x820 [ 313.794512] ? finish_task_switch+0x1d3/0x870 [ 313.799001] ? syscall_return_slowpath+0x5e0/0x5e0 [ 313.803942] ? syscall_return_slowpath+0x31d/0x5e0 [ 313.808876] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 313.814256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.819109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.824375] RIP: 0033:0x455ab9 [ 313.827551] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.847208] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.854908] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 313.862166] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 313.869436] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 313.876709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 313.883979] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000008 [ 313.896181] gfs2: gfs2 mount does not exist [ 313.955572] binder_alloc: 19297: binder_alloc_buf, no vma [ 313.961446] binder: 19297:19303 transaction failed 29189/-3, size 0-0 line 2967 03:35:57 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/208) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) getpgrp(r1) sched_getattr(r1, &(0x7f0000000180), 0x181, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) shmget(0x1, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 314.012111] binder: undelivered TRANSACTION_ERROR: 29189 [ 314.026721] binder: undelivered TRANSACTION_ERROR: 29189 [ 314.032475] binder: undelivered TRANSACTION_ERROR: 29201 03:35:57 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0xdc0f020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 314.090465] IPVS: ftp: loaded support on port[0] = 21 [ 314.223851] binder: 19343:19344 got reply transaction with bad transaction stack, transaction 851 has target 19343:0 [ 314.234884] binder: 19343:19344 transaction failed 29201/-71, size 0-0 line 2774 [ 314.254958] binder: BINDER_SET_CONTEXT_MGR already set 03:35:57 executing program 4 (fault-call:3 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:35:57 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) capget(&(0x7f0000000040)={0x399f1736, r0}, &(0x7f0000000080)={0xfffffffffffffffe, 0xffffffffffffff57, 0x4, 0x5, 0x10000, 0xff}) 03:35:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000840)) close(r2) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000800)) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) setsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000140)=0xd5, 0x4) 03:35:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f00000003c0)="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") r1 = socket$inet(0x2, 0x2, 0x7) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @dev}, &(0x7f0000000180)=0x8) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x100000001) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x81, 0x4}) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002580)=[{0x0, 0x0, &(0x7f00000013c0), 0x2c2, &(0x7f00000001c0), 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0xc8}], 0x1}}], 0x40000000000015f, 0x0, 0x0) [ 314.273687] binder: 19343:19346 ioctl 40046207 0 returned -16 [ 314.285714] binder: 19343:19350 got reply transaction with no transaction stack [ 314.286190] binder_alloc: 19343: binder_alloc_buf, no vma [ 314.293343] binder: 19343:19350 transaction failed 29201/-71, size 0-0 line 2759 [ 314.306725] binder: 19343:19344 transaction failed 29189/-3, size 0-0 line 2967 [ 314.309885] IPVS: ftp: loaded support on port[0] = 21 03:35:57 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x3000, 0x78000009, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000fed000/0x13000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:35:57 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 314.338511] binder: release 19343:19344 transaction 851 out, still active [ 314.345670] binder: undelivered TRANSACTION_COMPLETE [ 314.350857] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.359700] binder: send failed reply for transaction 851, target dead [ 314.369383] binder: undelivered TRANSACTION_ERROR: 29189 [ 314.375170] binder: undelivered TRANSACTION_ERROR: 29201 03:35:58 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x1, 0x80, 0x1, 0x1, 0x1, 0x2}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @rand_addr}, &(0x7f0000000080)=0xc) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@mcast2, 0x2, r1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x10001, 0x6, 0x208, 0x7, 0x73, 0x800, 0xb0, 0x1f, 0x0}, &(0x7f0000000480)=0x20) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000004c0)={{0x5, 0x7, 0x5, 0x9000000000, 'syz1\x00', 0x2c}, 0x6, 0x8, 0xfffffffffffffff7, r6, 0x3, 0x9, 'syz0\x00', &(0x7f0000000440)=['\x00', '}\x00', '%{+:wlan0*eth1S)\x00'], 0x14, [], [0x100000001, 0xfffffffffffffff8, 0x4, 0x6]}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r5, 0x1}, 0xffffffffffffff39) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)="122bea07051b8758fda4a4a358f4262f53108234f72aeca3107f5a0613a4aa943700d2cc6b40e9b29fac411526e787d523a343de87ff42bba4ac3b8a72d2e78f181b8ceddeee44a437d959460a4850b38120b9e6a118e234fc3b524bf1d761e6ba13427d6c8bea43642a3f2b39f2025e39", &(0x7f00000002c0)="b68bb798c368ebac1a4b3bb117da15d48cfad3e3920887a198bf03ecd19567f172de1a873951e8ce53290ab48a7c8448680cf405c4e7b7414f33e44da1b78ca92b8ec72573ef31bf1a4afe6c058f08963b524e3fb4b06c85af5860f0be2bdae77605e14fce62d3315c87826a4e1502930cfc3ae0fbc9db6f68987fffd88ea4777b022253e77a7df480"}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d4a5f8f762070dd9fee4ef9e654a306dc9eed9cacc3fab9558689a63f4026109b3d270efb5a78e672d5848bbd5e2f8ee79c11938e4dea660a0160733b9f821bf8073313a14500fc7ee71b8f77f3b36af3230e33d330f20531d08bdd88852a3b3058410f601435cd17787c5c840bbc55f75f64") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000140), 0x30, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) ioprio_get$uid(0x0, r2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:35:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpid() ptrace$getregs(0xc, r1, 0x7, &(0x7f0000000000)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") set_mempolicy(0x4003, &(0x7f0000000040)=0xfffffffffffffffd, 0x3f) [ 314.522319] FAULT_INJECTION: forcing a failure. [ 314.522319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.534329] CPU: 1 PID: 19375 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 314.541716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.551094] Call Trace: [ 314.553708] dump_stack+0x1c9/0x2b4 [ 314.557353] ? dump_stack_print_info.cold.2+0x52/0x52 [ 314.562575] ? kasan_check_read+0x11/0x20 [ 314.566759] should_fail.cold.4+0xa/0x1a [ 314.570862] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.576008] ? trace_hardirqs_on+0x10/0x10 [ 314.580280] ? find_held_lock+0x36/0x1c0 [ 314.584369] ? trace_hardirqs_on+0x10/0x10 [ 314.588631] ? lock_downgrade+0x8f0/0x8f0 [ 314.592808] ? kasan_check_read+0x11/0x20 [ 314.596976] ? rcu_is_watching+0x8c/0x150 [ 314.601142] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 314.605583] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 314.610007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.615556] ? should_fail+0x223/0xbed [ 314.619458] __alloc_pages_nodemask+0x36e/0xdb0 [ 314.624126] ? kernel_text_address+0x79/0xf0 [ 314.628565] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 314.633594] ? find_held_lock+0x36/0x1c0 [ 314.637675] ? check_same_owner+0x340/0x340 [ 314.642015] cache_grow_begin+0x91/0x710 [ 314.646101] kmem_cache_alloc_trace+0x6a5/0x780 [ 314.650785] ? kasan_check_write+0x14/0x20 [ 314.655026] ? do_raw_spin_lock+0xc1/0x200 [ 314.659278] sget_userns+0x1cf/0xf20 [ 314.662996] ? test_gfs2_super+0x50/0x50 [ 314.667086] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 314.671947] ? destroy_unused_super.part.11+0x110/0x110 [ 314.677315] ? rcu_read_lock_sched_held+0x108/0x120 [ 314.682333] ? kmem_cache_free+0x25c/0x2d0 [ 314.686578] ? putname+0xf7/0x130 [ 314.690046] ? filename_lookup+0x39c/0x510 [ 314.694298] ? filename_parentat.isra.58+0x570/0x570 [ 314.699414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.704962] ? cap_capable+0x1f9/0x260 [ 314.708856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.714399] ? security_capable+0x99/0xc0 [ 314.718557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.724092] ? ns_capable_common+0x13f/0x170 [ 314.728507] ? test_gfs2_super+0x50/0x50 [ 314.732573] sget+0x10b/0x150 [ 314.735680] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 314.740523] gfs2_mount_meta+0x12f/0x2a0 [ 314.744577] ? init_sb+0xcc0/0xcc0 [ 314.748109] ? module_unload_free+0x5d0/0x5d0 [ 314.752640] mount_fs+0xae/0x328 [ 314.756011] ? mpi_free.cold.1+0x19/0x19 [ 314.760081] vfs_kern_mount.part.34+0xdc/0x4e0 [ 314.764656] ? may_umount+0xb0/0xb0 [ 314.768273] ? _raw_read_unlock+0x22/0x30 [ 314.772410] ? __get_fs_type+0x97/0xc0 [ 314.776301] do_mount+0x581/0x30e0 [ 314.779849] ? lock_downgrade+0x8f0/0x8f0 [ 314.783989] ? copy_mount_string+0x40/0x40 [ 314.788242] ? check_same_owner+0x340/0x340 [ 314.792569] ? __check_object_size+0x9d/0x5f2 [ 314.797086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.802638] ? _copy_from_user+0xdf/0x150 [ 314.806784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.812327] ? copy_mount_options+0x285/0x380 [ 314.816825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.822374] ksys_mount+0x12d/0x140 [ 314.826002] __x64_sys_mount+0xbe/0x150 [ 314.829982] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 314.835030] do_syscall_64+0x1b9/0x820 [ 314.838929] ? finish_task_switch+0x1d3/0x870 [ 314.843431] ? syscall_return_slowpath+0x5e0/0x5e0 [ 314.848371] ? syscall_return_slowpath+0x31d/0x5e0 [ 314.853317] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 314.858690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.863543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.868729] RIP: 0033:0x455ab9 [ 314.871913] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.891168] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.898878] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 314.906158] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 314.913433] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 314.920704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 314.927972] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000009 [ 314.940521] gfs2: gfs2 mount does not exist 03:35:58 executing program 2: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmget(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x220, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000040)=""/139, 0x8b, 0x10020, &(0x7f0000000100)={0xa, 0x4e23, 0x50b, @loopback, 0x1}, 0x1c) r2 = getpgrp(0x0) fcntl$setown(r1, 0x8, r2) shmctl$SHM_UNLOCK(0x0, 0xc) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="0237fd59fc9cca50ddbcf25cc83d6d345f8f762070c8039c7aaab176ecadaf4e76412eb2bfea227bd6f1389bf27eb3b8159fd585a95d641abf45eedb69e99d19da268c643ac2d0f12bdadaef8c5ec0e6eb5c437f3caaaa0f00d8890dda1df62e7c499ecfb34abf3d58844d90cdbe412abc8d5caebfbb318861eae5d3ab67da39f565dfaf0c93c0335d4811bd2917e6cfdc5a8eaf86dec5df3623e106d356c4a32db523276d5466401d68a4c0c2bb0690ca2510ebe960cb5fe870f5f48b51729af9b80930be3b36403ac171ae7b63c9") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'syz_tun\x00', 0x3}) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 315.035665] binder: 19380:19382 got reply transaction with bad transaction stack, transaction 856 has target 19380:0 [ 315.046922] binder: 19380:19382 transaction failed 29201/-71, size 0-0 line 2774 [ 315.207542] binder: BINDER_SET_CONTEXT_MGR already set [ 315.220803] binder_alloc: 19380: binder_alloc_buf, no vma [ 315.226588] binder: 19380:19382 transaction failed 29189/-3, size 0-0 line 2967 [ 315.267793] binder: 19380:19404 ioctl 40046207 0 returned -16 [ 315.310325] binder: 19380:19414 got reply transaction with no transaction stack [ 315.318012] binder: 19380:19414 transaction failed 29201/-71, size 0-0 line 2759 [ 315.372733] binder: send failed reply for transaction 856 to 19380:19382 [ 315.393171] binder: undelivered TRANSACTION_ERROR: 29189 [ 315.398830] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.424115] binder: undelivered TRANSACTION_COMPLETE [ 315.429356] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.434905] binder: undelivered TRANSACTION_ERROR: 29189 03:36:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x2272, &(0x7f0000979fff)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x30b82) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)) 03:36:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) sendto(r1, &(0x7f00000002c0)="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", 0x1000, 0x800, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x50080000}, 0x80) 03:36:00 executing program 3: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x7fffffff, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x4e20, 0x807}, 0x1c) 03:36:00 executing program 4 (fault-call:3 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:00 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x800, 0x280100) 03:36:00 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x80000000000000) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x40605346, &(0x7f00000000c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)="2f70726f632f7379732f6e01742f697076342f76732f6c626c635f65787069726174696f6e00", 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000580)={0x10001}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000007c0)={0x6, 0x0, 'client0\x00', 0x1, "f0c6c5b44df7d060", "79593ded2db18095eb4a577e09e16801841dfab09a3cbc8518f370f400139d7f", 0x0, 0x4}) finit_module(0xffffffffffffffff, &(0x7f0000000240)="0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000780)={0x200006}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x0, 0x2}}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x44bf, 0x40000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000001c0)={{0x0, 0x2, 0xfff, 0x3, 0xcce}, 0xffffffff, 0xb57a}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) 03:36:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 316.708632] FAULT_INJECTION: forcing a failure. [ 316.708632] name failslab, interval 1, probability 0, space 0, times 0 [ 316.709962] binder: 19431:19438 got reply transaction with bad transaction stack, transaction 861 has target 19431:0 [ 316.720276] CPU: 0 PID: 19434 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 316.720294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.731166] binder: 19431:19438 transaction failed 29201/-71, size 0-0 line 2774 [ 316.738446] Call Trace: [ 316.738474] dump_stack+0x1c9/0x2b4 [ 316.738496] ? dump_stack_print_info.cold.2+0x52/0x52 [ 316.738514] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 316.738532] ? kernel_text_address+0x79/0xf0 [ 316.738557] should_fail.cold.4+0xa/0x1a [ 316.738577] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 316.738598] ? graph_lock+0x170/0x170 [ 316.738622] ? save_stack+0x43/0xd0 [ 316.792966] ? kasan_kmalloc+0xc4/0xe0 [ 316.796878] ? find_held_lock+0x36/0x1c0 [ 316.800958] ? __lock_is_held+0xb5/0x140 [ 316.805045] ? check_same_owner+0x340/0x340 [ 316.809379] ? rcu_note_context_switch+0x730/0x730 [ 316.814323] __should_failslab+0x124/0x180 [ 316.818589] should_failslab+0x9/0x14 [ 316.822408] kmem_cache_alloc_node_trace+0x26f/0x770 [ 316.827342] binder: BINDER_SET_CONTEXT_MGR already set [ 316.827531] __kmalloc_node+0x33/0x70 [ 316.836603] kvmalloc_node+0x65/0xf0 [ 316.839835] binder: 19431:19443 ioctl 40046207 0 returned -16 [ 316.840332] __list_lru_init+0x56d/0x7c0 [ 316.840352] ? list_lru_destroy+0x4d0/0x4d0 [ 316.840369] ? __lockdep_init_map+0x105/0x590 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r2, &(0x7f0000000140)={r3, r3, 0x80000001}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10000, 0x0) [ 316.840388] ? __init_waitqueue_head+0x9e/0x150 [ 316.857355] binder_alloc: 19431: binder_alloc_buf, no vma [ 316.859142] ? init_wait_entry+0x1c0/0x1c0 [ 316.859161] ? __lockdep_init_map+0x105/0x590 [ 316.859188] sget_userns+0x755/0xf20 [ 316.859205] ? test_gfs2_super+0x50/0x50 [ 316.859225] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 316.859242] ? destroy_unused_super.part.11+0x110/0x110 [ 316.859257] ? rcu_read_lock_sched_held+0x108/0x120 [ 316.859277] ? kmem_cache_free+0x25c/0x2d0 03:36:00 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) io_setup(0x9, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180), 0x4) io_getevents(r0, 0x8, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000100)={r1, r2+30000000}) [ 316.864080] binder: 19431:19438 transaction failed 29189/-3, size 0-0 line 2967 [ 316.869485] ? putname+0xf7/0x130 [ 316.869502] ? filename_lookup+0x39c/0x510 [ 316.869520] ? filename_parentat.isra.58+0x570/0x570 [ 316.869538] ? cap_capable+0x1f9/0x260 [ 316.869559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.912126] binder: 19431:19443 got reply transaction with no transaction stack [ 316.913256] ? security_capable+0x99/0xc0 [ 316.913280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.913298] ? ns_capable_common+0x13f/0x170 [ 316.913317] ? test_gfs2_super+0x50/0x50 [ 316.913339] sget+0x10b/0x150 [ 316.916835] binder: 19431:19443 transaction failed 29201/-71, size 0-0 line 2759 [ 316.921027] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 316.921045] gfs2_mount_meta+0x12f/0x2a0 [ 316.921059] ? init_sb+0xcc0/0xcc0 [ 316.921083] ? module_unload_free+0x5d0/0x5d0 [ 316.930944] binder: release 19431:19438 transaction 861 out, still active [ 316.935761] mount_fs+0xae/0x328 [ 316.935777] ? mpi_free.cold.1+0x19/0x19 [ 316.935797] vfs_kern_mount.part.34+0xdc/0x4e0 [ 316.935815] ? may_umount+0xb0/0xb0 [ 316.935832] ? _raw_read_unlock+0x22/0x30 [ 316.935851] ? __get_fs_type+0x97/0xc0 [ 316.935873] do_mount+0x581/0x30e0 [ 316.935889] ? lock_downgrade+0x8f0/0x8f0 [ 316.935906] ? copy_mount_string+0x40/0x40 [ 316.935925] ? __check_object_size+0x9d/0x5f2 [ 316.943398] binder: undelivered TRANSACTION_COMPLETE [ 316.947520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.947537] ? _copy_from_user+0xdf/0x150 [ 316.947557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.953104] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.957466] ? copy_mount_options+0x285/0x380 [ 316.957483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.957499] ksys_mount+0x12d/0x140 [ 316.957517] __x64_sys_mount+0xbe/0x150 [ 317.079173] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 317.084189] do_syscall_64+0x1b9/0x820 [ 317.088075] ? finish_task_switch+0x1d3/0x870 [ 317.092567] ? syscall_return_slowpath+0x5e0/0x5e0 [ 317.097488] ? syscall_return_slowpath+0x31d/0x5e0 [ 317.102433] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 317.107793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.112633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.117829] RIP: 0033:0x455ab9 [ 317.121003] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.140352] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.148055] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 317.155326] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 317.162589] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 317.169846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 317.177104] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000a [ 317.185232] binder: send failed reply for transaction 861, target dead 03:36:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x3af) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) sendto$inet6(r0, &(0x7f0000000180)="040300000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac889ff6b11876d886b6621d8d207ccf73f258d55e86eb29406136fcfffffffffbe62159403b96d80345b7cd9c7a67b", 0x4c, 0x0, &(0x7f0000000040)={0xa, 0x800, 0x8000000000000004, @mcast2}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) gettid() r4 = gettid() r5 = getpgid(r4) ioctl(r3, 0xff, &(0x7f00000003c0)="8acf2d7c95274c6618a53a2c73d64b00d1f424c6b1b6a0d455d79f03ebe89b119183b35f3350fbcd12b5b6a9a4fae932055efbc60bfd7651a7c12355699f81815d4ba85b867552a254434458cf8e075cad48285bbeae211f05ad93e7637f5c621be7bae995264b5d6e8da8e6486fe9dbe935609db2467bba1c948152d173c39379f986005e2849172b65c659619b9c0fb016742b874b7eec8fc96f8e2f27b100e9905853f72711e2") fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x2, r5}) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/25) 03:36:00 executing program 4 (fault-call:3 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8a040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 317.209701] binder: undelivered TRANSACTION_ERROR: 29189 [ 317.210671] gfs2: gfs2 mount does not exist [ 317.215326] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.376067] binder: 19461:19464 got reply transaction with bad transaction stack, transaction 866 has target 19461:0 [ 317.386953] binder: 19461:19464 transaction failed 29201/-71, size 0-0 line 2774 [ 317.397321] FAULT_INJECTION: forcing a failure. [ 317.397321] name failslab, interval 1, probability 0, space 0, times 0 [ 317.408783] CPU: 1 PID: 19465 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 317.416172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.425544] Call Trace: [ 317.428169] dump_stack+0x1c9/0x2b4 [ 317.431830] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.437060] ? kasan_check_write+0x14/0x20 [ 317.441329] ? finish_task_switch+0x2ca/0x870 [ 317.445863] should_fail.cold.4+0xa/0x1a [ 317.449962] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 317.455193] ? __schedule+0x884/0x1ed0 [ 317.459114] ? __sched_text_start+0x8/0x8 [ 317.463326] ? find_held_lock+0x36/0x1c0 [ 317.467452] ? __lock_is_held+0xb5/0x140 [ 317.471566] ? check_same_owner+0x340/0x340 [ 317.475929] __should_failslab+0x124/0x180 [ 317.480195] should_failslab+0x9/0x14 [ 317.484023] kmem_cache_alloc_trace+0x2cb/0x780 [ 317.489072] ? __kmalloc_node+0x33/0x70 [ 317.493108] ? __kmalloc_node+0x33/0x70 [ 317.497144] ? rcu_read_lock_sched_held+0x108/0x120 [ 317.502294] __memcg_init_list_lru_node+0x185/0x2d0 [ 317.507462] ? kvfree_rcu+0x20/0x20 [ 317.511128] ? __kmalloc_node+0x47/0x70 [ 317.515132] __list_lru_init+0x46a/0x7c0 [ 317.519218] ? list_lru_destroy+0x4d0/0x4d0 [ 317.523560] ? __lockdep_init_map+0x105/0x590 [ 317.528081] ? __init_waitqueue_head+0x9e/0x150 [ 317.532799] ? init_wait_entry+0x1c0/0x1c0 [ 317.537053] ? __lockdep_init_map+0x105/0x590 [ 317.541592] sget_userns+0x755/0xf20 [ 317.545329] ? test_gfs2_super+0x50/0x50 [ 317.549418] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 317.554274] ? destroy_unused_super.part.11+0x110/0x110 [ 317.559749] ? rcu_read_lock_sched_held+0x108/0x120 [ 317.564799] ? kmem_cache_free+0x25c/0x2d0 [ 317.569065] ? putname+0xf7/0x130 [ 317.572553] ? filename_lookup+0x39c/0x510 03:36:01 executing program 2: shmget(0x1, 0x1000, 0x101, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0xc80, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) set_thread_area(&(0x7f0000000140)={0x80000000, 0x20000000, 0x1000, 0x7fff, 0x7, 0x0, 0x100000000, 0x5}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:36:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e00000010000000000000000080012000000040000000000000000000600000000000000000000000000000000000000000000000000000000f0ed176c000001ac1443d5f1822fdfb306fac42f6ec3d9b0c614bb000000000000000000000000030004000000000000000000e000000100000000"], 0x80}}, 0x0) 03:36:01 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) getsockname(0xffffffffffffff9c, &(0x7f0000000b80)=@hci={0x1f, 0x0}, &(0x7f0000000c00)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c80)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)={@multicast2, @remote, 0x0}, &(0x7f0000000d00)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000fc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001040)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001140)=0xe8) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000001640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000018c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000019c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@ipv4={[], [], @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000001b00)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000005000)={@multicast2, @rand_addr, 0x0}, &(0x7f0000005040)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000056c0)={@empty, 0x0}, &(0x7f0000005700)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005740)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000005840)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005e40)={&(0x7f0000005880)={0x584, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x134, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r7}, {0x164, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x27e}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x7c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x256}}, {0x8, 0x6, r18}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x48000}, 0x4) r19 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r20 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r20, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r21 = openat$cgroup_ro(r19, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_mreq(r20, 0x29, 0x14, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) connect$packet(r21, &(0x7f0000000180)={0x11, 0x0, r22, 0x1, 0x9, 0x6, @random="edb15dab958e"}, 0x14) ioctl$int_out(r19, 0x80804531, &(0x7f0000000000)) [ 317.576806] ? filename_parentat.isra.58+0x570/0x570 [ 317.581923] ? cap_capable+0x1f9/0x260 [ 317.585830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.591404] ? security_capable+0x99/0xc0 [ 317.595576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.601124] ? ns_capable_common+0x13f/0x170 [ 317.605554] ? test_gfs2_super+0x50/0x50 [ 317.609637] sget+0x10b/0x150 [ 317.612776] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 317.617645] gfs2_mount_meta+0x12f/0x2a0 [ 317.621728] ? init_sb+0xcc0/0xcc0 [ 317.625294] ? module_unload_free+0x5d0/0x5d0 [ 317.629815] mount_fs+0xae/0x328 [ 317.633456] ? mpi_free.cold.1+0x19/0x19 [ 317.634932] binder_alloc: binder_alloc_mmap_handler: 19461 20001000-20004000 already mapped failed -16 [ 317.637531] vfs_kern_mount.part.34+0xdc/0x4e0 [ 317.637552] ? may_umount+0xb0/0xb0 [ 317.637569] ? _raw_read_unlock+0x22/0x30 [ 317.637584] ? __get_fs_type+0x97/0xc0 [ 317.637607] do_mount+0x581/0x30e0 [ 317.637623] ? lock_downgrade+0x8f0/0x8f0 [ 317.637643] ? copy_mount_string+0x40/0x40 [ 317.675239] ? retint_kernel+0x10/0x10 [ 317.679166] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 317.684220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 317.689035] ? retint_kernel+0x10/0x10 [ 317.692962] ksys_mount+0x12d/0x140 [ 317.696616] __x64_sys_mount+0xbe/0x150 [ 317.700615] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 317.705668] do_syscall_64+0x1b9/0x820 [ 317.709579] ? finish_task_switch+0x1d3/0x870 [ 317.714102] ? syscall_return_slowpath+0x5e0/0x5e0 [ 317.719058] ? syscall_return_slowpath+0x31d/0x5e0 [ 317.724014] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 317.729408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.734292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.738302] binder: BINDER_SET_CONTEXT_MGR already set [ 317.739489] RIP: 0033:0x455ab9 [ 317.739494] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.767373] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.774829] binder: 19461:19472 ioctl 40046207 0 returned -16 [ 317.775124] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 317.775135] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 317.775151] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 317.801724] binder: 19461:19491 got reply transaction with no transaction stack [ 317.802873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 317.802883] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000b 03:36:01 executing program 4 (fault-call:3 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 317.825319] binder: 19461:19491 transaction failed 29201/-71, size 0-0 line 2759 [ 317.827304] gfs2: gfs2 mount does not exist [ 317.867629] binder_alloc: 19461: binder_alloc_buf, no vma 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5, &(0x7f0000000040)="0f5ce53d6d345fe3c0d8f5") r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) r2 = mq_open(&(0x7f00000000c0)="0a00151e39d6804e2924000000", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r2, &(0x7f0000000040), &(0x7f0000356000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:36:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000200)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, &(0x7f0000000700)=""/71, 0x47}, 0x0) 03:36:01 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x3000, 0x78001000, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x300, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') shmget$private(0x0, 0x3000, 0x78000043, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) [ 317.873435] binder: 19461:19490 transaction failed 29189/-3, size 0-0 line 2967 03:36:01 executing program 6: mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') getdents64(r0, &(0x7f00000000c0)=""/81, 0x51) set_robust_list(&(0x7f0000000140)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) getdents64(r0, &(0x7f0000000df0)=""/528, 0xbcc2) 03:36:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x76, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffedc, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 03:36:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) recvmsg(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000023c0)=""/17, 0x11}, {&(0x7f0000002400)=""/18, 0x12}, {&(0x7f0000002440)=""/152, 0x98}], 0xa, 0x0, 0x0, 0x6}, 0x2040) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000002600)={{0x3a, @broadcast, 0x4e24, 0x2, 'sh\x00', 0x0, 0x9, 0x18}, {@local, 0x4e20, 0x3, 0x200, 0x1, 0x627}}, 0x44) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002680)='/dev/rfkill\x00', 0x264042, 0x0) clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580)) fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x2, r2}) recvmsg(r4, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r3, r4) tkill(r2, 0x15) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202001, 0x4) [ 317.900762] binder: release 19461:19464 transaction 866 out, still active [ 317.907938] binder: undelivered TRANSACTION_COMPLETE [ 317.913194] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.934932] binder: undelivered TRANSACTION_ERROR: 29189 [ 317.941054] binder: undelivered TRANSACTION_ERROR: 29201 03:36:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 317.949976] binder: send failed reply for transaction 866, target dead [ 318.046897] FAULT_INJECTION: forcing a failure. [ 318.046897] name failslab, interval 1, probability 0, space 0, times 0 [ 318.058747] CPU: 1 PID: 19505 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 318.066173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.075547] Call Trace: [ 318.078166] dump_stack+0x1c9/0x2b4 [ 318.081824] ? dump_stack_print_info.cold.2+0x52/0x52 [ 318.087043] ? __save_stack_trace+0x8d/0xf0 [ 318.091400] should_fail.cold.4+0xa/0x1a [ 318.095483] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.100600] ? save_stack+0x43/0xd0 [ 318.104260] ? kasan_kmalloc+0xc4/0xe0 [ 318.108160] ? kmem_cache_alloc_trace+0x152/0x780 [ 318.113008] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 318.118264] ? __list_lru_init+0x46a/0x7c0 [ 318.122521] ? sget_userns+0x755/0xf20 [ 318.126411] ? graph_lock+0x170/0x170 [ 318.130248] ? do_mount+0x581/0x30e0 [ 318.133995] ? ksys_mount+0x12d/0x140 [ 318.137844] ? __x64_sys_mount+0xbe/0x150 [ 318.142020] ? do_syscall_64+0x1b9/0x820 [ 318.146106] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.151509] ? find_held_lock+0x36/0x1c0 [ 318.155603] ? __lock_is_held+0xb5/0x140 [ 318.159708] ? check_same_owner+0x340/0x340 [ 318.164062] ? rcu_note_context_switch+0x730/0x730 [ 318.169022] __should_failslab+0x124/0x180 [ 318.173290] should_failslab+0x9/0x14 [ 318.177119] kmem_cache_alloc_trace+0x2cb/0x780 [ 318.181857] ? __kmalloc_node+0x33/0x70 [ 318.185848] ? __kmalloc_node+0x33/0x70 [ 318.189849] ? rcu_read_lock_sched_held+0x108/0x120 [ 318.194902] __memcg_init_list_lru_node+0x185/0x2d0 [ 318.199944] ? kvfree_rcu+0x20/0x20 [ 318.203591] ? __kmalloc_node+0x47/0x70 [ 318.207591] __list_lru_init+0x46a/0x7c0 [ 318.211692] ? list_lru_destroy+0x4d0/0x4d0 [ 318.216047] ? __lockdep_init_map+0x105/0x590 [ 318.220588] ? __init_waitqueue_head+0x9e/0x150 [ 318.225283] ? init_wait_entry+0x1c0/0x1c0 [ 318.229545] ? __lockdep_init_map+0x105/0x590 [ 318.234072] sget_userns+0x755/0xf20 [ 318.237820] ? test_gfs2_super+0x50/0x50 [ 318.241904] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 318.246766] ? destroy_unused_super.part.11+0x110/0x110 [ 318.252149] ? rcu_read_lock_sched_held+0x108/0x120 [ 318.258055] ? kmem_cache_free+0x25c/0x2d0 [ 318.262301] ? putname+0xf7/0x130 [ 318.265757] ? filename_lookup+0x39c/0x510 [ 318.269999] ? filename_parentat.isra.58+0x570/0x570 [ 318.275106] ? cap_capable+0x1f9/0x260 [ 318.278994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.284529] ? security_capable+0x99/0xc0 [ 318.288677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.294209] ? ns_capable_common+0x13f/0x170 [ 318.298618] ? test_gfs2_super+0x50/0x50 [ 318.302673] sget+0x10b/0x150 [ 318.305774] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 318.310619] gfs2_mount_meta+0x12f/0x2a0 [ 318.318846] ? init_sb+0xcc0/0xcc0 [ 318.322400] ? module_unload_free+0x5d0/0x5d0 [ 318.326910] mount_fs+0xae/0x328 [ 318.330269] ? mpi_free.cold.1+0x19/0x19 [ 318.334337] vfs_kern_mount.part.34+0xdc/0x4e0 [ 318.338942] ? may_umount+0xb0/0xb0 [ 318.342568] ? _raw_read_unlock+0x22/0x30 [ 318.346712] ? __get_fs_type+0x97/0xc0 [ 318.350861] do_mount+0x581/0x30e0 [ 318.354418] ? lock_downgrade+0x8f0/0x8f0 [ 318.358565] ? copy_mount_string+0x40/0x40 [ 318.362796] ? check_same_owner+0x340/0x340 [ 318.367114] ? __check_object_size+0x9d/0x5f2 [ 318.371618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.377155] ? _copy_from_user+0xdf/0x150 [ 318.381305] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.387624] ? copy_mount_options+0x285/0x380 [ 318.392119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.397658] ksys_mount+0x12d/0x140 [ 318.401285] __x64_sys_mount+0xbe/0x150 [ 318.405296] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 318.410316] do_syscall_64+0x1b9/0x820 [ 318.414196] ? finish_task_switch+0x1d3/0x870 [ 318.418690] ? syscall_return_slowpath+0x5e0/0x5e0 [ 318.423623] ? syscall_return_slowpath+0x31d/0x5e0 [ 318.428553] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 318.434020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.438870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.444052] RIP: 0033:0x455ab9 [ 318.447231] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.466698] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.475034] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 318.482731] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 318.490089] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 03:36:01 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 03:36:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = fcntl$getown(r1, 0x9) sendmsg$nl_generic(r2, &(0x7f0000003680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000003640)={&(0x7f0000000300)={0x3334, 0x16, 0x200, 0x70bd26, 0x25dfdbff, {0x11}, [@typed={0xc, 0x90, @u64=0x8}, @typed={0x8, 0x31, @ipv4=@multicast1}, @nested={0x5c, 0x81, [@typed={0x14, 0x93, @str='/dev/snapshot\x00'}, @generic="10262ca968cafb3970b34c0a4a33a325761cd4afaa39f289b00b9ed3fc5221d47e17efe445122ad3d1d4706ee000870f43365bf183d24cf0dbe3469cfd66269a1511d32c"]}, @generic="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", @nested={0x1c, 0x25, [@typed={0x8, 0x16, @fd=r1}, @typed={0x8, 0x6, @pid=r3}, @typed={0x8, 0x1, @uid=r4}]}, @generic="7a3b16e0a7695b689ff764e1001d73b4fb2b56b14e9758d0de80ae60bcef9cb78d52d9ee41d04e0905d3f3666f141fb20aed33312a1a1f579d9bd0e2a8e4472e0b5e78ffb2973b299789a5397b947765c35fa1d555b9dedc7ce978dea02732ac1e32bc65b648f9c3cee1e207330b502fbd7e376fb0", @generic="2e1e75a31376cbef287fe7b468b34c2fd2cb8134d816354290dc1cb3d88714e1468e5dd885948462e4a6756ae1fd7e72723614967b9af6621d755b2340ba61d6db3d2749f88f772af4957aceaae64a4f6c8ca8861fd32280156a3f193a27bc4d2a8fcd1f2030b3c00adca4f67a928bd120a6f434e3e42e3ca91b6e55320e25e54ad1a24de5e25d84371c45babc2d23c42954858d0ec58a93366d977556458e84d6c0d0cc2e418bea544d14eeb61d40a78245435dff2c1404861af680117c1b536c5d051c9da095c020699a7e815913780a5ee8835cf0bd8a8ee3d06249db0e05b5", @nested={0x2124, 0x42, [@typed={0x8, 0x37, @u32=0x4}, @typed={0x4, 0x23}, @typed={0x8, 0x1b, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @typed={0x8, 0x4f, @pid=r5}, @generic="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", @generic="3c04070d8cabb80b23c56d26fbafee86f066aac9b8db759ec6de8351d621da7414c43dec820154ff5eff5417e5b2a05418f728bdd74afeff78a83fa93faf7ff1a7aa6d6822a2228791db5c17dca549a2b7", @generic="f4ac8a93ae88fdd4b51056473b7338f22926d80ca310f196cc0f0c69a4a3e8e3c934f2ad07f8f5905b72c7e99737fd7613d9f0949cffe4b44e8c177873b42bf84327d9927b15d7be460add3ee16054de15b1a3b6742822ca4b72ec95ec34d592663e8f2db355eb513b800cc01c01df2c25374bf3e98b28368fb4df335e005e4aec400cd1cc199009d087ead7c24d0312ecf6883ade4a583a45daa0833b563469d827062d4827", @typed={0x8, 0x8, @fd=r1}, @typed={0x1004, 0x86, @binary="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"}]}, @generic="3361427e356f4ca5556f64d87b02d743df0df07bbf7bde53ad"]}, 0x3334}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) lseek(r2, 0x200000000000002, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x4e24}}}, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) [ 318.497356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 318.504620] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000c 03:36:02 executing program 1: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368657461673d706f7369785f61636c5f61639265737326747275737465642c00"]) [ 318.590122] gfs2: gfs2 mount does not exist 03:36:02 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x87) r1 = shmget$private(0x0, 0x4000, 0x78000008, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmget$private(0x0, 0x3000, 0x54000101, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") memfd_create(&(0x7f0000000380)="6d643573756d2c261076626f786e6574303a00", 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000000a7477fc78000000000"], 0x10) socketpair(0x1f, 0x80003, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000040)=0x0) r7 = getpgid(0xffffffffffffffff) kcmp(r6, r7, 0x6, r4, r4) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000140)="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") 03:36:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/4096) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x2, 0xc7}) 03:36:02 executing program 4 (fault-call:3 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f") r3 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) setsockopt$inet_int(r3, 0x0, 0x40, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 03:36:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1b) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1287) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000100)) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0xfffffffffffffd3c}) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0x4}}, 0x18) [ 318.702726] binder: 19525:19527 got reply transaction with bad transaction stack, transaction 871 has target 19525:0 [ 318.714336] binder: 19525:19527 transaction failed 29201/-71, size 0-0 line 2774 [ 318.726971] binder: BINDER_SET_CONTEXT_MGR already set [ 318.751729] binder: 19525:19540 ioctl 40046207 0 returned -16 03:36:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) tee(r1, r1, 0x7fff, 0xa) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f636b7461626c653d74727573746564656d312c6c6f6e6b70726f746f3d6c6f636b5f6e6f6c6f636b2c02299b742f2ac707dcb21456bfca1fbd41fb6df713ae4398e81c10a39a8c01e327581df06a1c7339f6a1985df2f3dbe5b00c179e24f0e554ebce318a895c13f6736a25972a8062ea5a35158b606a2faf47ffc24fcff73951f841387c4dda389c22f4d851ae952b78674bc0eb5fdd786337609521658d3e20c6f46bda0ec35cfc44462c75df62b0cf301bd397b54144dc8b671a6da6a9b5ec0963089f1048a22beb7c3d43679c876db1b2bd861f35a77a5d268feadaa10fb9fab2b242fe5b1d238f0f91470646b04055a7e87097b39b88737b78a1682b014d021f0e7481a711eea946d9144492f3db482dd78af07f02cedff6bfc4d29955ae19ebb14acdb36f6ac1f4c823100ec753f79f90d335b2444fe1a131cd2f675c662193454e570834b91518f34e5e8b5085525612b3e9a7d9ef00f252be5c9ca2243decbd92da57d044667da6fe"]) ioctl$TIOCCONS(r1, 0x541d) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000040)='gfs2\x00', 0x1) ioctl$TCSETSW(r1, 0x5437, &(0x7f0000002000)) [ 318.792975] binder_alloc: 19525: binder_alloc_buf, no vma [ 318.798770] binder: 19525:19527 transaction failed 29189/-3, size 0-0 line 2967 [ 318.798876] binder: 19525:19548 got reply transaction with no transaction stack [ 318.814000] binder: 19525:19548 transaction failed 29201/-71, size 0-0 line 2759 [ 318.868190] FAULT_INJECTION: forcing a failure. [ 318.868190] name failslab, interval 1, probability 0, space 0, times 0 [ 318.879534] CPU: 0 PID: 19558 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 318.886915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.896285] Call Trace: [ 318.898895] dump_stack+0x1c9/0x2b4 [ 318.902532] ? dump_stack_print_info.cold.2+0x52/0x52 [ 318.907741] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.912586] ? __save_stack_trace+0x8d/0xf0 [ 318.916913] should_fail.cold.4+0xa/0x1a [ 318.920974] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.926071] ? save_stack+0x43/0xd0 [ 318.929691] ? kasan_kmalloc+0xc4/0xe0 [ 318.933569] ? kmem_cache_alloc_trace+0x152/0x780 [ 318.938421] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 318.943605] ? __list_lru_init+0x46a/0x7c0 [ 318.947836] ? sget_userns+0x755/0xf20 [ 318.951742] ? graph_lock+0x170/0x170 [ 318.955535] ? do_mount+0x581/0x30e0 [ 318.959263] ? ksys_mount+0x12d/0x140 [ 318.963057] ? __x64_sys_mount+0xbe/0x150 [ 318.967205] ? do_syscall_64+0x1b9/0x820 [ 318.971282] ? find_held_lock+0x36/0x1c0 [ 318.975360] ? __lock_is_held+0xb5/0x140 [ 318.979436] ? check_same_owner+0x340/0x340 [ 318.983759] ? rcu_note_context_switch+0x730/0x730 [ 318.988724] __should_failslab+0x124/0x180 [ 318.992964] should_failslab+0x9/0x14 [ 318.996780] kmem_cache_alloc_trace+0x2cb/0x780 [ 319.001447] ? __kmalloc_node+0x33/0x70 [ 319.005435] ? __kmalloc_node+0x33/0x70 [ 319.009406] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.014421] __memcg_init_list_lru_node+0x185/0x2d0 [ 319.019434] ? kvfree_rcu+0x20/0x20 [ 319.023076] ? __kmalloc_node+0x47/0x70 [ 319.027060] __list_lru_init+0x46a/0x7c0 [ 319.031120] ? list_lru_destroy+0x4d0/0x4d0 [ 319.035562] ? __lockdep_init_map+0x105/0x590 [ 319.040062] ? __init_waitqueue_head+0x9e/0x150 [ 319.044723] ? init_wait_entry+0x1c0/0x1c0 [ 319.048947] ? __lockdep_init_map+0x105/0x590 [ 319.053443] sget_userns+0x755/0xf20 [ 319.057164] ? test_gfs2_super+0x50/0x50 [ 319.061232] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 319.066066] ? destroy_unused_super.part.11+0x110/0x110 [ 319.071421] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.076442] ? kmem_cache_free+0x25c/0x2d0 [ 319.080674] ? putname+0xf7/0x130 [ 319.084122] ? filename_lookup+0x39c/0x510 [ 319.088350] ? filename_parentat.isra.58+0x570/0x570 [ 319.093462] ? cap_capable+0x1f9/0x260 [ 319.097360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.102888] ? security_capable+0x99/0xc0 [ 319.107042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.112571] ? ns_capable_common+0x13f/0x170 [ 319.116971] ? test_gfs2_super+0x50/0x50 [ 319.121029] sget+0x10b/0x150 [ 319.124128] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 319.128966] gfs2_mount_meta+0x12f/0x2a0 [ 319.133034] ? init_sb+0xcc0/0xcc0 [ 319.136573] ? module_unload_free+0x5d0/0x5d0 [ 319.141066] mount_fs+0xae/0x328 [ 319.144424] ? mpi_free.cold.1+0x19/0x19 [ 319.148481] vfs_kern_mount.part.34+0xdc/0x4e0 [ 319.153058] ? may_umount+0xb0/0xb0 [ 319.156677] ? _raw_read_unlock+0x22/0x30 [ 319.160816] ? __get_fs_type+0x97/0xc0 [ 319.164714] do_mount+0x581/0x30e0 [ 319.168259] ? lock_downgrade+0x8f0/0x8f0 [ 319.172401] ? copy_mount_string+0x40/0x40 [ 319.176629] ? __check_object_size+0x9d/0x5f2 [ 319.181139] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.186672] ? _copy_from_user+0xdf/0x150 [ 319.190813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.196366] ? copy_mount_options+0x285/0x380 [ 319.200854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.206387] ksys_mount+0x12d/0x140 [ 319.210015] __x64_sys_mount+0xbe/0x150 [ 319.213995] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 319.219537] do_syscall_64+0x1b9/0x820 [ 319.223415] ? finish_task_switch+0x1d3/0x870 [ 319.227914] ? syscall_return_slowpath+0x5e0/0x5e0 [ 319.232836] ? syscall_return_slowpath+0x31d/0x5e0 [ 319.237765] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 319.243126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.247966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.253147] RIP: 0033:0x455ab9 [ 319.257563] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.276934] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.284653] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 319.291915] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 319.299174] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 319.306436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 03:36:02 executing program 2: r0 = shmget(0x2, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000040)={{0xfffffffffffffffe, 0x2}, 'port1\x00', 0x44, 0x0, 0x5b2, 0xff, 0x1, 0xe9f7, 0x3280000000000, 0x0, 0x5, 0x101}) setrlimit(0x7, &(0x7f0000000140)={0x200, 0xb71c}) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e24}, 0x287) shmctl$SHM_UNLOCK(r0, 0xc) [ 319.313693] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000d [ 319.327224] gfs2: gfs2 mount does not exist [ 319.336945] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.342582] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.354737] binder: send failed reply for transaction 871 to 19525:19527 03:36:02 executing program 4 (fault-call:3 fault-nth:14): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:02 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@loopback, @empty, @multicast2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x400000ffffff94}, {0x0, 0x8}, 0xffffffffffffffff}) 03:36:03 executing program 3: r0 = getpid() sched_setaffinity(r0, 0xffffffffffffff7d, &(0x7f0000000200)=0xb4a2) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r1 = dup(0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008ce000/0x3000)=nil, 0x3000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10800, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x12000}) write$eventfd(r2, &(0x7f0000000400)=0x2, 0x8) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000140)=""/30, 0x1e}, &(0x7f0000000340), 0x4}, 0x20) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000100)=0x5cc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @rand_addr}, &(0x7f0000000240)=0xc) [ 319.381962] binder: undelivered TRANSACTION_COMPLETE [ 319.387249] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.392792] binder: undelivered TRANSACTION_ERROR: 29189 03:36:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x80000080044dff, &(0x7f0000001000)) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0xb00000000000000}, 0x0) 03:36:03 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="72be", 0x2}, {&(0x7f0000000200)="b52b29f90f9399b1066dad49327edb42e7d950568b76a46b44a4b5db78e8ec8d1442fbd294f65cf0798704d28587b9244c99a9fabe0ffe625a35e40ed4e896ffa78a0733319eb03970c4394c7040ac5da2f2b6ffb8f3daf37551c20d619348d70ea8775d707af63f2688edcadcfdf046f76fe66d726d64ca3d1a87e8f779b4247cf10693286e80", 0x87}], 0x2) ioctl$PIO_FONTX(r0, 0x40005504, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x6) [ 319.527895] gfs2: invalid mount option: lonkproto=lock_nolock [ 319.533949] gfs2: can't parse mount arguments 03:36:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000014c0), 0x0, &(0x7f0000001880)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 03:36:03 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4050, r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x200, 0xffc0000000000, 0x84, 0x6, 0x4, 0xa000000000000000, 0x0}, &(0x7f0000000080)=0x20) r2 = getpgid(0x0) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r0, r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e22, 0x2, @remote}}, 0x6, 0xfd11, 0x6, 0x0, 0x4d17bc02}, &(0x7f0000000180)=0x98) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000200)={0x1, 0x2bb}) r4 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) [ 319.569333] FAULT_INJECTION: forcing a failure. [ 319.569333] name failslab, interval 1, probability 0, space 0, times 0 [ 319.580807] CPU: 0 PID: 19580 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 319.588188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.597556] Call Trace: [ 319.600166] dump_stack+0x1c9/0x2b4 [ 319.603816] ? dump_stack_print_info.cold.2+0x52/0x52 [ 319.609114] ? __save_stack_trace+0x8d/0xf0 [ 319.613466] should_fail.cold.4+0xa/0x1a [ 319.617570] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.622782] ? save_stack+0x43/0xd0 [ 319.626427] ? kasan_kmalloc+0xc4/0xe0 [ 319.630322] ? kmem_cache_alloc_trace+0x152/0x780 [ 319.635180] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 319.640381] ? __list_lru_init+0x46a/0x7c0 [ 319.644639] ? sget_userns+0x755/0xf20 [ 319.648712] ? graph_lock+0x170/0x170 [ 319.652595] ? do_mount+0x581/0x30e0 [ 319.656304] ? ksys_mount+0x12d/0x140 [ 319.660093] ? __x64_sys_mount+0xbe/0x150 [ 319.664231] ? do_syscall_64+0x1b9/0x820 [ 319.668305] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.673678] ? find_held_lock+0x36/0x1c0 [ 319.677769] ? __lock_is_held+0xb5/0x140 [ 319.681841] ? check_same_owner+0x340/0x340 [ 319.686173] ? rcu_note_context_switch+0x730/0x730 [ 319.691096] __should_failslab+0x124/0x180 [ 319.695325] should_failslab+0x9/0x14 [ 319.699117] kmem_cache_alloc_trace+0x2cb/0x780 [ 319.703785] ? __kmalloc_node+0x33/0x70 [ 319.707747] ? __kmalloc_node+0x33/0x70 [ 319.711729] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.716747] __memcg_init_list_lru_node+0x185/0x2d0 [ 319.721753] ? kvfree_rcu+0x20/0x20 [ 319.725373] ? __kmalloc_node+0x47/0x70 [ 319.729357] __list_lru_init+0x46a/0x7c0 [ 319.733410] ? list_lru_destroy+0x4d0/0x4d0 [ 319.737721] ? __lockdep_init_map+0x105/0x590 [ 319.742466] ? __init_waitqueue_head+0x9e/0x150 [ 319.747125] ? init_wait_entry+0x1c0/0x1c0 [ 319.751351] ? __lockdep_init_map+0x105/0x590 [ 319.755849] sget_userns+0x755/0xf20 [ 319.759722] ? test_gfs2_super+0x50/0x50 [ 319.763772] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 319.768618] ? destroy_unused_super.part.11+0x110/0x110 [ 319.773982] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.779000] ? kmem_cache_free+0x25c/0x2d0 [ 319.783478] ? putname+0xf7/0x130 [ 319.786927] ? filename_lookup+0x39c/0x510 [ 319.791166] ? filename_parentat.isra.58+0x570/0x570 [ 319.796279] ? cap_capable+0x1f9/0x260 [ 319.800164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.805969] ? security_capable+0x99/0xc0 [ 319.810119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.815670] ? ns_capable_common+0x13f/0x170 [ 319.820087] ? test_gfs2_super+0x50/0x50 [ 319.824152] sget+0x10b/0x150 [ 319.827270] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 319.832107] gfs2_mount_meta+0x12f/0x2a0 [ 319.836159] ? init_sb+0xcc0/0xcc0 [ 319.839705] ? module_unload_free+0x5d0/0x5d0 [ 319.844215] mount_fs+0xae/0x328 [ 319.847597] ? mpi_free.cold.1+0x19/0x19 [ 319.851655] vfs_kern_mount.part.34+0xdc/0x4e0 [ 319.856232] ? may_umount+0xb0/0xb0 [ 319.859859] ? _raw_read_unlock+0x22/0x30 [ 319.863998] ? __get_fs_type+0x97/0xc0 [ 319.867892] do_mount+0x581/0x30e0 [ 319.871421] ? lock_downgrade+0x8f0/0x8f0 [ 319.875588] ? copy_mount_string+0x40/0x40 [ 319.879815] ? check_same_owner+0x340/0x340 [ 319.884151] ? __check_object_size+0x9d/0x5f2 [ 319.888651] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.894185] ? _copy_from_user+0xdf/0x150 [ 319.898500] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.904046] ? copy_mount_options+0x285/0x380 [ 319.908530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.914082] ksys_mount+0x12d/0x140 [ 319.917703] __x64_sys_mount+0xbe/0x150 [ 319.921762] ? ksys_mount+0x140/0x140 [ 319.925553] do_syscall_64+0x1b9/0x820 [ 319.929434] ? finish_task_switch+0x1d3/0x870 [ 319.933922] ? syscall_return_slowpath+0x5e0/0x5e0 [ 319.938842] ? syscall_return_slowpath+0x31d/0x5e0 [ 319.948373] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 319.953732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.958570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.963761] RIP: 0033:0x455ab9 [ 319.966944] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.986197] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.993907] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 320.001172] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 320.008434] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 320.015712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 320.022974] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000e [ 320.031858] gfs2: gfs2 mount does not exist [ 320.037473] gfs2: invalid mount option: lonkproto=lock_nolock [ 320.043518] gfs2: can't parse mount arguments 03:36:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="018d0135f7db3d7c435fa58f33c14f305f43e37724b213ac5b03e9678732c1051ed7201992fcbd11cdc490d6799fc391fa9a1e6b591fa51e6c45ba7896037de41def7da10216f1d79ae4851ed28dc0bc7943e6c907fa"], 0x179) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)="8f02e5e198a02b0b6bcc39eef88cda12acaea1d6c377c40c2ccdcf0b5f718e85935fd5224c069b734facb1c64c900d1add9465c3bb0317773a896050cb2fccff17ee9075010fc836d21c0c250b1c3a2e988086c4bf3962907e69241621") 03:36:03 executing program 4 (fault-call:3 fault-nth:15): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 320.076539] binder: 19582:19592 got reply transaction with bad transaction stack, transaction 876 has target 19582:0 [ 320.087945] binder: 19582:19592 transaction failed 29201/-71, size 0-0 line 2774 03:36:03 executing program 7: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000380000000000200000001000084811f01e10000001e000000150000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x8000, &(0x7f0000013900)) unlink(&(0x7f0000000080)='./file0\x00') [ 320.166437] binder: BINDER_SET_CONTEXT_MGR already set [ 320.188425] binder: 19582:19601 ioctl 40046207 0 returned -16 [ 320.268121] FAULT_INJECTION: forcing a failure. [ 320.268121] name failslab, interval 1, probability 0, space 0, times 0 [ 320.280506] CPU: 1 PID: 19617 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 320.287979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.297352] Call Trace: [ 320.299988] dump_stack+0x1c9/0x2b4 [ 320.303663] ? dump_stack_print_info.cold.2+0x52/0x52 [ 320.308888] ? kasan_check_write+0x14/0x20 [ 320.313149] ? finish_task_switch+0x2ca/0x870 [ 320.317720] should_fail.cold.4+0xa/0x1a [ 320.321823] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 320.326968] ? __schedule+0x884/0x1ed0 [ 320.330973] ? do_mount+0x581/0x30e0 [ 320.334718] ? ksys_mount+0x12d/0x140 [ 320.338645] ? __sched_text_start+0x8/0x8 [ 320.342830] ? find_held_lock+0x36/0x1c0 [ 320.346930] ? __lock_is_held+0xb5/0x140 [ 320.351028] ? check_same_owner+0x340/0x340 [ 320.355415] __should_failslab+0x124/0x180 [ 320.359679] should_failslab+0x9/0x14 [ 320.363493] kmem_cache_alloc_trace+0x2cb/0x780 [ 320.368192] ? __kmalloc_node+0x33/0x70 [ 320.372191] ? __kmalloc_node+0x33/0x70 [ 320.376183] ? rcu_read_lock_sched_held+0x108/0x120 [ 320.381221] __memcg_init_list_lru_node+0x185/0x2d0 [ 320.386286] ? kvfree_rcu+0x20/0x20 [ 320.389929] ? __kmalloc_node+0x47/0x70 [ 320.393927] __list_lru_init+0x46a/0x7c0 [ 320.397984] ? list_lru_destroy+0x4d0/0x4d0 [ 320.401812] binder: release 19582:19592 transaction 876 out, still active [ 320.402332] ? __lockdep_init_map+0x105/0x590 [ 320.402356] ? __init_waitqueue_head+0x9e/0x150 [ 320.402370] ? init_wait_entry+0x1c0/0x1c0 [ 320.402390] ? __lockdep_init_map+0x105/0x590 [ 320.409432] binder: undelivered TRANSACTION_COMPLETE [ 320.413875] sget_userns+0x755/0xf20 [ 320.413892] ? test_gfs2_super+0x50/0x50 [ 320.413912] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 320.418601] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.422793] ? destroy_unused_super.part.11+0x110/0x110 [ 320.422807] ? rcu_read_lock_sched_held+0x108/0x120 [ 320.422826] ? kmem_cache_free+0x25c/0x2d0 [ 320.464990] ? putname+0xf7/0x130 [ 320.468444] ? filename_lookup+0x39c/0x510 [ 320.472791] ? filename_parentat.isra.58+0x570/0x570 [ 320.477918] ? cap_capable+0x1f9/0x260 [ 320.482003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.487745] ? security_capable+0x99/0xc0 [ 320.491896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.498298] ? ns_capable_common+0x13f/0x170 [ 320.502702] ? test_gfs2_super+0x50/0x50 [ 320.506755] sget+0x10b/0x150 [ 320.509868] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 320.514714] gfs2_mount_meta+0x12f/0x2a0 [ 320.519310] ? init_sb+0xcc0/0xcc0 [ 320.522848] ? module_unload_free+0x5d0/0x5d0 [ 320.527439] mount_fs+0xae/0x328 [ 320.530907] ? mpi_free.cold.1+0x19/0x19 [ 320.534967] vfs_kern_mount.part.34+0xdc/0x4e0 [ 320.539549] ? may_umount+0xb0/0xb0 [ 320.543171] ? _raw_read_unlock+0x22/0x30 [ 320.547337] ? __get_fs_type+0x97/0xc0 [ 320.551227] do_mount+0x581/0x30e0 [ 320.554766] ? lock_downgrade+0x8f0/0x8f0 [ 320.558914] ? copy_mount_string+0x40/0x40 [ 320.563147] ? __check_object_size+0x9d/0x5f2 [ 320.567660] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.573202] ? _copy_from_user+0xdf/0x150 [ 320.577349] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.582886] ? copy_mount_options+0x285/0x380 [ 320.588079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.593618] ksys_mount+0x12d/0x140 [ 320.597263] __x64_sys_mount+0xbe/0x150 [ 320.601237] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 320.606271] do_syscall_64+0x1b9/0x820 [ 320.610155] ? finish_task_switch+0x1d3/0x870 [ 320.614761] ? syscall_return_slowpath+0x5e0/0x5e0 [ 320.619862] ? syscall_return_slowpath+0x31d/0x5e0 [ 320.624901] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 320.630264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.635118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.640300] RIP: 0033:0x455ab9 [ 320.643476] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:03 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80000, 0x0) socket(0xb, 0x3, 0x7fff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)={0x3, 0x20, [0x1, 0x8, 0x8, 0x4, 0x1, 0x1, 0x80000000, 0x101]}) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xc3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a00fcad1beb2bfe454a7c29c1000c6604001000e0c900020000000000000000000000000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 03:36:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="f6"], 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xffffffffffffff00, 0x3f, 0x6, 0x7, 0x3, 0x3f, 0x3, 0x260, 0x40, 0x119, 0x1, 0x81, 0x38, 0x1, 0x100000001, 0xbb, 0x9}, [{0x5, 0x6, 0x0, 0x5, 0x7fff, 0x6, 0x100, 0x3}], "99ba882f2cb30d7f1e07f5841afcd8acdca5312a51368128e752dc8c24258c13187d91c9103a65ff9ffe2714b28814955770a049f7c73470c35f17590f1c8b83f67b72c2465f", [[], [], [], [], [], [], [], [], [], []]}, 0xabe) ioctl(r1, 0x80044100, &(0x7f0000001f64)) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0xf) [ 320.662836] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.670549] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 320.677822] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 320.685095] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 320.692454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 320.699917] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000f [ 320.710354] gfs2: gfs2 mount does not exist 03:36:04 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) epoll_create1(0x80000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002bc0)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="2f98d10eae4f5173b8ccfd2ea65609779da5db3bc0fa1c709b0604c33e7d66cc769645dfc1dbd01cdc263f63ee303d6962fe29ece43e60fe32bedf8b55dca16d5dcf5c841e96d1dfd81f7918ae10cbed75354b3b0e78a80d7a80d999a9f2f7802f19bd0dc51c7c6deec6bcf6ad34c517ece0da7ee2e2e2c87221c5"]}) 03:36:04 executing program 4 (fault-call:3 fault-nth:16): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 320.712355] binder: send failed reply for transaction 876, target dead [ 320.721793] binder: send failed reply for transaction 878 to 19582:19601 03:36:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 320.762559] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 320.767391] binder: undelivered TRANSACTION_COMPLETE [ 320.776312] binder: undelivered TRANSACTION_ERROR: 29189 [ 320.780490] REISERFS (device loop7): using ordered data mode [ 320.787786] reiserfs: using flush barriers [ 320.792702] REISERFS warning (device loop7): sh-458 journal_init_dev: cannot init journal device 'unknown-block(0,128)': -6 [ 320.804141] REISERFS warning (device loop7): sh-462 journal_init: unable to initialize journal device [ 320.853157] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 320.872636] REISERFS (device loop7): using ordered data mode [ 320.878637] reiserfs: using flush barriers [ 320.918785] REISERFS warning (device loop7): sh-458 journal_init_dev: cannot init journal device 'unknown-block(0,128)': -6 [ 320.930348] REISERFS warning (device loop7): sh-462 journal_init: unable to initialize journal device 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8800, 0x0) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000002c0)="f43335f84f084e0f8305d6090ff3a4741a432b37e0af05c3c6d2a1ee4df720a62f99dfafac97d341cd28c1d193a2b8d04302e8ce96d1fe5d409bc3d156ccacfd918f2e15e5159b1c87823f2f205248282f97170653d195f772bd018e6076b956ca13604cdc9cecf4077a5ca815e5a249d8b2db901f3b3aefc1ef9525c671e793632e1634eb9255588fca27d338753ced13e8", 0x92}, {&(0x7f0000000200)="58c932eae12d7fca79efbf6f805cf2fda9abd7952deb742b920831e3660ffa4575852580bbad7b3271b4782b6fda618a76d4dad25f3eb2a8fbf12e1451", 0x3d}], 0x2, 0x0, 0x0, 0x11}, 0x1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000280)={0x1}) [ 321.012662] FAULT_INJECTION: forcing a failure. [ 321.012662] name failslab, interval 1, probability 0, space 0, times 0 [ 321.024449] CPU: 0 PID: 19655 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 321.027168] binder: 19652:19656 got reply transaction with bad transaction stack, transaction 880 has target 19652:0 [ 321.031834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.031843] Call Trace: [ 321.031875] dump_stack+0x1c9/0x2b4 03:36:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000080)=0x80) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) 03:36:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xf07) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7}, 0x7) fcntl$setstatus(r1, 0x4, 0x4bff) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x1000, 0x9}) pwrite64(r1, &(0x7f0000002200)="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", 0xe00, 0x0) [ 321.031901] ? dump_stack_print_info.cold.2+0x52/0x52 [ 321.031923] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 321.031939] ? __save_stack_trace+0x8d/0xf0 [ 321.031964] should_fail.cold.4+0xa/0x1a [ 321.031989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.042804] binder: 19652:19656 transaction failed 29201/-71, size 0-0 line 2774 [ 321.052042] ? save_stack+0x43/0xd0 [ 321.052061] ? kasan_kmalloc+0xc4/0xe0 [ 321.052078] ? kmem_cache_alloc_trace+0x152/0x780 [ 321.052091] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 321.052102] ? __list_lru_init+0x46a/0x7c0 [ 321.052115] ? sget_userns+0x755/0xf20 [ 321.052131] ? graph_lock+0x170/0x170 [ 321.052150] ? do_mount+0x581/0x30e0 [ 321.105992] binder: BINDER_SET_CONTEXT_MGR already set [ 321.107130] ? ksys_mount+0x12d/0x140 [ 321.107146] ? __x64_sys_mount+0xbe/0x150 [ 321.107164] ? do_syscall_64+0x1b9/0x820 [ 321.107189] ? find_held_lock+0x36/0x1c0 [ 321.107209] ? __lock_is_held+0xb5/0x140 [ 321.107234] ? check_same_owner+0x340/0x340 [ 321.116012] binder: 19652:19657 ioctl 40046207 0 returned -16 [ 321.119192] ? rcu_note_context_switch+0x730/0x730 [ 321.119217] __should_failslab+0x124/0x180 [ 321.119236] should_failslab+0x9/0x14 [ 321.119252] kmem_cache_alloc_trace+0x2cb/0x780 [ 321.119266] ? __kmalloc_node+0x33/0x70 [ 321.119286] ? __kmalloc_node+0x33/0x70 [ 321.124644] binder_alloc: 19652: binder_alloc_buf, no vma [ 321.128286] ? rcu_read_lock_sched_held+0x108/0x120 [ 321.128310] __memcg_init_list_lru_node+0x185/0x2d0 [ 321.128328] ? kvfree_rcu+0x20/0x20 [ 321.128346] ? __kmalloc_node+0x47/0x70 [ 321.128368] __list_lru_init+0x46a/0x7c0 [ 321.128388] ? list_lru_destroy+0x4d0/0x4d0 [ 321.128406] ? __lockdep_init_map+0x105/0x590 [ 321.128423] ? __init_waitqueue_head+0x9e/0x150 [ 321.128440] ? init_wait_entry+0x1c0/0x1c0 [ 321.132327] binder: 19652:19656 transaction failed 29189/-3, size 0-0 line 2967 [ 321.136385] ? __lockdep_init_map+0x105/0x590 [ 321.136408] sget_userns+0x755/0xf20 [ 321.136422] ? test_gfs2_super+0x50/0x50 [ 321.136441] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 321.136464] ? destroy_unused_super.part.11+0x110/0x110 [ 321.141139] binder: 19652:19657 got reply transaction with no transaction stack [ 321.144580] ? rcu_read_lock_sched_held+0x108/0x120 [ 321.144598] ? kmem_cache_free+0x25c/0x2d0 [ 321.144617] ? putname+0xf7/0x130 [ 321.144635] ? filename_lookup+0x39c/0x510 [ 321.144652] ? filename_parentat.isra.58+0x570/0x570 [ 321.144671] ? cap_capable+0x1f9/0x260 [ 321.144691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.144710] ? security_capable+0x99/0xc0 [ 321.148851] binder: 19652:19657 transaction failed 29201/-71, size 0-0 line 2759 [ 321.153090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.153106] ? ns_capable_common+0x13f/0x170 [ 321.153125] ? test_gfs2_super+0x50/0x50 [ 321.153141] sget+0x10b/0x150 [ 321.153159] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 321.336906] gfs2_mount_meta+0x12f/0x2a0 [ 321.340981] ? init_sb+0xcc0/0xcc0 [ 321.344602] ? module_unload_free+0x5d0/0x5d0 [ 321.349286] mount_fs+0xae/0x328 [ 321.352653] ? mpi_free.cold.1+0x19/0x19 [ 321.356719] vfs_kern_mount.part.34+0xdc/0x4e0 [ 321.361296] ? may_umount+0xb0/0xb0 [ 321.364915] ? _raw_read_unlock+0x22/0x30 [ 321.369067] ? __get_fs_type+0x97/0xc0 [ 321.372973] do_mount+0x581/0x30e0 [ 321.376511] ? lock_downgrade+0x8f0/0x8f0 [ 321.380829] ? copy_mount_string+0x40/0x40 [ 321.385078] ? __check_object_size+0x9d/0x5f2 [ 321.389768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.395479] ? _copy_from_user+0xdf/0x150 [ 321.399627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.405162] ? copy_mount_options+0x285/0x380 [ 321.409741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.415273] ksys_mount+0x12d/0x140 [ 321.418917] __x64_sys_mount+0xbe/0x150 [ 321.423720] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 321.428735] do_syscall_64+0x1b9/0x820 [ 321.432611] ? syscall_slow_exit_work+0x500/0x500 [ 321.437454] ? syscall_return_slowpath+0x5e0/0x5e0 [ 321.442376] ? syscall_return_slowpath+0x31d/0x5e0 [ 321.447299] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 321.452665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.457503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.462689] RIP: 0033:0x455ab9 [ 321.465880] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.485257] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.492964] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 321.500746] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 03:36:05 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x1ff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="39a33cf74b685a74ee9ab155e5306fdfcbe93ca20b8564c56421a9af5207e1dc3c4f38888601848ed900c6ee0cb19e330870ef60a2425cec3a98d2bb349a", 0x3e, 0x8000}], 0x40000, &(0x7f0000000140)={[{@nouser_xattr='nouser_xattr'}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x800}}, {@nobarrier='nobarrier'}, {@noinline_data='noinline_data'}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0xffffffd5}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) [ 321.508009] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 321.515280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 321.522545] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000010 [ 321.533170] gfs2: gfs2 mount does not exist [ 321.537659] binder: send failed reply for transaction 880 to 19652:19656 [ 321.552309] binder: undelivered TRANSACTION_COMPLETE [ 321.557758] binder: undelivered TRANSACTION_ERROR: 29201 03:36:05 executing program 4 (fault-call:3 fault-nth:17): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:05 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000003c0)={0x6, 0x0, [{0xef7}, {0xbd6, 0x0, 0xd7}, {0xa78, 0x0, 0x4}, {0x94e, 0x0, 0x4a}, {0x832, 0x0, 0x20}, {0xbf1, 0x0, 0x3}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)=""/138, 0x8a}], 0x1, &(0x7f00000010c0)=""/141, 0x8d}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) readlinkat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=""/209, 0xd1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 03:36:05 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x9, @broadcast}}) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x381, 0x7b, 0x40000000002}, 0x7) 03:36:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 321.563278] binder: undelivered TRANSACTION_ERROR: 29189 [ 321.572429] binder: undelivered TRANSACTION_ERROR: 29189 [ 321.578163] binder: undelivered TRANSACTION_ERROR: 29201 [ 321.779854] binder: 19675:19687 got reply transaction with bad transaction stack, transaction 885 has target 19675:0 [ 321.791108] binder: 19675:19687 transaction failed 29201/-71, size 0-0 line 2774 [ 321.793541] FAULT_INJECTION: forcing a failure. [ 321.793541] name failslab, interval 1, probability 0, space 0, times 0 [ 321.810262] CPU: 1 PID: 19688 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 321.817827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.827305] Call Trace: [ 321.830709] dump_stack+0x1c9/0x2b4 [ 321.834622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 321.839847] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 321.844721] ? __save_stack_trace+0x8d/0xf0 [ 321.849087] should_fail.cold.4+0xa/0x1a [ 321.853184] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.858318] ? save_stack+0x43/0xd0 [ 321.861973] ? kasan_kmalloc+0xc4/0xe0 [ 321.865894] ? kmem_cache_alloc_trace+0x152/0x780 [ 321.870810] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 321.876092] ? __list_lru_init+0x46a/0x7c0 [ 321.880359] ? sget_userns+0x755/0xf20 [ 321.884275] ? graph_lock+0x170/0x170 [ 321.888104] ? do_mount+0x581/0x30e0 [ 321.891841] ? ksys_mount+0x12d/0x140 [ 321.895714] ? __x64_sys_mount+0xbe/0x150 [ 321.899860] ? do_syscall_64+0x1b9/0x820 [ 321.904028] ? find_held_lock+0x36/0x1c0 [ 321.908103] ? __lock_is_held+0xb5/0x140 [ 321.912172] ? check_same_owner+0x340/0x340 [ 321.916577] ? rcu_note_context_switch+0x730/0x730 [ 321.921855] __should_failslab+0x124/0x180 [ 321.926087] should_failslab+0x9/0x14 [ 321.929880] kmem_cache_alloc_trace+0x2cb/0x780 [ 321.934645] ? __kmalloc_node+0x33/0x70 [ 321.938627] ? __kmalloc_node+0x33/0x70 [ 321.942597] ? rcu_read_lock_sched_held+0x108/0x120 [ 321.947622] __memcg_init_list_lru_node+0x185/0x2d0 [ 321.952646] ? kvfree_rcu+0x20/0x20 [ 321.956262] ? __kmalloc_node+0x47/0x70 [ 321.960334] __list_lru_init+0x46a/0x7c0 [ 321.964400] ? list_lru_destroy+0x4d0/0x4d0 [ 321.968731] ? __lockdep_init_map+0x105/0x590 [ 321.973245] ? __init_waitqueue_head+0x9e/0x150 [ 321.977906] ? init_wait_entry+0x1c0/0x1c0 [ 321.982144] ? __lockdep_init_map+0x105/0x590 [ 321.986638] sget_userns+0x755/0xf20 [ 321.990365] ? test_gfs2_super+0x50/0x50 [ 321.994455] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 321.999727] ? destroy_unused_super.part.11+0x110/0x110 [ 322.005103] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.010206] ? kmem_cache_free+0x25c/0x2d0 [ 322.014447] ? putname+0xf7/0x130 [ 322.017916] ? filename_lookup+0x39c/0x510 [ 322.022161] ? filename_parentat.isra.58+0x570/0x570 [ 322.027275] ? cap_capable+0x1f9/0x260 [ 322.031180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.036723] ? security_capable+0x99/0xc0 [ 322.040869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.046402] ? ns_capable_common+0x13f/0x170 [ 322.050804] ? test_gfs2_super+0x50/0x50 [ 322.054858] sget+0x10b/0x150 [ 322.057958] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 322.062801] gfs2_mount_meta+0x12f/0x2a0 [ 322.066856] ? init_sb+0xcc0/0xcc0 [ 322.070391] ? module_unload_free+0x5d0/0x5d0 [ 322.074883] mount_fs+0xae/0x328 [ 322.078249] ? mpi_free.cold.1+0x19/0x19 [ 322.082307] vfs_kern_mount.part.34+0xdc/0x4e0 [ 322.086887] ? may_umount+0xb0/0xb0 [ 322.090514] ? _raw_read_unlock+0x22/0x30 [ 322.094675] ? __get_fs_type+0x97/0xc0 [ 322.098562] do_mount+0x581/0x30e0 [ 322.102102] ? lock_downgrade+0x8f0/0x8f0 [ 322.106248] ? copy_mount_string+0x40/0x40 [ 322.110495] ? __check_object_size+0x9d/0x5f2 [ 322.115002] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.120541] ? _copy_from_user+0xdf/0x150 [ 322.124702] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.130234] ? copy_mount_options+0x285/0x380 [ 322.134734] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.140279] ksys_mount+0x12d/0x140 [ 322.143904] __x64_sys_mount+0xbe/0x150 [ 322.147883] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 322.152924] do_syscall_64+0x1b9/0x820 [ 322.156802] ? finish_task_switch+0x1d3/0x870 [ 322.161289] ? syscall_return_slowpath+0x5e0/0x5e0 [ 322.166221] ? syscall_return_slowpath+0x31d/0x5e0 [ 322.171151] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 322.176527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.181383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.188218] RIP: 0033:0x455ab9 [ 322.191406] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.210702] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.218424] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 322.225860] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 322.233140] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 322.240400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 322.247676] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000011 [ 322.269401] gfs2: gfs2 mount does not exist 03:36:05 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x1490c0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000100)=0x101) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x100400) 03:36:05 executing program 4 (fault-call:3 fault-nth:18): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 322.281657] binder: BINDER_SET_CONTEXT_MGR already set [ 322.291125] binder: 19675:19692 ioctl 40046207 0 returned -16 [ 322.299966] binder_alloc: 19675: binder_alloc_buf, no vma [ 322.306101] binder: 19675:19687 transaction failed 29189/-3, size 0-0 line 2967 [ 322.315731] binder: 19675:19692 got reply transaction with no transaction stack [ 322.323692] binder: 19675:19692 transaction failed 29201/-71, size 0-0 line 2759 03:36:05 executing program 3: mprotect(&(0x7f000023e000/0x3000)=nil, 0x3000, 0x10000201000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x50, &(0x7f0000001380)}, 0x10) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)='cgroup{\x00') [ 322.354641] binder: release 19675:19687 transaction 885 out, still active [ 322.361822] binder: undelivered TRANSACTION_COMPLETE [ 322.367008] binder: undelivered TRANSACTION_ERROR: 29201 03:36:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x800) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000000c0)=0x5f1e9c50) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) [ 322.480240] binder: undelivered TRANSACTION_ERROR: 29189 [ 322.486067] binder: undelivered TRANSACTION_ERROR: 29201 [ 322.497816] FAULT_INJECTION: forcing a failure. [ 322.497816] name failslab, interval 1, probability 0, space 0, times 0 [ 322.509143] CPU: 1 PID: 19704 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 322.516603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.524850] binder: send failed reply for transaction 885, target dead [ 322.525962] Call Trace: [ 322.525991] dump_stack+0x1c9/0x2b4 [ 322.526015] ? dump_stack_print_info.cold.2+0x52/0x52 [ 322.526038] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 322.526055] ? __save_stack_trace+0x8d/0xf0 [ 322.526078] should_fail.cold.4+0xa/0x1a [ 322.557256] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 322.562370] ? save_stack+0x43/0xd0 [ 322.565987] ? kasan_kmalloc+0xc4/0xe0 [ 322.569869] ? kmem_cache_alloc_trace+0x152/0x780 [ 322.574703] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 322.579888] ? __list_lru_init+0x46a/0x7c0 [ 322.584131] ? sget_userns+0x755/0xf20 [ 322.588020] ? graph_lock+0x170/0x170 [ 322.591833] ? do_mount+0x581/0x30e0 [ 322.595546] ? ksys_mount+0x12d/0x140 [ 322.599352] ? __x64_sys_mount+0xbe/0x150 [ 322.603519] ? do_syscall_64+0x1b9/0x820 [ 322.607583] ? find_held_lock+0x36/0x1c0 [ 322.611656] ? __lock_is_held+0xb5/0x140 [ 322.615731] ? check_same_owner+0x340/0x340 [ 322.620047] ? rcu_note_context_switch+0x730/0x730 [ 322.624969] __should_failslab+0x124/0x180 [ 322.629208] should_failslab+0x9/0x14 [ 322.633000] kmem_cache_alloc_trace+0x2cb/0x780 [ 322.637663] ? __kmalloc_node+0x33/0x70 [ 322.641643] ? __kmalloc_node+0x33/0x70 [ 322.645623] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.650646] __memcg_init_list_lru_node+0x185/0x2d0 [ 322.655661] ? kvfree_rcu+0x20/0x20 [ 322.659279] ? __kmalloc_node+0x47/0x70 [ 322.663258] __list_lru_init+0x46a/0x7c0 [ 322.667320] ? list_lru_destroy+0x4d0/0x4d0 [ 322.671634] ? __lockdep_init_map+0x105/0x590 [ 322.676121] ? __init_waitqueue_head+0x9e/0x150 [ 322.680781] ? init_wait_entry+0x1c0/0x1c0 [ 322.685029] ? __lockdep_init_map+0x105/0x590 [ 322.689553] sget_userns+0x755/0xf20 [ 322.693279] ? test_gfs2_super+0x50/0x50 [ 322.697348] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 322.702188] ? destroy_unused_super.part.11+0x110/0x110 [ 322.707557] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.712566] ? kmem_cache_free+0x25c/0x2d0 [ 322.716809] ? putname+0xf7/0x130 [ 322.720267] ? filename_lookup+0x39c/0x510 [ 322.724508] ? filename_parentat.isra.58+0x570/0x570 [ 322.729606] ? cap_capable+0x1f9/0x260 [ 322.733502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.739049] ? security_capable+0x99/0xc0 [ 322.743203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.748748] ? ns_capable_common+0x13f/0x170 [ 322.753161] ? test_gfs2_super+0x50/0x50 [ 322.757223] sget+0x10b/0x150 [ 322.760322] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 322.765158] gfs2_mount_meta+0x12f/0x2a0 [ 322.769210] ? init_sb+0xcc0/0xcc0 [ 322.772745] ? module_unload_free+0x5d0/0x5d0 [ 322.777249] mount_fs+0xae/0x328 [ 322.780605] ? mpi_free.cold.1+0x19/0x19 [ 322.784661] vfs_kern_mount.part.34+0xdc/0x4e0 [ 322.789244] ? may_umount+0xb0/0xb0 [ 322.792861] ? _raw_read_unlock+0x22/0x30 [ 322.797008] ? __get_fs_type+0x97/0xc0 [ 322.800893] do_mount+0x581/0x30e0 [ 322.804430] ? lock_downgrade+0x8f0/0x8f0 [ 322.808588] ? copy_mount_string+0x40/0x40 [ 322.812837] ? __check_object_size+0x9d/0x5f2 [ 322.817341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.822890] ? _copy_from_user+0xdf/0x150 [ 322.827039] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.832570] ? copy_mount_options+0x285/0x380 [ 322.837072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.842605] ksys_mount+0x12d/0x140 [ 322.846225] __x64_sys_mount+0xbe/0x150 [ 322.850203] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 322.855212] do_syscall_64+0x1b9/0x820 [ 322.859101] ? finish_task_switch+0x1d3/0x870 [ 322.863679] ? syscall_return_slowpath+0x5e0/0x5e0 [ 322.868603] ? syscall_return_slowpath+0x31d/0x5e0 [ 322.873539] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 322.878899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.883736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.888913] RIP: 0033:0x455ab9 [ 322.892102] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.911366] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.919069] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 03:36:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x89070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) r1 = memfd_create(&(0x7f0000000200)='\x00', 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {0x8a, 0x1, 0x1}, 0x7, r2, r3, 0x5, 0x8, 0x0, 0xffffffffffffaa4c, 0x4, 0xae2, 0x7, 0x0, 0x4, 0xffffffffffff6dda, 0x40000000000, 0x3, 0x3ff, 0x2, 0x6}}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f0000029000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000700)="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") 03:36:06 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x40, 0x3000000, 0xd0, 0xfffffffffffffffb, 0xffffffff}, 0x14) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) [ 322.926330] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 322.933592] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 322.940937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 322.948200] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000012 [ 323.037246] gfs2: gfs2 mount does not exist 03:36:06 executing program 3: timer_create(0x8, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffffe0, 0x0) r2 = gettid() write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1e, 0x37, 0x1, {0x0, 0x1, 0xda, r2}}, 0x1e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x328}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x25d}, &(0x7f0000000180)=0x8) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) 03:36:06 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0xe}}, 0x20) shmctl$SHM_LOCK(r0, 0xb) ioctl$RTC_EPOCH_SET(0xffffffffffffff9c, 0x4008700e, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) timer_create(0x7, &(0x7f0000000180)={0x0, 0x3b, 0x4, @thr={&(0x7f0000000000)="6de9bbedbb43589e10519cd4627c3ef478289641ccd1e15db7862e7e0617ab0b2867c8ca729c901bad04bcf1b6a787cb6051a150698c7c070268625a246f5998f077769ea646c2e3626143503e7bd1bf93a365cd95e4f31891c2d7a59281effbe18f039df0f82c3ea23d862dc2cfc6b7bb3bef27524eaa523a7b0b263ef5f3d0d3c4537c6cd97df880aecc518699dabbb10b8829f04085e23399ee25d7eb06eab0a9b0be8c4ebaecd79f27a28844d01d5e78ba303f3c9d274c4386f42648e52cd7f79552f06f22a627d063283e8704ef2fa79817b5977281705eebc447bd45299cc4", &(0x7f0000000100)="cbcd9c94481340fd1ac7f383ea802b04b003216b834fd7a2c524814dc886b46bdcaa2ba9739f3de19d65d2b046e7367ef955dacbaed6cc3498b0d7becd825350c8a6c3bf9c75b76737d5fd060817dcc9263f2214d561fb14ac965009be"}}, &(0x7f00000001c0)) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x800000199000) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x1}, 0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 323.151462] binder: 19722:19724 got reply transaction with bad transaction stack, transaction 890 has target 19722:0 [ 323.162528] binder: 19722:19724 transaction failed 29201/-71, size 0-0 line 2774 [ 323.227907] binder: BINDER_SET_CONTEXT_MGR already set [ 323.243266] binder: 19722:19730 ioctl 40046207 0 returned -16 [ 323.269682] binder_alloc: 19722: binder_alloc_buf, no vma [ 323.275451] binder: 19722:19724 transaction failed 29189/-3, size 0-0 line 2967 [ 323.349437] binder: 19722:19730 got reply transaction with no transaction stack [ 323.357087] binder: 19722:19730 transaction failed 29201/-71, size 0-0 line 2759 03:36:07 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0x0, 0x268, 0x100, 0x268, 0x268, 0x378, 0x378, 0x378, 0x378, 0x378, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x3, 0xae, 0xffffffff, 0x100, 0x3ff, 0x400], 0xaa2, 0x1, 0x200}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @remote, 0xffffff00, 0xffffffff, 'syzkaller0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x2, 0x42}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x7f, [0xff, 0x20, 0x8, 0x1, 0x200, 0x4], 0x3, 0x7a, 0x5a0}}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x2, 0x8001, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x5, 0x6, 0x4, 0x0, 0x75, 0xffffffffffffffff], 0x1f, 0x41f, 0xfff}, {0x1000, [0x80000001, 0x10001, 0x80, 0x9, 0x1, 0xc1], 0xa6, 0x496, 0x6}}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xff, 'veth1_to_bond\x00', 'teql0\x00', {0xff}, {0xff}, 0x11, 0x0, 0xa}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x200, 0x4c, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x3ff, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) fremovexattr(r2, &(0x7f0000000240)=@known='security.evm\x00') setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x8001, 0x4) name_to_handle_at(r2, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="a3367c23ca4b80cc"], &(0x7f0000000200), 0x1000) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x10040) 03:36:07 executing program 4 (fault-call:3 fault-nth:19): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:07 executing program 7: rt_sigsuspend(&(0x7f0000000040), 0x8) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80800406, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180), 0x0) 03:36:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, r2, 0x30, 0x1, @in6={0xa, 0x4e20, 0x2, @ipv4={[], [], @broadcast}, 0x2}}}, 0xa0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000480)) write(r0, &(0x7f0000000000)="220000002000070700be0000090007010a0700ff0000000000200000057c00000000", 0x22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0xfffffffffffff633, 0x2, 0xff, 'queue0\x00', 0x3}) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x8000) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x80) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000300)={0x1, 0x7ff, 0x20, 0xfffffffffffffffd, 0xf5a, 0xfffffffffffffff7, 0x592, 0x101, 0x5, 0xc57}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000000c0)=r5) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x3f, 0xc3, 0x46b, 0x7b7a, 0x7ff, 0x8001, 0xb5e6, 0x5f24, 0x101, 0x1f, 0x0, 0xd4c, 0x5, 0x5, 0x9]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r2, 0x7}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r3, 0x12) recvfrom(r0, &(0x7f00000003c0)=""/158, 0x9e, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') sendfile(r0, r4, &(0x7f0000000040), 0x100000001) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000002e00080225bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="ffff0b0008000b0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x810) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0), 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) 03:36:07 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400800) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x638) 03:36:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0x7, 0x1, &(0x7f0000000000), &(0x7f0000000080)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x11}}, 0x8) [ 323.402375] binder: release 19722:19724 transaction 890 out, still active [ 323.409454] binder: undelivered TRANSACTION_COMPLETE [ 323.414631] binder: undelivered TRANSACTION_ERROR: 29201 [ 323.421906] binder: send failed reply for transaction 890, target dead 03:36:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 323.448617] binder: undelivered TRANSACTION_ERROR: 29189 [ 323.454179] binder: undelivered TRANSACTION_ERROR: 29201 [ 323.495879] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. [ 323.513423] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. [ 323.528263] FAULT_INJECTION: forcing a failure. [ 323.528263] name failslab, interval 1, probability 0, space 0, times 0 [ 323.539878] CPU: 0 PID: 19747 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 323.547281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.556648] Call Trace: [ 323.559277] dump_stack+0x1c9/0x2b4 [ 323.562933] ? dump_stack_print_info.cold.2+0x52/0x52 [ 323.568342] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 323.573283] ? __save_stack_trace+0x8d/0xf0 [ 323.577675] should_fail.cold.4+0xa/0x1a [ 323.581772] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 323.587329] ? save_stack+0x43/0xd0 [ 323.590956] ? kasan_kmalloc+0xc4/0xe0 [ 323.594862] ? kmem_cache_alloc_trace+0x152/0x780 [ 323.599714] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 323.604940] ? __list_lru_init+0x46a/0x7c0 [ 323.609195] ? sget_userns+0x755/0xf20 [ 323.613097] ? graph_lock+0x170/0x170 [ 323.616934] ? do_mount+0x581/0x30e0 [ 323.620664] ? ksys_mount+0x12d/0x140 [ 323.624469] ? __x64_sys_mount+0xbe/0x150 [ 323.628617] ? do_syscall_64+0x1b9/0x820 [ 323.632692] ? find_held_lock+0x36/0x1c0 [ 323.636777] ? __lock_is_held+0xb5/0x140 [ 323.640874] ? check_same_owner+0x340/0x340 [ 323.645224] ? rcu_note_context_switch+0x730/0x730 [ 323.650178] __should_failslab+0x124/0x180 [ 323.654428] should_failslab+0x9/0x14 [ 323.658291] kmem_cache_alloc_trace+0x2cb/0x780 [ 323.663657] ? __kmalloc_node+0x33/0x70 [ 323.667651] ? __kmalloc_node+0x33/0x70 [ 323.671641] ? rcu_read_lock_sched_held+0x108/0x120 [ 323.676705] __memcg_init_list_lru_node+0x185/0x2d0 [ 323.681737] ? kvfree_rcu+0x20/0x20 [ 323.685631] ? __kmalloc_node+0x47/0x70 [ 323.689630] __list_lru_init+0x46a/0x7c0 [ 323.693712] ? list_lru_destroy+0x4d0/0x4d0 [ 323.698051] ? __lockdep_init_map+0x105/0x590 [ 323.702553] ? __init_waitqueue_head+0x9e/0x150 [ 323.707230] ? init_wait_entry+0x1c0/0x1c0 [ 323.711495] ? __lockdep_init_map+0x105/0x590 [ 323.716031] sget_userns+0x755/0xf20 [ 323.719753] ? test_gfs2_super+0x50/0x50 [ 323.723827] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 323.728686] ? destroy_unused_super.part.11+0x110/0x110 [ 323.734066] ? rcu_read_lock_sched_held+0x108/0x120 [ 323.739101] ? kmem_cache_free+0x25c/0x2d0 [ 323.743346] ? putname+0xf7/0x130 [ 323.746806] ? filename_lookup+0x39c/0x510 [ 323.751049] ? filename_parentat.isra.58+0x570/0x570 [ 323.756151] ? cap_capable+0x1f9/0x260 [ 323.760054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.765607] ? security_capable+0x99/0xc0 [ 323.769761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.775334] ? ns_capable_common+0x13f/0x170 [ 323.779748] ? test_gfs2_super+0x50/0x50 [ 323.783814] sget+0x10b/0x150 [ 323.786949] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 323.791820] gfs2_mount_meta+0x12f/0x2a0 [ 323.795899] ? init_sb+0xcc0/0xcc0 [ 323.799460] ? module_unload_free+0x5d0/0x5d0 [ 323.803985] mount_fs+0xae/0x328 [ 323.807371] ? mpi_free.cold.1+0x19/0x19 [ 323.811453] vfs_kern_mount.part.34+0xdc/0x4e0 [ 323.816045] ? may_umount+0xb0/0xb0 [ 323.819684] ? _raw_read_unlock+0x22/0x30 [ 323.823839] ? __get_fs_type+0x97/0xc0 [ 323.827730] do_mount+0x581/0x30e0 [ 323.831267] ? lock_downgrade+0x8f0/0x8f0 [ 323.835415] ? copy_mount_string+0x40/0x40 [ 323.839671] ? __check_object_size+0x9d/0x5f2 [ 323.844182] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.849720] ? _copy_from_user+0xdf/0x150 [ 323.853871] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.859409] ? copy_mount_options+0x285/0x380 [ 323.863903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.869436] ksys_mount+0x12d/0x140 [ 323.873067] __x64_sys_mount+0xbe/0x150 [ 323.877055] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 323.882079] do_syscall_64+0x1b9/0x820 [ 323.885968] ? syscall_slow_exit_work+0x500/0x500 [ 323.890814] ? syscall_return_slowpath+0x5e0/0x5e0 [ 323.895762] ? syscall_return_slowpath+0x31d/0x5e0 [ 323.900700] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 323.906080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.910945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.916158] RIP: 0033:0x455ab9 [ 323.919355] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.938690] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_read_part_table(0x3, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="574556820400000000000000000000000000000000000000000000000000000000000000000000000002000020000000040000001000000080000000000800000000000000000000100e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000574556829167bc", 0x67, 0x40}]) [ 323.946408] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 323.953689] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 323.960977] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 323.968252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 323.975519] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000013 [ 323.983515] gfs2: gfs2 mount does not exist 03:36:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x7fd, 0x4) r3 = fcntl$getown(r0, 0x9) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r3, r4, r5}, 0xc) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000059000)=0x89a, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef4fc0), 0x0, &(0x7f00006c0000)}, 0x2020) 03:36:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x6e) getpeername(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000005c0)=0xff6d) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f00000003c0)=""/153, &(0x7f0000000480)=0x99) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000600)='./bus\x00', 0x8, 0x4, &(0x7f0000000980)=[{&(0x7f0000000640)="e54316cdb944d7e4acf9892d81c3aef9c2dd9c64dc2e2fb527bd855e3ac0641055b8e083274f04223c36fc12a48d173d865766cedc553a207748b92bfe9f32006d", 0x41, 0x4}, {&(0x7f00000006c0)="e8267ca9c3fabfcb951299dc8dad6cdc90bb0454bd8880723e330d92fea641e032a2455bebea697929425c5d0d16e0e7acaf9d7da6688d1681fe83a7b8cd786b9fa98a3e74e2fe58b248a6f5a71c4e03aafec932c11655bc125e9207b88a9cd1ebde3a8340bb60522e0d040cb416a02f23b34972c1e857a68d24744564f881969b2451dd2fbbcf04698168948f4c14fcd65e066d6853955bec8d514b849d5319312d57e8485c2014e72e15079b470ca71d3bf906fb0aca1b02171910d1d789e7b579a597cf35004208560fd2ed44e553d3aa4c2ca5febd6efd", 0xd9, 0x4}, {&(0x7f00000007c0)="91e1e14c306e5edba61567702814129f23dc4ce20b3932b0d6c79049767d8bda12b51606b9f6f181f979445f1680dca5124c866d0fb729556454b8a1b895e18be1e1dd6142e6379c8f1902d2b61d78c9c12059c18314fdd72bf0796b75e144f917c07df15158614e6a88a9db7cd3da3989bf21e2d5d873e8bd4e9b95e29a6c1a2dd3c66f2051222eb33a5533b1d220c4ae9355f40e", 0x95, 0x100000001}, {&(0x7f0000000880)="c0c38d530b1bb00c376ce0590a8482d803286028d8290a84d9ae4f1cf05a72d019621fba6d225050ca3d07453e1335b3793c3e0e896f0b3d4170834ed2a0cd9f22341373707b3a0d66fbcdeef29a8b4228dd9dd49d1dc5c4bee0ab7473a959b6c967b4ea62bc6d9fb211bcf96c913211cfca637cc23a5b0c7309f1244a95c89cb251a2777abf2615b3b86fb84955f50f9ae0df53fe0ac9d7c222b5c3debd5b2ccfc4b38abe460f9a917bd84e2632550595c31041099f63c07da69cade4d1e256dd6c7debfe5656d428a21414b247df3952367e1a8f09371d50f7934ed70346db2f8ab422b03ccaa6cf973f7ed0e777238f0649aae9", 0xf5, 0x9}], 0x100888, &(0x7f0000000a00)='\x00') uname(&(0x7f0000000340)=""/104) r5 = eventfd(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5, 0x0, 0x2, r4}) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000004c0)={0xd, 0x401}, 0x2) fcntl$dupfd(r4, 0x406, r4) kexec_load(0xd1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="7955e67287391b82698d63a22221d7229dc60fa6826b11658461ffb9421b64f8164415298fd6762c0ffbc5a0331cd13baa4ffe5afc4e61b862b22b2472e800a0e6b1561b6f338f77d3d72aa6d53d1f0b48b052c31f17bdfdbd7bf58f713cc5825a4743f29ce2dcf35b739d46920e655aa488228e1eb853de75054da63d917a130ea6c39fa98b7a23803f261f3eb812ecc2765028198337e337d8d141b4dabbe6dc7127dcf92c216b105481394a99fe06bff5e84c3ba4c5fddfd01b70561e61185d7d42d41ecb683912c16916d4f12baba6d14997f1b40f76b2dcf8fdc3", 0xdd, 0xff, 0x3}], 0x6a0f528de53084a1) 03:36:07 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x2, &(0x7f0000000040)=0xf5) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/32, 0x1000, 0x1800, 0x2}, 0x18) 03:36:07 executing program 4 (fault-call:3 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 324.085351] binder: 19765:19768 got reply transaction with bad transaction stack, transaction 895 has target 19765:0 [ 324.096381] binder: 19765:19768 transaction failed 29201/-71, size 0-0 line 2774 [ 324.110977] binder: BINDER_SET_CONTEXT_MGR already set [ 324.117414] binder: 19765:19771 ioctl 40046207 0 returned -16 [ 324.125278] binder_alloc: 19765: binder_alloc_buf, no vma [ 324.126761] binder: 19765:19771 got reply transaction with no transaction stack [ 324.131148] binder: 19765:19768 transaction failed 29189/-3, size 0-0 line 2967 [ 324.138485] binder: 19765:19771 transaction failed 29201/-71, size 0-0 line 2759 [ 324.155396] binder: release 19765:19768 transaction 895 out, still active [ 324.162530] binder: undelivered TRANSACTION_COMPLETE [ 324.167767] binder: undelivered TRANSACTION_ERROR: 29201 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x110, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x402403, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r2, 0x3, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$TIOCNXCL(r2, 0x540d) sendto$inet6(r1, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x272, &(0x7f0000000340)}}, {{&(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000800), 0x30d, &(0x7f0000000840)=""/217, 0xd9}}], 0x2, 0x12000, &(0x7f00000009c0)={0x77359400}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000002c0)=""/202, 0xca, 0x1, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffffffffffff, @local, 0x9}, 0x1c) ioctl(r3, 0x1, &(0x7f0000000100)="dbd369e7225b0b2eab8e3cf27754d052405a192bf6d6cdbc64634af590a2a90a6473e5de273add244dd23b00a6d8e46dcce44e8def695bc2bf708c9dcd7995c9123f30afbde047696839e9f03746bd87db1cb50b68b9dae91e41eac23fb8f1608261fe65615f44c4a072699d331fe166766d534e4b0f56fd4cf82516a64bfffb9106959137642e6976ddcf91b377b7cfde23eb9e8847ad1c") [ 324.262545] binder: undelivered TRANSACTION_ERROR: 29189 [ 324.268419] binder: undelivered TRANSACTION_ERROR: 29201 [ 324.309095] FAULT_INJECTION: forcing a failure. [ 324.309095] name failslab, interval 1, probability 0, space 0, times 0 [ 324.320435] CPU: 1 PID: 19792 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 324.327821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.337391] Call Trace: [ 324.340004] dump_stack+0x1c9/0x2b4 [ 324.343658] ? dump_stack_print_info.cold.2+0x52/0x52 [ 324.348880] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 324.353757] ? kernel_text_address+0x79/0xf0 03:36:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x222200) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x4, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x2, r2, 0x30, 0x1, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x4}}}, 0xa0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000500)={r3, 0xb5, "1acbf4e5d1b2a6634c660dd8c1f2f32a812b1b7f5b4c3608a1393ec3a5b9bb33fba43c211567364ee9302c775b18f26fa4f99c077772f073e0901397deca02ad52174a2898aff4f07f2bd0ad138113a95f142b1ca94bab2365ef0651fef4e7d855e2e120692e03851a31b7ab079b7468ea0a4f435e21d56bc68a6d85f1163cef94dd701948f165bfa74ba6c727dd4be56b3dc09478251c2a991b489131a7bb96e0ee1a2f1923d93917209a31bf5379090e49c4e0f0"}, &(0x7f00000005c0)=0xbd) r4 = semget$private(0x0, 0x3, 0x10) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000600)=""/91) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x10000000004e21}, 0x1c) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) [ 324.358642] should_fail.cold.4+0xa/0x1a [ 324.362925] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 324.368176] ? graph_lock+0x170/0x170 [ 324.372008] ? save_stack+0x43/0xd0 [ 324.375942] ? kasan_kmalloc+0xc4/0xe0 [ 324.379866] ? find_held_lock+0x36/0x1c0 [ 324.383970] ? __lock_is_held+0xb5/0x140 [ 324.388106] ? check_same_owner+0x340/0x340 [ 324.392458] ? rcu_note_context_switch+0x730/0x730 [ 324.397458] __should_failslab+0x124/0x180 [ 324.401734] should_failslab+0x9/0x14 03:36:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:07 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2300007975dfae0000000000718040fd83c8a05b144e00000000020000000004000002000000000000002d2a00cf8f85840c6c7ffc238edab52bf3b66a5df21ff9695f1abd95939a03943c68f152b2e8c0d72646b0d66958938d88b79fc6ddfc2641ccd4a30a246efec38163ea0be3fc6f6a545c335145220c99552559f90f3347b33ec3a6d72016a8086133f8"], 0x23) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmget(0x2, 0x2000, 0x820, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0xa000, 0x204, &(0x7f0000ff6000/0xa000)=nil) r1 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x4}}, 0x18) shmctl$SHM_UNLOCK(0x0, 0xc) [ 324.405568] kmem_cache_alloc_node_trace+0x26f/0x770 [ 324.410897] __kmalloc_node+0x33/0x70 [ 324.414735] kvmalloc_node+0x65/0xf0 [ 324.418483] __list_lru_init+0x56d/0x7c0 [ 324.422579] ? list_lru_destroy+0x4d0/0x4d0 [ 324.426960] ? __lockdep_init_map+0x105/0x590 [ 324.431494] ? __init_waitqueue_head+0x9e/0x150 [ 324.436368] ? init_wait_entry+0x1c0/0x1c0 [ 324.440842] sget_userns+0x782/0xf20 [ 324.444671] ? test_gfs2_super+0x50/0x50 [ 324.448750] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 324.453589] ? destroy_unused_super.part.11+0x110/0x110 [ 324.458958] ? rcu_read_lock_sched_held+0x108/0x120 [ 324.463973] ? kmem_cache_free+0x25c/0x2d0 [ 324.468221] ? putname+0xf7/0x130 [ 324.471703] ? filename_lookup+0x39c/0x510 [ 324.475940] ? filename_parentat.isra.58+0x570/0x570 [ 324.481049] ? cap_capable+0x1f9/0x260 [ 324.484962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.490495] ? security_capable+0x99/0xc0 [ 324.494639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.500185] ? ns_capable_common+0x13f/0x170 [ 324.504605] ? test_gfs2_super+0x50/0x50 [ 324.508687] sget+0x10b/0x150 [ 324.511782] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 324.516619] gfs2_mount_meta+0x12f/0x2a0 [ 324.520707] ? init_sb+0xcc0/0xcc0 [ 324.524259] ? module_unload_free+0x5d0/0x5d0 [ 324.529029] mount_fs+0xae/0x328 [ 324.532403] ? mpi_free.cold.1+0x19/0x19 [ 324.536462] vfs_kern_mount.part.34+0xdc/0x4e0 [ 324.541061] ? may_umount+0xb0/0xb0 [ 324.544686] ? _raw_read_unlock+0x22/0x30 [ 324.548827] ? __get_fs_type+0x97/0xc0 [ 324.552713] do_mount+0x581/0x30e0 [ 324.556272] ? lock_downgrade+0x8f0/0x8f0 [ 324.560414] ? copy_mount_string+0x40/0x40 [ 324.564644] ? __check_object_size+0x9d/0x5f2 [ 324.569511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.576103] ? _copy_from_user+0xdf/0x150 [ 324.580252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.585790] ? copy_mount_options+0x285/0x380 [ 324.590282] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.595831] ksys_mount+0x12d/0x140 [ 324.599476] __x64_sys_mount+0xbe/0x150 [ 324.603463] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.608479] do_syscall_64+0x1b9/0x820 [ 324.612365] ? finish_task_switch+0x1d3/0x870 [ 324.616863] ? syscall_return_slowpath+0x5e0/0x5e0 [ 324.621820] ? syscall_return_slowpath+0x31d/0x5e0 [ 324.626756] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 324.632117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.636969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 324.642233] RIP: 0033:0x455ab9 [ 324.645417] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.664950] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.672652] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 324.679913] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 324.687186] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 324.694446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 324.701718] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000014 [ 324.714187] binder: send failed reply for transaction 895, target dead 03:36:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340), 0xfffffffffffffe46}]) [ 324.863016] binder: 19810:19815 got reply transaction with bad transaction stack, transaction 900 has target 19810:0 [ 324.873934] binder: 19810:19815 transaction failed 29201/-71, size 0-0 line 2774 [ 324.902597] gfs2: gfs2 mount does not exist [ 324.940522] binder: BINDER_SET_CONTEXT_MGR already set [ 324.950578] binder: 19810:19818 ioctl 40046207 0 returned -16 [ 324.965873] binder_alloc: 19810: binder_alloc_buf, no vma [ 324.971658] binder: 19810:19815 transaction failed 29189/-3, size 0-0 line 2967 [ 325.019203] binder: 19810:19818 got reply transaction with no transaction stack [ 325.026962] binder: 19810:19818 transaction failed 29201/-71, size 0-0 line 2759 [ 325.059651] binder: release 19810:19815 transaction 900 out, still active [ 325.067358] binder: undelivered TRANSACTION_COMPLETE [ 325.072562] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.104894] binder: undelivered TRANSACTION_ERROR: 29189 [ 325.110502] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.116528] binder: send failed reply for transaction 900, target dead 03:36:08 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x35, 0x4}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x900) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000240)={0x7}, 0x1) accept$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) fcntl$setflags(r0, 0x2, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0x2, 0xd0, 0x1f, 0x7ff, 0x1, 0x4000000000000, 0xfd, 0x7f, 0x8001, 0x1, 0x4, 0x7fff, 0x1, 0x1, 0xfffffffffffffffa}}) 03:36:08 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:36:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0xfffffffffffffe9a) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @random="61c7edaedb2e"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d89cd3292ea54c7be", 0x10) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="aa057efeb51eadd5f5170937030e7d32", 0x10}], 0x1, &(0x7f00000000c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000003c0)={r3, r4+30000000}) 03:36:08 executing program 4 (fault-call:3 fault-nth:21): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x3f}}, [0x4, 0xb6, 0x2, 0x0, 0x3, 0x3, 0x2, 0x3, 0x6, 0x1f, 0x9, 0x2, 0x6, 0x0, 0x400]}, &(0x7f0000000140)=0x100) listen(r0, 0x46) r1 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) shutdown(r1, 0x1) 03:36:08 executing program 6: r0 = socket(0x11, 0x0, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @mcast2, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xbd, 0x10000) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x13}}}, 0x0, 0x1ff}, 0x90) 03:36:08 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 325.233974] binder: 19834:19841 got reply transaction with bad transaction stack, transaction 905 has target 19834:0 [ 325.238008] FAULT_INJECTION: forcing a failure. [ 325.238008] name failslab, interval 1, probability 0, space 0, times 0 [ 325.244904] binder: 19834:19841 transaction failed 29201/-71, size 0-0 line 2774 [ 325.256069] CPU: 0 PID: 19840 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 325.256084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.256089] Call Trace: [ 325.256124] dump_stack+0x1c9/0x2b4 [ 325.256149] ? dump_stack_print_info.cold.2+0x52/0x52 [ 325.292019] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 325.296914] ? perf_trace_lock+0x920/0x920 [ 325.301172] should_fail.cold.4+0xa/0x1a [ 325.305252] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 325.310379] ? print_usage_bug+0xc0/0xc0 [ 325.314456] ? graph_lock+0x170/0x170 [ 325.318272] ? lock_downgrade+0x8f0/0x8f0 [ 325.322444] ? find_held_lock+0x36/0x1c0 [ 325.326532] ? __lock_is_held+0xb5/0x140 [ 325.326904] binder: BINDER_SET_CONTEXT_MGR already set [ 325.330613] ? check_same_owner+0x340/0x340 [ 325.330633] ? rcu_note_context_switch+0x730/0x730 [ 325.330655] __should_failslab+0x124/0x180 [ 325.330675] should_failslab+0x9/0x14 [ 325.330691] __kmalloc+0x2c8/0x760 [ 325.330705] ? kvfree_rcu+0x20/0x20 [ 325.330722] ? __list_lru_init+0xe5/0x7c0 [ 325.330739] __list_lru_init+0xe5/0x7c0 [ 325.330756] ? list_lru_destroy+0x4d0/0x4d0 [ 325.337755] binder: 19834:19848 ioctl 40046207 0 returned -16 [ 325.340389] ? __lockdep_init_map+0x105/0x590 [ 325.340410] ? __init_waitqueue_head+0x9e/0x150 [ 325.340425] ? init_wait_entry+0x1c0/0x1c0 [ 325.340454] sget_userns+0x782/0xf20 [ 325.340470] ? test_gfs2_super+0x50/0x50 [ 325.340489] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 325.340510] ? destroy_unused_super.part.11+0x110/0x110 [ 325.347072] binder_alloc: 19834: binder_alloc_buf, no vma [ 325.349666] ? rcu_read_lock_sched_held+0x108/0x120 [ 325.349686] ? kmem_cache_free+0x25c/0x2d0 [ 325.349706] ? putname+0xf7/0x130 [ 325.349726] ? filename_lookup+0x39c/0x510 [ 325.349745] ? filename_parentat.isra.58+0x570/0x570 [ 325.349766] ? cap_capable+0x1f9/0x260 [ 325.349790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.349806] ? security_capable+0x99/0xc0 [ 325.349822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.349843] ? ns_capable_common+0x13f/0x170 [ 325.353727] binder: 19834:19841 transaction failed 29189/-3, size 0-0 line 2967 [ 325.357192] ? test_gfs2_super+0x50/0x50 [ 325.357206] sget+0x10b/0x150 [ 325.357221] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 325.357240] gfs2_mount_meta+0x12f/0x2a0 [ 325.357252] ? init_sb+0xcc0/0xcc0 [ 325.357273] ? module_unload_free+0x5d0/0x5d0 [ 325.361558] binder: 19834:19848 got reply transaction with no transaction stack [ 325.365037] mount_fs+0xae/0x328 [ 325.365053] ? mpi_free.cold.1+0x19/0x19 [ 325.365072] vfs_kern_mount.part.34+0xdc/0x4e0 [ 325.365090] ? may_umount+0xb0/0xb0 [ 325.365111] ? _raw_read_unlock+0x22/0x30 [ 325.365125] ? __get_fs_type+0x97/0xc0 [ 325.365146] do_mount+0x581/0x30e0 [ 325.365170] ? lock_downgrade+0x8f0/0x8f0 [ 325.369181] binder: 19834:19848 transaction failed 29201/-71, size 0-0 line 2759 [ 325.373457] ? copy_mount_string+0x40/0x40 [ 325.373476] ? __check_object_size+0x9d/0x5f2 [ 325.373508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.373528] ? _copy_from_user+0xdf/0x150 [ 325.381331] binder: release 19834:19841 transaction 905 out, still active [ 325.383913] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.383931] ? copy_mount_options+0x285/0x380 [ 325.383948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.383968] ksys_mount+0x12d/0x140 [ 325.383987] __x64_sys_mount+0xbe/0x150 [ 325.384004] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 325.384025] do_syscall_64+0x1b9/0x820 [ 325.384039] ? finish_task_switch+0x1d3/0x870 [ 325.384056] ? syscall_return_slowpath+0x5e0/0x5e0 [ 325.384072] ? syscall_return_slowpath+0x31d/0x5e0 [ 325.384092] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 325.388799] binder: undelivered TRANSACTION_COMPLETE [ 325.392977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.393000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.393014] RIP: 0033:0x455ab9 [ 325.393019] Code: 1d ba [ 325.396779] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.400795] fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.664114] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.671819] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 03:36:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5e, 0x3ff, 0x400}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x400000) 03:36:08 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) rt_sigsuspend(&(0x7f0000000000)={0x8001}, 0x8) 03:36:08 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x27, 0x1, 0x1, 0x5, 0x1, 0x81, "4694a822a1fc80e6a7c40c7609f2ccff71d3b982a9686d0679ad78fd961aed6d925bdd7321ee75c1e6881e36727eb84e3268468f1dacdca3d318b0ccdcff70", 0x35}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000240)="270f107e7baea1a6d40c3306e85d99743c91279568ee82", 0x17}, {&(0x7f0000000280)="d2f7c25aa6db36a0a9cfa8a9ce8b1608191d01a0ab2d0dac86ef9e337e90e862b23b16d7c84441e248fbf852e97649a15dd030899c2eb3f88f8e272e476a12b2b271f075c75607bac584b5bd37a752a1b836fb9b37b93dfede7090ddd877d7a3ef597af5b560e09311efa9c489839ff8d8639c626cd2741b17715a5f285e254c5f470ca0ec7cffbbf90d0a2365ab671fd076be5136c5a6a3e3a0199c60cf21f28fba7806395fe32e3b85a5bd70", 0xad}], 0x2, 0x0, 0x0, 0x40}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530206d696d655f747970652547504c706f7369785f61636c5f6163636573734173656c6620297d2e76626f786e657431776c616e31776c616e310a2e992ae9f5eb580c3638eaf1364b671430d02be06f961e9b52cc2f40aa7cc3b4f3f05dcc09fc95ee2cd363597c78ab05b15fdf8635b5fecd378fa0f23e4e03eb4d8bc0104f371a2ac0698fbe74892b35409fbeece556ee33e1034787c74a83d77334070db147afc8c5"], 0xad) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000b0f000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000edffff1700120000000100677265000c00020008001000ac141400"], 0x38}}, 0x0) [ 325.679090] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 325.686344] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 325.693599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 325.700858] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000015 [ 325.709753] binder: send failed reply for transaction 905, target dead [ 325.719680] gfs2: gfs2 mount does not exist [ 325.730483] binder: undelivered TRANSACTION_ERROR: 29189 03:36:09 executing program 4 (fault-call:3 fault-nth:22): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 325.736162] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.839259] netlink: 19 bytes leftover after parsing attributes in process `syz-executor6'. [ 325.861580] netlink: 19 bytes leftover after parsing attributes in process `syz-executor6'. [ 325.899949] FAULT_INJECTION: forcing a failure. [ 325.899949] name failslab, interval 1, probability 0, space 0, times 0 [ 325.911356] CPU: 1 PID: 19867 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 325.918816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.928193] Call Trace: [ 325.930821] dump_stack+0x1c9/0x2b4 [ 325.934483] ? dump_stack_print_info.cold.2+0x52/0x52 [ 325.939709] should_fail.cold.4+0xa/0x1a [ 325.943799] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 325.948974] ? print_usage_bug+0xc0/0xc0 [ 325.953066] ? graph_lock+0x170/0x170 [ 325.956888] ? lock_downgrade+0x8f0/0x8f0 [ 325.961064] ? find_held_lock+0x36/0x1c0 [ 325.965415] ? __lock_is_held+0xb5/0x140 [ 325.969534] ? check_same_owner+0x340/0x340 [ 325.973975] ? rcu_note_context_switch+0x730/0x730 [ 325.978973] __should_failslab+0x124/0x180 [ 325.983236] should_failslab+0x9/0x14 [ 325.987062] __kmalloc+0x2c8/0x760 [ 325.990627] ? kvfree_rcu+0x20/0x20 [ 325.994279] ? __list_lru_init+0xe5/0x7c0 [ 325.998443] __list_lru_init+0xe5/0x7c0 [ 326.002434] ? list_lru_destroy+0x4d0/0x4d0 [ 326.006776] ? __lockdep_init_map+0x105/0x590 [ 326.011302] ? __init_waitqueue_head+0x9e/0x150 [ 326.016000] ? init_wait_entry+0x1c0/0x1c0 [ 326.020272] sget_userns+0x782/0xf20 [ 326.024015] ? test_gfs2_super+0x50/0x50 [ 326.028111] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 326.032990] ? destroy_unused_super.part.11+0x110/0x110 [ 326.038365] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.043382] ? kmem_cache_free+0x25c/0x2d0 [ 326.047619] ? putname+0xf7/0x130 [ 326.051086] ? filename_lookup+0x39c/0x510 [ 326.055327] ? filename_parentat.isra.58+0x570/0x570 [ 326.060433] ? cap_capable+0x1f9/0x260 [ 326.064345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.069980] ? security_capable+0x99/0xc0 [ 326.074141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.079699] ? ns_capable_common+0x13f/0x170 [ 326.084120] ? test_gfs2_super+0x50/0x50 [ 326.088180] sget+0x10b/0x150 [ 326.091294] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 326.096143] gfs2_mount_meta+0x12f/0x2a0 [ 326.100212] ? init_sb+0xcc0/0xcc0 [ 326.103746] ? module_unload_free+0x5d0/0x5d0 [ 326.108240] mount_fs+0xae/0x328 [ 326.111604] ? mpi_free.cold.1+0x19/0x19 [ 326.115741] vfs_kern_mount.part.34+0xdc/0x4e0 [ 326.120585] ? may_umount+0xb0/0xb0 [ 326.124220] ? _raw_read_unlock+0x22/0x30 [ 326.128380] ? __get_fs_type+0x97/0xc0 [ 326.132287] do_mount+0x581/0x30e0 [ 326.135843] ? lock_downgrade+0x8f0/0x8f0 [ 326.139996] ? copy_mount_string+0x40/0x40 [ 326.144234] ? check_same_owner+0x340/0x340 [ 326.148562] ? __check_object_size+0x9d/0x5f2 [ 326.153071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.158628] ? _copy_from_user+0xdf/0x150 [ 326.162811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.168386] ? copy_mount_options+0x285/0x380 [ 326.173553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.179103] ksys_mount+0x12d/0x140 [ 326.182899] __x64_sys_mount+0xbe/0x150 [ 326.186875] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 326.191897] do_syscall_64+0x1b9/0x820 [ 326.195789] ? finish_task_switch+0x1d3/0x870 [ 326.200281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 326.205212] ? syscall_return_slowpath+0x31d/0x5e0 [ 326.210159] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 326.215551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.220401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.225601] RIP: 0033:0x455ab9 [ 326.228876] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000007480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x6, 0x3) memfd_create(&(0x7f0000000000)='cgroup.threads\x00', 0x3) 03:36:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:09 executing program 7: capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000001040)) r0 = dup(0xffffffffffffffff) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000380)={0x6, 0xc98d, 0x10000, 0x5, 0x6}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000080)={[], 0x2, 0xfffffffffffffe00, 0x93d, 0x0, 0x9, 0x0, 0xf000, [], 0x50000}) prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="66b834018ec8c4a120167e10c421fa2cc065470ff33c4966baf80cb830580b8cef66bafc0c66edb9db020000b800000000ba010000000f30450f2ad966b839008ed0b9e00100000f320f21e8", 0x4c}], 0x1, 0x8, &(0x7f0000000340)=[@cstype3={0x5, 0xa}, @cr0={0x0, 0x2}], 0x2) 03:36:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xffffffffffff0000, 0x40002) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x8000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7ff}, {0xa, 0x4e21, 0xfffffffffffffffd, @empty, 0x7fff}, 0x5, [0x1, 0x9, 0x3f, 0x3c, 0x1000, 0x2, 0x8001, 0x6]}, 0x5c) signalfd4(r0, &(0x7f0000000000)={0xd53}, 0x8, 0x80800) r1 = socket$inet6(0xa, 0x0, 0xce) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140)=0x7ff) getsockopt$inet6_mtu(r1, 0x29, 0x4d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="44b6d9116779ee36d10dc5d967d06804af792e45ca8d159b883949bd9de4de0bdc64470e8104dab4cdbe0d13f4a62ffdf7b6aea5bf0f34131e27acf17660f22dd4db347800ec6c3720035fbab861a4517c704192147fb93d4fc6513135ced35cc8fe7490acc2b73ac441ffdbfe35506b080d8a642ab5e8c358383eac59cdc2aeb611c2236c2d56778d941101ba95e92bc98780117de75a261c1195c15021c1a844ee199f532cb53a49345500f77706efeede7f03555ded174ca3b50305ba4d099721eae1c9d9411d46f67a7b862a538821c58c4ac31b21c3c54b5f3d28b12b2a3e79119ab29a028b", 0xe8}, {&(0x7f0000000000)="0c5f6424f43877f7f73785", 0xb}, {&(0x7f0000000200)="048ec8d2304887c574c8c8608bec6a790ee6b68797a17cd5231081e78d67767b99c84763907da74e062572533bf89c985cbbb6d52d9f849af9d7d14a18c12768261bda97ce05e7d1b029123509f1f617d54c5deb52aa3193edd210fc49df373a55684d7bbbd3abd0494a1978b80405f39ace625d2ffb387b257412270d3fa0b2376695ee125d11dfb080342933afd5d94eb25f893da040a5189098312c5270b270a94540199c2efdd43518cbde32535220b08a9786d78c105585b5076291b8eb5d85effb7dde425c712daf73f729728887329435e7aac1512df8b2500304a312593de0273a", 0xe5}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000040)="073ebbd6bd305a1ba0ed4fe1e2cfb82afce953f723647572faa7996f087b5e86ab1c9456349a1d4a0700024359c1d89b6f083385188fab7cb3aa38338e3710ee5786aa9af38e7033cb0fa513c0a70a3b5abdfe7e7a4d8ac26c3737144a29e77df1fb29cc1df44161657ffb537cc20f", 0x6f}, {&(0x7f0000000400)="bf099de4e9a685586b8d63a932568188eb70e39893a7f94e4f684c54d9e23e2a5a8c3988db3f683654c6bea48ada41d4f216b557dede765c32a944c07faed31b2ad4d3e2d07941705a8e42aeca8b3d38e89b37cbdf5ab9365462b2fa313180418af10ff06853140f21efc3d3a44a8aca93bc30afe552865f054432b704d0d05deb7c068554d88159458d97280a92de2e99a8ecc3748761e8404aaee1d05a8600a070e7282de3cbc4e62e687d11cd8c6014b4322977b79623843e2047948cb40b6023f7e8ed857ad0f7fb80219c1d49c91f7c2bae8b1733", 0xd7}], 0x6) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000005c0)={0x8000, 0x5, 0x2000000, 0x4, 0x8000, 0x6dd, 0x7fffffff, 0x10, 0x0, 0x4, 0x4, 0xff}) ioctl$TIOCEXCL(r0, 0x40045567) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000580)={'bcsh0\x00', 0x1b}) 03:36:09 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0xd8, 0x4) [ 326.248280] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.256643] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 326.263925] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 326.271215] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 326.278480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 326.285790] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000016 [ 326.294939] gfs2: gfs2 mount does not exist 03:36:09 executing program 4 (fault-call:3 fault-nth:23): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 326.353909] binder: 19872:19875 got reply transaction with bad transaction stack, transaction 910 has target 19872:0 [ 326.365195] binder: 19872:19875 transaction failed 29201/-71, size 0-0 line 2774 03:36:10 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000000)="e2", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3fff, 0x0, @remote, 0x2}, 0x1c) listen(r0, 0xffc) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="00007c9da7e70000"], 0x8) accept(r0, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80) 03:36:10 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x22000, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x6, 0x3}, 0x14) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00), &(0x7f0000048000), 0x0) 03:36:10 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4) 03:36:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x0) close(r1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) accept$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) close(r2) 03:36:10 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x9618, 0x202) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x2000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x202, 0x0) open(&(0x7f00000002c0)='./control/file0\x00', 0x0, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/188, 0xffffffff00000018) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x4d7, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x14}, 0xf6d}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x6, @remote, 0x80000001}}, {{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0x9}}, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x4e23, 0xef, @ipv4={[], [], @multicast1}, 0x8}}]}, 0x290) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./control/file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172728965722c00"]) close(r1) chdir(&(0x7f00000001c0)='./control\x00') [ 326.473673] binder: BINDER_SET_CONTEXT_MGR already set [ 326.486683] binder: 19872:19895 ioctl 40046207 0 returned -16 [ 326.503156] binder_alloc: 19872: binder_alloc_buf, no vma [ 326.509419] binder: 19872:19875 transaction failed 29189/-3, size 0-0 line 2967 [ 326.511146] binder: 19872:19895 got reply transaction with no transaction stack [ 326.524885] binder: 19872:19895 transaction failed 29201/-71, size 0-0 line 2759 [ 326.539716] binder: release 19872:19875 transaction 910 out, still active [ 326.546828] binder: undelivered TRANSACTION_COMPLETE [ 326.552115] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.567301] FAULT_INJECTION: forcing a failure. [ 326.567301] name failslab, interval 1, probability 0, space 0, times 0 [ 326.578662] CPU: 1 PID: 19900 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 326.586042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.597234] Call Trace: [ 326.599848] dump_stack+0x1c9/0x2b4 [ 326.603516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 326.608733] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 326.613668] ? __save_stack_trace+0x8d/0xf0 [ 326.618029] should_fail.cold.4+0xa/0x1a [ 326.622130] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 326.627270] ? save_stack+0x43/0xd0 [ 326.630931] ? kasan_kmalloc+0xc4/0xe0 [ 326.634848] ? kmem_cache_alloc_trace+0x152/0x780 [ 326.639730] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 326.644961] ? __list_lru_init+0x46a/0x7c0 [ 326.649229] ? sget_userns+0x782/0xf20 [ 326.653150] ? graph_lock+0x170/0x170 [ 326.656981] ? do_mount+0x581/0x30e0 [ 326.660813] ? ksys_mount+0x12d/0x140 [ 326.664646] ? __x64_sys_mount+0xbe/0x150 [ 326.668828] ? do_syscall_64+0x1b9/0x820 [ 326.672923] ? find_held_lock+0x36/0x1c0 [ 326.677026] ? __lock_is_held+0xb5/0x140 [ 326.681122] ? check_same_owner+0x340/0x340 [ 326.685472] ? rcu_note_context_switch+0x730/0x730 [ 326.686111] XFS (loop5): unknown mount option [nobarr‰er]. [ 326.690429] __should_failslab+0x124/0x180 [ 326.690454] should_failslab+0x9/0x14 [ 326.690474] kmem_cache_alloc_trace+0x2cb/0x780 [ 326.690487] ? __kmalloc_node+0x33/0x70 [ 326.690506] ? __kmalloc_node+0x33/0x70 [ 326.716748] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.721777] __memcg_init_list_lru_node+0x185/0x2d0 [ 326.726791] ? kvfree_rcu+0x20/0x20 [ 326.730412] ? __kmalloc_node+0x47/0x70 [ 326.734399] __list_lru_init+0x46a/0x7c0 [ 326.738453] ? list_lru_destroy+0x4d0/0x4d0 [ 326.742770] ? __lockdep_init_map+0x105/0x590 [ 326.747273] ? __init_waitqueue_head+0x9e/0x150 [ 326.751949] ? init_wait_entry+0x1c0/0x1c0 [ 326.756448] sget_userns+0x782/0xf20 [ 326.760170] ? test_gfs2_super+0x50/0x50 [ 326.764253] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 326.769107] ? destroy_unused_super.part.11+0x110/0x110 [ 326.774489] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.779508] ? kmem_cache_free+0x25c/0x2d0 [ 326.783759] ? putname+0xf7/0x130 [ 326.787211] ? filename_lookup+0x39c/0x510 [ 326.791439] ? filename_parentat.isra.58+0x570/0x570 [ 326.796546] ? cap_capable+0x1f9/0x260 [ 326.800441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.806754] ? security_capable+0x99/0xc0 [ 326.810904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.816457] ? ns_capable_common+0x13f/0x170 [ 326.821062] ? test_gfs2_super+0x50/0x50 [ 326.825130] sget+0x10b/0x150 [ 326.828240] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 326.833077] gfs2_mount_meta+0x12f/0x2a0 [ 326.837142] ? init_sb+0xcc0/0xcc0 [ 326.840679] ? module_unload_free+0x5d0/0x5d0 [ 326.845179] mount_fs+0xae/0x328 [ 326.848548] ? mpi_free.cold.1+0x19/0x19 [ 326.852616] vfs_kern_mount.part.34+0xdc/0x4e0 [ 326.857194] ? may_umount+0xb0/0xb0 [ 326.860816] ? _raw_read_unlock+0x22/0x30 [ 326.864963] ? __get_fs_type+0x97/0xc0 [ 326.868854] do_mount+0x581/0x30e0 [ 326.872391] ? lock_downgrade+0x8f0/0x8f0 [ 326.876534] ? copy_mount_string+0x40/0x40 [ 326.880762] ? __check_object_size+0x9d/0x5f2 [ 326.885264] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.890797] ? _copy_from_user+0xdf/0x150 [ 326.894939] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.900476] ? copy_mount_options+0x285/0x380 [ 326.904969] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.910506] ksys_mount+0x12d/0x140 [ 326.914131] __x64_sys_mount+0xbe/0x150 [ 326.918113] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 326.923124] do_syscall_64+0x1b9/0x820 [ 326.927004] ? finish_task_switch+0x1d3/0x870 [ 326.931499] ? syscall_return_slowpath+0x5e0/0x5e0 [ 326.936422] ? syscall_return_slowpath+0x31d/0x5e0 [ 326.941361] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 326.946725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.951568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.956748] RIP: 0033:0x455ab9 [ 326.959937] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.979288] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.986996] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 326.994274] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 327.001538] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 327.008803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 327.016069] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000017 [ 327.024603] gfs2: gfs2 mount does not exist [ 327.053701] binder: send failed reply for transaction 910, target dead 03:36:10 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x3000, 0x1060, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget(0x3, 0x1000, 0x54000802, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget(0x0, 0x3000, 0x540000ff, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/75) 03:36:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(tgr128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="9703dd7d565e33596e33cdabb45e8a015f9cbaacf8860d67fe6375a724f79276ee9ca21b0000006837ac737be512f4d0c9154396b4e2b2a4d9db859b3dee9eec58", 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='hmac(tgr128-generic)\x00'}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x100000000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x8, 0x1, 0xffff}, 0x10) [ 327.096999] binder: undelivered TRANSACTION_ERROR: 29189 [ 327.102676] binder: undelivered TRANSACTION_ERROR: 29201 03:36:10 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000400)="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", 0x1000, r0) r3 = add_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001400)="8dbfde5943f7e81f9ce84019c466625a65bd0a29025e74bae73e727da7092ee735cd15d2eba112a85ff10d209e3fb7547cfe6aab1efb92ae8443a01c85bef4b3c502bc16d329ade8c7bf6a668b4ee0c07e22dec8e278cf41a24bf760f7109715b8cf60dadc97251e4cd8d1d13075a7010b32ac1cf8ffa4447638178a10b62b4ffafcc60dee9ab4f3d6eee0b259843bbc71a6de9ce7c0a048534379a4dd3dc9c3da79d65a2c9a5b617d3409d0069e1bdef501c434547fb148723d58ec5a42f9ca6706bf84fc72cb97c49b5d8eee99eba3eac124b9a440094f9e3a924c0d21", 0xde, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r4}, &(0x7f0000001500)=""/221, 0xdd, 0x0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb), &(0x7f0000d6c000)='\x00', 0x1, r1) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000380), &(0x7f00000003c0)="8427", 0x2, r0) 03:36:10 executing program 4 (fault-call:3 fault-nth:24): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x5, 0xaa5, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x34, 0x10, 0x813, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 03:36:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8b070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 327.310885] FAULT_INJECTION: forcing a failure. [ 327.310885] name failslab, interval 1, probability 0, space 0, times 0 [ 327.322272] CPU: 1 PID: 19948 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 327.329654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.339194] Call Trace: [ 327.341794] dump_stack+0x1c9/0x2b4 [ 327.345430] ? dump_stack_print_info.cold.2+0x52/0x52 [ 327.350639] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 327.355059] should_fail.cold.4+0xa/0x1a [ 327.359120] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 327.364214] ? unwind_get_return_address+0x61/0xa0 [ 327.369139] ? __save_stack_trace+0x8d/0xf0 [ 327.373461] ? graph_lock+0x170/0x170 [ 327.380132] ? find_held_lock+0x36/0x1c0 [ 327.384207] ? __lock_is_held+0xb5/0x140 [ 327.388272] ? check_same_owner+0x340/0x340 [ 327.392608] ? rcu_note_context_switch+0x730/0x730 [ 327.397533] __should_failslab+0x124/0x180 [ 327.401760] should_failslab+0x9/0x14 [ 327.405552] kmem_cache_alloc_trace+0x2cb/0x780 [ 327.410212] ? __kmalloc_node+0x33/0x70 [ 327.414354] ? __kmalloc_node+0x33/0x70 [ 327.418690] ? rcu_read_lock_sched_held+0x108/0x120 [ 327.423726] __memcg_init_list_lru_node+0x185/0x2d0 [ 327.428740] ? kvfree_rcu+0x20/0x20 [ 327.432450] ? __kmalloc_node+0x47/0x70 [ 327.436420] __list_lru_init+0x46a/0x7c0 [ 327.440478] ? list_lru_destroy+0x4d0/0x4d0 [ 327.444793] ? __lockdep_init_map+0x105/0x590 [ 327.449372] ? __init_waitqueue_head+0x9e/0x150 [ 327.454041] ? init_wait_entry+0x1c0/0x1c0 [ 327.458288] sget_userns+0x782/0xf20 [ 327.461995] ? test_gfs2_super+0x50/0x50 [ 327.466084] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 327.470936] ? destroy_unused_super.part.11+0x110/0x110 [ 327.476292] ? rcu_read_lock_sched_held+0x108/0x120 [ 327.481303] ? kmem_cache_free+0x25c/0x2d0 [ 327.485533] ? putname+0xf7/0x130 [ 327.488978] ? filename_lookup+0x39c/0x510 [ 327.493205] ? filename_parentat.isra.58+0x570/0x570 [ 327.498301] ? cap_capable+0x1f9/0x260 [ 327.502185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.507725] ? security_capable+0x99/0xc0 [ 327.511867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.517399] ? ns_capable_common+0x13f/0x170 [ 327.521806] ? test_gfs2_super+0x50/0x50 [ 327.525869] sget+0x10b/0x150 [ 327.528968] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 327.533816] gfs2_mount_meta+0x12f/0x2a0 [ 327.537876] ? init_sb+0xcc0/0xcc0 [ 327.541409] ? module_unload_free+0x5d0/0x5d0 [ 327.545913] mount_fs+0xae/0x328 [ 327.549284] ? mpi_free.cold.1+0x19/0x19 [ 327.553337] vfs_kern_mount.part.34+0xdc/0x4e0 [ 327.557909] ? may_umount+0xb0/0xb0 [ 327.561528] ? _raw_read_unlock+0x22/0x30 [ 327.565664] ? __get_fs_type+0x97/0xc0 [ 327.569549] do_mount+0x581/0x30e0 [ 327.573080] ? lock_downgrade+0x8f0/0x8f0 [ 327.577231] ? copy_mount_string+0x40/0x40 [ 327.581459] ? check_same_owner+0x340/0x340 [ 327.585772] ? __check_object_size+0x9d/0x5f2 [ 327.590276] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 327.595806] ? _copy_from_user+0xdf/0x150 [ 327.599968] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 327.605511] ? copy_mount_options+0x285/0x380 [ 327.610088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 327.615635] ksys_mount+0x12d/0x140 [ 327.619275] __x64_sys_mount+0xbe/0x150 [ 327.623239] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 327.628261] do_syscall_64+0x1b9/0x820 [ 327.632153] ? finish_task_switch+0x1d3/0x870 [ 327.636646] ? syscall_return_slowpath+0x5e0/0x5e0 [ 327.641579] ? syscall_return_slowpath+0x31d/0x5e0 [ 327.646519] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 327.651880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.656726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.661911] RIP: 0033:0x455ab9 [ 327.665090] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 327.684530] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.692232] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 327.699577] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 03:36:11 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget(0x1, 0x2000, 0x101a, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:36:11 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) r2 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="cdee6f50b51968445d73922fa75d7ed748904a4b743fd57ac5b0a2ffe7d5b73fcde727e2bf9148d0d7bf94911508597d263f0b75f27d640804a6d71d31e0351955c2f4324f4a82c881331bd9c1c0f8f31f8970d44bbf907da1e094dff9b142b7bf8d19af9bead756613687e00f3a25c76189f70d0faf3b32", 0x78, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r2, 0x9) mount$9p_fd(0x0, &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0x14) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) [ 327.706836] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 327.714110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 327.721367] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000018 03:36:11 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)="0209000000345f8f762070") r0 = epoll_create(0x8) r1 = memfd_create(&(0x7f0000000200)='vboxnet1vmnet1trusted\x00', 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000240)={0x5, 0x1}) fcntl$notify(r0, 0x0, 0x283) pselect6(0xfe13, &(0x7f0000000680), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000000)={&(0x7f00000003c0), 0x8}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={r2, 0xa1, "f4d2a700ecceed0bc0f12e0f19d4709e6f86e2ee0e28076cb2768c3acab14760b0d6db32fcaf5eca0f9b6497016374d1795efee6c4923871fa778e4a555ead6a98506d3c8b73539b0186b223015f7d162fe5651d3a46368696f2475d52e50a3aafbe092113e140af881289bf7250c087b0a6c2ef4a77bfc26627afc7ad88db8067c6694220c12ab06ba1d776bfb6c5b80fabf60ab8fb9619487d31a1461c8be84e"}, &(0x7f0000000180)=0xa9) [ 327.775403] gfs2: gfs2 mount does not exist 03:36:11 executing program 4 (fault-call:3 fault-nth:25): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) listen(r1, 0x8) [ 327.797785] binder: 19950:19952 got reply transaction with bad transaction stack, transaction 915 has target 19950:0 [ 327.808910] binder: 19950:19952 transaction failed 29201/-71, size 0-0 line 2774 [ 327.820233] binder: BINDER_SET_CONTEXT_MGR already set [ 327.825836] binder: 19950:19958 ioctl 40046207 0 returned -16 [ 327.834223] binder_alloc: 19950: binder_alloc_buf, no vma [ 327.835119] binder: 19950:19958 got reply transaction with no transaction stack [ 327.839964] binder: 19950:19952 transaction failed 29189/-3, size 0-0 line 2967 [ 327.847425] binder: 19950:19958 transaction failed 29201/-71, size 0-0 line 2759 [ 327.866830] binder: release 19950:19952 transaction 915 out, still active [ 327.874181] binder: undelivered TRANSACTION_COMPLETE [ 327.879356] binder: undelivered TRANSACTION_ERROR: 29201 [ 327.885202] binder: send failed reply for transaction 915, target dead [ 327.896428] binder: undelivered TRANSACTION_ERROR: 29189 [ 327.901976] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.041347] FAULT_INJECTION: forcing a failure. [ 328.041347] name failslab, interval 1, probability 0, space 0, times 0 [ 328.052687] CPU: 0 PID: 19979 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 328.060089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.069447] Call Trace: [ 328.072054] dump_stack+0x1c9/0x2b4 [ 328.075704] ? dump_stack_print_info.cold.2+0x52/0x52 [ 328.080909] ? __save_stack_trace+0x8d/0xf0 [ 328.085253] should_fail.cold.4+0xa/0x1a 03:36:11 executing program 6: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000332000)=',mime_typebdev(\x00', 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, {0x8001, 0x81, 0x3, 0x101, 0x80000000, 0x9}}, 0x8) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)=';', 0x1}]) 03:36:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:11 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000001c0)=0x103000) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp, &(0x7f0000000080)=0x80, 0x800) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/82, 0x0, 0x1000, 0x1f}, 0x18) 03:36:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xffeff010}, {0x16}]}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000600)=0xe75) r1 = open(&(0x7f0000000280)='./file1\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x3}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000004c0)={r2, 0x6, 0x401, 0xd01, 0x5f9, 0x8}, 0x14) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000002c0)={0x5, 0x4, 0xfffffffffffffffe, 0x6, 0x1f}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="900200001600000227bd7000fbdbdf25fe8000000000000000000000000000aae00000020000000000000000000000004e240d7b4e21079e020020208c000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="fe80000000000000000000000000001d000004d63f00003e9df3c1c3d2073a0000000000000000000000000000000000000400000000000006000000000000000800000000000000c2be6852000000000300000000000000030000000000000001000000000000003f00000000000000010000000000000001000100000000000500000000000000fbfffffff8ffffff0000000029bd7000053500000a0004f90400000000000000010000000200000008000c00ff0f0000f00002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038050000977e9415ade123bba6643aed7b3f4fea4e3073ef65fcb173f5dc31c82854c41c6f59db83692bf3bb00993bc1fe0ce0aa2e88d4ca6c275561dccc788ddc8cb3d22993f91e4f2a5a36d21efe1e249f5e62296d45110639eef8f4b37c125a304d429645e82f5a9b20224c9eb01e5d82d3875a3f3b5f82738b06cb641cc41ab755139d0c0888a630880f1dbc8456e8896403d6152e31b38df1075fbdeaeaa1b6ac06adffc1269594360084000500000039e4000000000000000000000000000004d4330000000a000000e00000010000000000000000000000000535000003016000663b0000ffffffff00000000ffffffff000000000000000000000000000004d6320000000a000000e0000002000000000000000000000000000000000603ff000200000000000000010000000c001c00", @ANYRES32=r7, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x1f}, 0x4e24, 0x6, 0x4e20, 0x20, 0x2, 0xa0, 0x20, 0x3e, r7, r6}, {0x1, 0x1, 0x4000000000000000, 0x7fff, 0x7, 0x3, 0xeb}, {0x10000, 0x37, 0x7, 0x2}, 0x6e1, 0x6e6bbc, 0x2, 0x1, 0x3, 0x3}, {{@in=@multicast1, 0x4d5, 0x7f}, 0xa, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x6, 0x4fdf, 0x4, 0xffff}}, 0xe8) 03:36:11 executing program 7: r0 = socket(0x4000000000000010, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f00000000c0)="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") sendfile(r0, r0, &(0x7f0000000000), 0x80000002) [ 328.089595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 328.094703] ? save_stack+0x43/0xd0 [ 328.098333] ? kasan_kmalloc+0xc4/0xe0 [ 328.102234] ? kmem_cache_alloc_trace+0x152/0x780 [ 328.107086] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 328.112287] ? __list_lru_init+0x46a/0x7c0 [ 328.116535] ? sget_userns+0x782/0xf20 [ 328.120437] ? graph_lock+0x170/0x170 [ 328.124284] ? do_mount+0x581/0x30e0 [ 328.128003] ? ksys_mount+0x12d/0x140 [ 328.131815] ? __x64_sys_mount+0xbe/0x150 [ 328.135981] ? do_syscall_64+0x1b9/0x820 [ 328.140048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.145419] ? find_held_lock+0x36/0x1c0 [ 328.149497] ? __lock_is_held+0xb5/0x140 [ 328.153557] ? check_same_owner+0x340/0x340 [ 328.157879] ? rcu_note_context_switch+0x730/0x730 [ 328.162803] __should_failslab+0x124/0x180 [ 328.167068] should_failslab+0x9/0x14 [ 328.170880] kmem_cache_alloc_trace+0x2cb/0x780 [ 328.175546] ? __kmalloc_node+0x33/0x70 [ 328.179519] ? __kmalloc_node+0x33/0x70 [ 328.183492] ? rcu_read_lock_sched_held+0x108/0x120 [ 328.188501] __memcg_init_list_lru_node+0x185/0x2d0 [ 328.193510] ? kvfree_rcu+0x20/0x20 [ 328.197148] ? __kmalloc_node+0x47/0x70 [ 328.201127] __list_lru_init+0x46a/0x7c0 [ 328.205190] ? list_lru_destroy+0x4d0/0x4d0 [ 328.209508] ? __lockdep_init_map+0x105/0x590 [ 328.214090] ? __init_waitqueue_head+0x9e/0x150 [ 328.218748] ? init_wait_entry+0x1c0/0x1c0 [ 328.222976] sget_userns+0x782/0xf20 [ 328.226688] ? test_gfs2_super+0x50/0x50 [ 328.230744] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 328.235584] ? destroy_unused_super.part.11+0x110/0x110 [ 328.240948] ? rcu_read_lock_sched_held+0x108/0x120 [ 328.245960] ? kmem_cache_free+0x25c/0x2d0 [ 328.250181] ? putname+0xf7/0x130 [ 328.253630] ? filename_lookup+0x39c/0x510 [ 328.257867] ? filename_parentat.isra.58+0x570/0x570 [ 328.262963] ? cap_capable+0x1f9/0x260 [ 328.266861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.272393] ? security_capable+0x99/0xc0 [ 328.276535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.282067] ? ns_capable_common+0x13f/0x170 [ 328.286476] ? test_gfs2_super+0x50/0x50 [ 328.290526] sget+0x10b/0x150 [ 328.293630] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 328.298470] gfs2_mount_meta+0x12f/0x2a0 [ 328.302532] ? init_sb+0xcc0/0xcc0 [ 328.306074] ? module_unload_free+0x5d0/0x5d0 [ 328.310560] mount_fs+0xae/0x328 [ 328.313928] vfs_kern_mount.part.34+0xdc/0x4e0 [ 328.318496] ? may_umount+0xb0/0xb0 [ 328.322113] ? _raw_read_unlock+0x22/0x30 [ 328.326260] ? __get_fs_type+0x97/0xc0 [ 328.330145] do_mount+0x581/0x30e0 [ 328.333696] ? lock_downgrade+0x8f0/0x8f0 [ 328.337855] ? copy_mount_string+0x40/0x40 [ 328.342089] ? check_same_owner+0x340/0x340 [ 328.346416] ? __check_object_size+0x9d/0x5f2 [ 328.350927] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 328.356456] ? _copy_from_user+0xdf/0x150 [ 328.360610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 328.366148] ? copy_mount_options+0x285/0x380 [ 328.370654] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 328.376288] ksys_mount+0x12d/0x140 [ 328.379926] __x64_sys_mount+0xbe/0x150 [ 328.383886] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 328.388900] do_syscall_64+0x1b9/0x820 [ 328.392779] ? finish_task_switch+0x1d3/0x870 [ 328.397529] ? syscall_return_slowpath+0x5e0/0x5e0 [ 328.402450] ? syscall_return_slowpath+0x31d/0x5e0 [ 328.407375] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 328.412741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.417600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.422778] RIP: 0033:0x455ab9 [ 328.425955] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.445264] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 328.452967] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 328.460248] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 328.467512] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 328.474780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 328.482051] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000019 03:36:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2800, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) close(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x40, 0x40) r3 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x6000101) inotify_rm_watch(r2, r3) [ 328.493415] gfs2: gfs2 mount does not exist 03:36:12 executing program 4 (fault-call:3 fault-nth:26): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:12 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0xd00, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) [ 328.521687] binder: 19984:19986 got reply transaction with bad transaction stack, transaction 920 has target 19984:0 [ 328.532520] binder: 19984:19986 transaction failed 29201/-71, size 0-0 line 2774 [ 328.545160] binder: BINDER_SET_CONTEXT_MGR already set [ 328.551338] binder: 19984:19988 ioctl 40046207 0 returned -16 [ 328.558712] binder: 19984:19988 got reply transaction with no transaction stack [ 328.558816] binder_alloc: 19984: binder_alloc_buf, no vma [ 328.566549] binder: 19984:19988 transaction failed 29201/-71, size 0-0 line 2759 [ 328.571942] binder: 19984:19986 transaction failed 29189/-3, size 0-0 line 2967 [ 328.588496] binder: release 19984:19986 transaction 920 out, still active [ 328.595514] binder: undelivered TRANSACTION_COMPLETE [ 328.600733] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.622244] binder: send failed reply for transaction 920, target dead [ 328.629758] binder: undelivered TRANSACTION_ERROR: 29189 [ 328.635333] binder: undelivered TRANSACTION_ERROR: 29201 03:36:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 328.741825] FAULT_INJECTION: forcing a failure. [ 328.741825] name failslab, interval 1, probability 0, space 0, times 0 [ 328.753197] CPU: 1 PID: 20014 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 328.760600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.769963] Call Trace: [ 328.772558] dump_stack+0x1c9/0x2b4 [ 328.776182] ? dump_stack_print_info.cold.2+0x52/0x52 [ 328.781364] ? __save_stack_trace+0x8d/0xf0 [ 328.785685] should_fail.cold.4+0xa/0x1a [ 328.789743] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 328.794840] ? save_stack+0x43/0xd0 [ 328.798458] ? kasan_kmalloc+0xc4/0xe0 [ 328.802350] ? kmem_cache_alloc_trace+0x152/0x780 [ 328.807185] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 328.812380] ? __list_lru_init+0x46a/0x7c0 [ 328.816604] ? sget_userns+0x782/0xf20 [ 328.820624] ? graph_lock+0x170/0x170 [ 328.824416] ? do_mount+0x581/0x30e0 [ 328.828139] ? ksys_mount+0x12d/0x140 [ 328.831929] ? __x64_sys_mount+0xbe/0x150 [ 328.836066] ? do_syscall_64+0x1b9/0x820 [ 328.840126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.845490] ? find_held_lock+0x36/0x1c0 [ 328.849545] ? __lock_is_held+0xb5/0x140 [ 328.853612] ? check_same_owner+0x340/0x340 [ 328.857934] ? rcu_note_context_switch+0x730/0x730 [ 328.862874] __should_failslab+0x124/0x180 [ 328.867145] should_failslab+0x9/0x14 [ 328.870948] kmem_cache_alloc_trace+0x2cb/0x780 [ 328.875614] ? __kmalloc_node+0x33/0x70 [ 328.879587] ? __kmalloc_node+0x33/0x70 [ 328.883553] ? rcu_read_lock_sched_held+0x108/0x120 [ 328.888916] __memcg_init_list_lru_node+0x185/0x2d0 [ 328.893939] ? kvfree_rcu+0x20/0x20 [ 328.897570] ? __kmalloc_node+0x47/0x70 [ 328.901558] __list_lru_init+0x46a/0x7c0 [ 328.905608] ? list_lru_destroy+0x4d0/0x4d0 [ 328.909927] ? __lockdep_init_map+0x105/0x590 [ 328.914428] ? __init_waitqueue_head+0x9e/0x150 [ 328.919085] ? init_wait_entry+0x1c0/0x1c0 [ 328.923322] sget_userns+0x782/0xf20 [ 328.927028] ? test_gfs2_super+0x50/0x50 [ 328.931086] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 328.935935] ? destroy_unused_super.part.11+0x110/0x110 [ 328.941309] ? rcu_read_lock_sched_held+0x108/0x120 [ 328.946316] ? kmem_cache_free+0x25c/0x2d0 [ 328.950538] ? putname+0xf7/0x130 [ 328.953979] ? filename_lookup+0x39c/0x510 [ 328.958205] ? filename_parentat.isra.58+0x570/0x570 [ 328.963472] ? cap_capable+0x1f9/0x260 [ 328.967352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.972881] ? security_capable+0x99/0xc0 [ 328.977036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.982562] ? ns_capable_common+0x13f/0x170 [ 328.986961] ? test_gfs2_super+0x50/0x50 [ 328.991163] sget+0x10b/0x150 [ 328.994260] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 328.999097] gfs2_mount_meta+0x12f/0x2a0 [ 329.003145] ? init_sb+0xcc0/0xcc0 [ 329.006677] ? module_unload_free+0x5d0/0x5d0 [ 329.011184] mount_fs+0xae/0x328 [ 329.014553] ? mpi_free.cold.1+0x19/0x19 [ 329.018606] vfs_kern_mount.part.34+0xdc/0x4e0 [ 329.023177] ? may_umount+0xb0/0xb0 [ 329.026794] ? _raw_read_unlock+0x22/0x30 [ 329.030928] ? __get_fs_type+0x97/0xc0 [ 329.034806] do_mount+0x581/0x30e0 [ 329.038338] ? lock_downgrade+0x8f0/0x8f0 [ 329.042490] ? copy_mount_string+0x40/0x40 [ 329.046711] ? check_same_owner+0x340/0x340 [ 329.051030] ? __check_object_size+0x9d/0x5f2 [ 329.055523] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.061076] ? _copy_from_user+0xdf/0x150 [ 329.065218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.070752] ? copy_mount_options+0x285/0x380 [ 329.075250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.080774] ksys_mount+0x12d/0x140 [ 329.084392] __x64_sys_mount+0xbe/0x150 [ 329.088354] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.093357] do_syscall_64+0x1b9/0x820 [ 329.097230] ? finish_task_switch+0x1d3/0x870 [ 329.101715] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.106649] ? syscall_return_slowpath+0x31d/0x5e0 [ 329.111578] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 329.116930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.121778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.127225] RIP: 0033:0x455ab9 [ 329.130410] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.149642] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.157339] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 329.164594] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 329.171850] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 329.179128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 329.186383] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001a 03:36:12 executing program 2: shmget(0x0, 0x2000, 0x54000500, &(0x7f0000ffd000/0x2000)=nil) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) r1 = shmget$private(0x0, 0x1000, 0x18, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xbdf8) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @rand_addr=0x3f, r3}, 0xc) 03:36:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x9, 0x1, 0x3, 0x3, 0x5}, 0xc) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5412, &(0x7f00000000c0)={0x16}) 03:36:12 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x10000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, r3, 0x3}, 0xc) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{}, {}], r1, 0x1, 0x1, 0x400000}}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="003f73000400000000001e"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc0185879, 0x20000001) 03:36:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='\x00'}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/route\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r2, 0x40047451, &(0x7f0000000340)=""/174) dup3(r2, r3, 0x0) 03:36:12 executing program 1: r0 = eventfd2(0x0, 0x0) fadvise64(r0, 0x0, 0xfffffffffffeffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000080)=""/64, &(0x7f00000000c0)=0x40) sendfile(r0, r0, &(0x7f0000000000), 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@dev}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) 03:36:12 executing program 5: mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000), 0x1d, 0x0) [ 329.265898] gfs2: gfs2 mount does not exist 03:36:12 executing program 4 (fault-call:3 fault-nth:27): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 329.316529] binder: 20019:20020 got reply transaction with bad transaction stack, transaction 925 has target 20019:0 [ 329.327587] binder: 20019:20020 transaction failed 29201/-71, size 0-0 line 2774 [ 329.342905] binder: BINDER_SET_CONTEXT_MGR already set [ 329.348565] binder: 20019:20025 ioctl 40046207 0 returned -16 03:36:13 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) shmctl$SHM_UNLOCK(0x0, 0xc) [ 329.400124] binder: 20019:20025 got reply transaction with no transaction stack [ 329.407756] binder: 20019:20025 transaction failed 29201/-71, size 0-0 line 2759 [ 329.418266] binder_alloc: 20019: binder_alloc_buf, no vma [ 329.424889] binder: 20019:20020 transaction failed 29189/-3, size 0-0 line 2967 03:36:13 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e24, 0x24, @mcast2, 0xa562}, {0xa, 0x4e21, 0x0, @remote, 0x4}, 0x1, [0x4, 0x3ff, 0x0, 0xc56, 0x80000000000, 0xffffffffffff4f8a, 0x346f000000, 0x3]}, 0x5c) r1 = gettid() r2 = getpgrp(0x0) kcmp(r1, r2, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'veth0_to_bond\x00', 0x7fff}) ptrace$peekuser(0x3, r1, 0x1) [ 329.444103] binder: release 20019:20020 transaction 925 out, still active [ 329.451167] binder: undelivered TRANSACTION_COMPLETE [ 329.456346] binder: undelivered TRANSACTION_ERROR: 29201 03:36:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x4040) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r4 = getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10, 0xbbf4, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x1460, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x1f4, 0x26, [@typed={0x14, 0x15, @ipv6=@mcast1}, @generic="a80d4b3b83f6ad6c0a37d7985a5a253634628a8ad2a2e56157fd284aadbe062c7267885e3687080ee1be5d0ad08f906576b95fabfba37749172dbaa7139a741d26e7b85aad99c5e9238dfb449e251954db3655955ec43c68e1253edd2ecd636cadbb359be84ff42c3cd1c92542ae9de2238fbd05dc1fedc2382cdce873d58d2fed942a990bba1857ca47f5b08558d0cc73589946f72d3c25a9b6e78b2e4dc71f8e1c39223975204c32", @typed={0x4, 0x1b}, @typed={0x8, 0x35, @u32=0x4}, @typed={0x8, 0x81, @uid=r3}, @generic="84c8ef2e20797ece34f241c99210a0b188ab985d810ec789c23c850d9fb66779fe", @typed={0xdc, 0x47, @binary="2f9178592b975100f698b523d569e0e45f7ba3a88cae6d61ababe71985a4b0da5a58b428cd4616e3b25c940dd0e3d5417e79b895c83d65014b72af977d504e6441d4a9b37b273af3ab61b3b7b9e29eb0f739383185917a77b2602711ad9e055293b4336d7340e113d2f4f99c56c5392f12a9b8d4b093a5e93384ef702f64a4a4b4f9b0df0cc1cb147662175531ad8bd3fb72cea51741ad7e90d7a544c067f11c9b3774c4df00fa126da8383d5a51d1d69e92dae4035f9c564d5e528ed89183058e28199664d73341fa90b0492b35e353190ff0fdcd80f18c"}, @typed={0x14, 0x8a, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}}, @typed={0x8, 0x82, @uid=r4}, @typed={0x4, 0x59}]}, @nested={0x11b8, 0x30, [@generic="c0019ba08e2e02fc17a40514f5d895125831432e7f697da37c97f93bc36b734b2e35631442b2ab5b2ab377176337e9fe321065622741a60179011643280f971d2cbb91184b729c536ffef33cd84c1d017110cae0eca0ade6c2b29c7f40ebb4eab25cb821fee83f455c81fa8d4d423df46816df8123364faa3d4e1c2a081bedcb276b871f5c40319c49d0b0de4750bc1effcae9b567c6d26b0dfad91f2c2e857c5db3a20ece5e7e1b636dd943a1c502da63a409450d3a3871ed0f93b5b170c8c655f67fd7acc171e725dae336effcabe456e6ae53d8c159bc006bb1f7bcbfce464f4b7a45bf886dcb0c", @generic="9b3230518022c7973686eea1429bdbab5c61b49a7ac0e21542f0218f225662a51d462a9e1bf1d565fe0a994648b86a243c9051b7972020714ef8e74cd76ed8c3ced30b24d3dacdc095517a351d663885b7199f63fddbe4f9fd2eb5896063b3831b58a10f765852e318420b52774468d32138c7c1a9", @generic="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", @generic="a05e5fb9cb3fd3893b77700f290d4d4340952406d2", @typed={0x8, 0x7e, @uid=r2}, @generic="97005e3b6b97a9460452fb8a40f03337b858ad64a7dbc449ffdc5167b8de9d975761f0409f01a6b5d6db2e5e3678c72018295aad6b40ff"]}, @typed={0x8, 0x22, @pid=r5}, @nested={0x90, 0x81, [@generic="15a9083285dcc12125ab3f415c4c827eef8b6daaecd29313d9bbd845872b2b72cf1e695aa96975a035fa8998bce0ebd67e854717f0e9916d49f531737cb97ac383900baa7615f560ee68b0dee6983ea47ebaa3fcc109df9e510b8dc097741c76b273de1a40284bddd968d22f69615be68aa93304db3d66", @typed={0x14, 0x3b, @str='}vmnet0&bdev\x00'}]}, @typed={0x8, 0x52, @uid=r2}]}, 0x12ba}}, 0x0) [ 329.499160] binder: undelivered TRANSACTION_ERROR: 29189 [ 329.504817] binder: undelivered TRANSACTION_ERROR: 29201 03:36:13 executing program 5: socket$inet6(0xa, 0x800, 0xff) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0xfffffe2f, &(0x7f0000000ec0), 0x0, &(0x7f00000025c0)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) 03:36:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a), 0x0) r2 = accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="1c98f00d070020b6f612d56296ef5b1309cef0171681d5", 0x17) r4 = shmget$private(0x0, 0x4000, 0x1fff5, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x2000)=nil, 0x4000) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) [ 329.583162] binder: send failed reply for transaction 925, target dead [ 329.591131] FAULT_INJECTION: forcing a failure. [ 329.591131] name failslab, interval 1, probability 0, space 0, times 0 [ 329.602475] CPU: 1 PID: 20048 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 329.609855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.619220] Call Trace: [ 329.621841] dump_stack+0x1c9/0x2b4 [ 329.625514] ? dump_stack_print_info.cold.2+0x52/0x52 [ 329.630735] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 329.635609] ? __save_stack_trace+0x8d/0xf0 [ 329.639983] should_fail.cold.4+0xa/0x1a [ 329.644115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.649255] ? save_stack+0x43/0xd0 [ 329.652928] ? kasan_kmalloc+0xc4/0xe0 [ 329.656846] ? kmem_cache_alloc_trace+0x152/0x780 [ 329.661719] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 329.666936] ? __list_lru_init+0x46a/0x7c0 [ 329.671203] ? sget_userns+0x782/0xf20 [ 329.675124] ? graph_lock+0x170/0x170 [ 329.678954] ? do_mount+0x581/0x30e0 [ 329.682692] ? ksys_mount+0x12d/0x140 [ 329.686517] ? __x64_sys_mount+0xbe/0x150 [ 329.690695] ? do_syscall_64+0x1b9/0x820 [ 329.694794] ? find_held_lock+0x36/0x1c0 [ 329.698888] ? __lock_is_held+0xb5/0x140 [ 329.702991] ? check_same_owner+0x340/0x340 [ 329.707342] ? rcu_note_context_switch+0x730/0x730 [ 329.712303] __should_failslab+0x124/0x180 [ 329.716566] should_failslab+0x9/0x14 [ 329.720396] kmem_cache_alloc_trace+0x2cb/0x780 [ 329.725096] ? __kmalloc_node+0x33/0x70 [ 329.729093] ? __kmalloc_node+0x33/0x70 [ 329.733094] ? rcu_read_lock_sched_held+0x108/0x120 [ 329.738311] __memcg_init_list_lru_node+0x185/0x2d0 [ 329.743358] ? kvfree_rcu+0x20/0x20 [ 329.746998] ? __kmalloc_node+0x47/0x70 [ 329.750985] __list_lru_init+0x46a/0x7c0 [ 329.755048] ? list_lru_destroy+0x4d0/0x4d0 [ 329.759363] ? __lockdep_init_map+0x105/0x590 [ 329.763958] ? __init_waitqueue_head+0x9e/0x150 [ 329.768620] ? init_wait_entry+0x1c0/0x1c0 [ 329.772858] sget_userns+0x782/0xf20 [ 329.776563] ? test_gfs2_super+0x50/0x50 [ 329.780632] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 329.785482] ? destroy_unused_super.part.11+0x110/0x110 [ 329.790840] ? rcu_read_lock_sched_held+0x108/0x120 [ 329.795952] ? kmem_cache_free+0x25c/0x2d0 [ 329.800195] ? putname+0xf7/0x130 [ 329.803648] ? filename_lookup+0x39c/0x510 [ 329.807874] ? filename_parentat.isra.58+0x570/0x570 [ 329.812971] ? cap_capable+0x1f9/0x260 [ 329.816855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.822381] ? security_capable+0x99/0xc0 [ 329.826522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.832052] ? ns_capable_common+0x13f/0x170 [ 329.836466] ? test_gfs2_super+0x50/0x50 [ 329.840522] sget+0x10b/0x150 [ 329.843619] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 329.848454] gfs2_mount_meta+0x12f/0x2a0 [ 329.852505] ? init_sb+0xcc0/0xcc0 [ 329.856045] ? module_unload_free+0x5d0/0x5d0 [ 329.860533] mount_fs+0xae/0x328 [ 329.863900] ? mpi_free.cold.1+0x19/0x19 [ 329.867955] vfs_kern_mount.part.34+0xdc/0x4e0 [ 329.872530] ? may_umount+0xb0/0xb0 [ 329.876146] ? _raw_read_unlock+0x22/0x30 [ 329.880294] ? __get_fs_type+0x97/0xc0 [ 329.884187] do_mount+0x581/0x30e0 [ 329.887735] ? lock_downgrade+0x8f0/0x8f0 [ 329.891876] ? copy_mount_string+0x40/0x40 [ 329.896105] ? __check_object_size+0x9d/0x5f2 [ 329.900617] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.906146] ? _copy_from_user+0xdf/0x150 [ 329.910284] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.915826] ? copy_mount_options+0x285/0x380 [ 329.920323] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.925863] ksys_mount+0x12d/0x140 [ 329.929484] __x64_sys_mount+0xbe/0x150 [ 329.933462] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.938478] do_syscall_64+0x1b9/0x820 [ 329.942355] ? finish_task_switch+0x1d3/0x870 [ 329.946843] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.951763] ? syscall_return_slowpath+0x31d/0x5e0 [ 329.956688] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 329.962052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.966901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.972078] RIP: 0033:0x455ab9 [ 329.975253] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.994965] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 330.002668] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 330.009937] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 330.017199] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 330.024473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 03:36:13 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) socket$packet(0x11, 0x3, 0x300) shmctl$SHM_UNLOCK(0x0, 0xc) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x20, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="c33000352bd62b106c3ababe3fe6967a03f3eb5d5bf1d76a5b520dc021d560e6d57440cd9292bd2e7c66dbc74190a482f036cf83b047c0decf06495176a6233203ecdf120f8c2b693c68c65d537668f83c7b95e66eef0566f8b757c333ad761501cb43418699a2fa31867800d0179996a2cb018f24aebbba01f09167e707b2810ef81f9a72aca3025c32e818fab4f1e53d81a1a72097780d9b4b1d7d18450b94f635b34eca7b4482d26c7860519d2b506f78a34a03657e48cb27b6311352ac5457620e87fa", 0xc5, 0x80}, {&(0x7f0000000180)="a8f172ce4433af9d179c88b3f8ab181128c21b14c81984ef2b77bf41358eb935a2e4160628a3fc18657396f219f60eb8f2b815cea1b8bd15f0d62bb39273ccca36cc5249d5e411ad97c83bd5ee59df6456c643af9a05158335c6b85ef56ad445cc550871305a8db8aa37a6d24bb46abebb4acfeeffe645037fcf3badaf49c629d9e54346671b5f274ec9e0cc2ee2bab76449473b66838c8d505cf1e65a52", 0x9e}, {&(0x7f0000000240)="03daf7d70e6858f90ee96517609491a67e5df40af0c72e0449999009dad3131d3d0f4cb7bf8182d1a418ac6a5b3c68ac3ca718e8ae506502489bd74bbb91fedea70207ef486a5ad327c3bcd571c38aa90ab85dba948953f9d2d8cab7761457360f4bbd40e66eabcb616a27503ce3702c0e8c3d2d6b71f6df83670c8f762bc00d5c193aee8999dfa51427ddab7227f3693a2d732ef569f22d0f4ac70cad5ad2cfb1ff2c85b61ccf9072bb98df49a1c5a1bc7075f7e99fbf833b1de38e", 0xbc, 0x1f}], 0x200000, &(0x7f0000000400)=ANY=[@ANYBLOB="696e746567726974792c696f636861727365743d63703836352c756d61736b3d3078303030303030303030303030303030342c0074eb6e7201512f4159e7e133ac9e4be3"]) [ 330.031730] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001b 03:36:13 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='dev ', 0x0) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f00000020c0), 0x1000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0x0, 0x2}, 0x10) [ 330.087518] gfs2: gfs2 mount does not exist 03:36:13 executing program 4 (fault-call:3 fault-nth:28): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=ANY=[@ANYBLOB="240099a03ca5bff800001800210000000000000000001c140000de000001000000000800"], 0x24}}, 0x0) 03:36:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r2 = dup3(r1, r0, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, &(0x7f0000000500)}) [ 330.146301] binder: 20071:20072 got reply transaction with bad transaction stack, transaction 930 has target 20071:0 [ 330.157368] binder: 20071:20072 transaction failed 29201/-71, size 0-0 line 2774 03:36:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x173) write$P9_ROPEN(r0, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x4, 0x4}}}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000000), 0x10) r1 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='rng\x00', 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/73, 0x49) [ 330.193674] binder: BINDER_SET_CONTEXT_MGR already set [ 330.213128] binder: 20071:20084 ioctl 40046207 0 returned -16 03:36:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x8, 0x7fffffff, 0x0, 0x4, @local}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) [ 330.278120] binder_alloc: 20071: binder_alloc_buf, no vma [ 330.278266] binder: 20071:20084 got reply transaction with no transaction stack [ 330.283972] binder: 20071:20072 transaction failed 29189/-3, size 0-0 line 2967 [ 330.291458] binder: 20071:20084 transaction failed 29201/-71, size 0-0 line 2759 [ 330.332382] binder: BINDER_SET_CONTEXT_MGR already set [ 330.348888] FAULT_INJECTION: forcing a failure. [ 330.348888] name failslab, interval 1, probability 0, space 0, times 0 [ 330.360336] CPU: 0 PID: 20097 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 330.367723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.377089] Call Trace: [ 330.379707] dump_stack+0x1c9/0x2b4 [ 330.383897] ? dump_stack_print_info.cold.2+0x52/0x52 [ 330.385427] binder: 20095:20098 ioctl 40046207 0 returned -16 [ 330.389168] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 330.389188] ? __save_stack_trace+0x8d/0xf0 [ 330.389218] should_fail.cold.4+0xa/0x1a [ 330.389240] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.389264] ? save_stack+0x43/0xd0 [ 330.417180] ? kasan_kmalloc+0xc4/0xe0 [ 330.421091] ? kmem_cache_alloc_trace+0x152/0x780 [ 330.425959] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 330.431166] ? __list_lru_init+0x46a/0x7c0 [ 330.435695] ? sget_userns+0x782/0xf20 [ 330.437387] binder_alloc: 20071: binder_alloc_buf, no vma [ 330.439597] ? graph_lock+0x170/0x170 [ 330.439614] ? do_mount+0x581/0x30e0 [ 330.439630] ? ksys_mount+0x12d/0x140 [ 330.439645] ? __x64_sys_mount+0xbe/0x150 [ 330.439663] ? do_syscall_64+0x1b9/0x820 [ 330.445245] binder: 20095:20098 transaction failed 29189/-3, size 24-8 line 2967 [ 330.448988] ? find_held_lock+0x36/0x1c0 [ 330.449011] ? __lock_is_held+0xb5/0x140 [ 330.449045] ? check_same_owner+0x340/0x340 [ 330.484688] ? rcu_note_context_switch+0x730/0x730 [ 330.489640] __should_failslab+0x124/0x180 [ 330.493889] should_failslab+0x9/0x14 [ 330.497701] kmem_cache_alloc_trace+0x2cb/0x780 [ 330.502371] ? __kmalloc_node+0x33/0x70 [ 330.506339] ? __kmalloc_node+0x33/0x70 [ 330.510309] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.515327] __memcg_init_list_lru_node+0x185/0x2d0 [ 330.520339] ? kvfree_rcu+0x20/0x20 [ 330.523966] ? __kmalloc_node+0x47/0x70 [ 330.527957] __list_lru_init+0x46a/0x7c0 [ 330.532018] ? list_lru_destroy+0x4d0/0x4d0 [ 330.536769] ? __lockdep_init_map+0x105/0x590 [ 330.541267] ? __init_waitqueue_head+0x9e/0x150 [ 330.545940] ? init_wait_entry+0x1c0/0x1c0 [ 330.550177] sget_userns+0x782/0xf20 [ 330.553880] ? test_gfs2_super+0x50/0x50 [ 330.557935] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 330.562789] ? destroy_unused_super.part.11+0x110/0x110 [ 330.568142] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.573162] ? kmem_cache_free+0x25c/0x2d0 [ 330.577389] ? putname+0xf7/0x130 [ 330.580837] ? filename_lookup+0x39c/0x510 [ 330.585066] ? filename_parentat.isra.58+0x570/0x570 [ 330.590164] ? cap_capable+0x1f9/0x260 [ 330.594050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.599577] ? security_capable+0x99/0xc0 [ 330.603730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.609257] ? ns_capable_common+0x13f/0x170 [ 330.613659] ? test_gfs2_super+0x50/0x50 [ 330.617760] sget+0x10b/0x150 [ 330.620857] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 330.625712] gfs2_mount_meta+0x12f/0x2a0 [ 330.629766] ? init_sb+0xcc0/0xcc0 [ 330.633301] ? module_unload_free+0x5d0/0x5d0 [ 330.637801] mount_fs+0xae/0x328 [ 330.641158] ? mpi_free.cold.1+0x19/0x19 [ 330.645226] vfs_kern_mount.part.34+0xdc/0x4e0 [ 330.649802] ? may_umount+0xb0/0xb0 [ 330.653422] ? _raw_read_unlock+0x22/0x30 [ 330.657557] ? __get_fs_type+0x97/0xc0 [ 330.661440] do_mount+0x581/0x30e0 [ 330.664984] ? lock_downgrade+0x8f0/0x8f0 [ 330.669138] ? copy_mount_string+0x40/0x40 [ 330.673383] ? __check_object_size+0x9d/0x5f2 [ 330.677887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.683423] ? _copy_from_user+0xdf/0x150 [ 330.687563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.693100] ? copy_mount_options+0x285/0x380 [ 330.697602] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.703134] ksys_mount+0x12d/0x140 [ 330.706756] __x64_sys_mount+0xbe/0x150 [ 330.710722] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 330.715742] do_syscall_64+0x1b9/0x820 [ 330.719626] ? finish_task_switch+0x1d3/0x870 [ 330.724118] ? syscall_return_slowpath+0x5e0/0x5e0 [ 330.729053] ? syscall_return_slowpath+0x31d/0x5e0 [ 330.733980] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 330.739347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.744189] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.749371] RIP: 0033:0x455ab9 [ 330.752544] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.771937] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:36:13 executing program 2: r0 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 330.781207] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 330.788466] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 330.795724] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 330.802985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 330.810337] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001c [ 330.820397] gfs2: gfs2 mount does not exist [ 330.825954] binder: release 20071:20072 transaction 930 out, still active [ 330.833165] binder: undelivered TRANSACTION_COMPLETE [ 330.838351] binder: undelivered TRANSACTION_ERROR: 29201 [ 330.859659] binder: send failed reply for transaction 930, target dead 03:36:14 executing program 1: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000000)='\x00l', 0x2) sendfile(r0, r0, &(0x7f0000000040), 0xffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(r2, r3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x3f, 0x4, 0x5, 0x80, 0x1}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r4, 0xe075}, 0x8) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x4, 0x2c, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x7, r1}) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000003c0)={@dev, @multicast2}, &(0x7f0000000400)=0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r5) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000240)) 03:36:14 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x21054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:14 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7fffffff, 0x401, 0x10001, 0xd87f, 0x40, 0x3, 0x3e, 0x4, 0x262, 0x38, 0x3c1, 0x0, 0xfffffffffffffffe, 0x20, 0x2, 0x0, 0x1, 0x80000001}, [{0x0, 0x91ca, 0x7f, 0x401, 0x8, 0x1, 0x2, 0x7}, {0x5, 0x0, 0x4, 0xfffffffffffff105, 0x7, 0x2, 0x2, 0xfff}], "cbe83a63a97e04d5766fc9bcb33d671a297e76e39b86aa301ad4ed76fca8a5334b4a1af39f6c4be6dcef80528faeddbd6f40e358c48a40e1e6a4faf5bb7dfb7edbf8bba0c888196e0bc1a760e1b273222102e0ca20f897a0ce8b7e3700b1f7de84029f88586f1df35ca923ccd54d2b076a163da1192d73d68f039d9eecdffa", [[]]}, 0x1f7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 330.909348] binder: undelivered TRANSACTION_ERROR: 29189 [ 330.914941] binder: undelivered TRANSACTION_ERROR: 29201 03:36:14 executing program 4 (fault-call:3 fault-nth:29): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:14 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xfff, 0x1f, 0x2, 0x3, 0x8}) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = dup(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080), 0x1) 03:36:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000340)=""/204, &(0x7f0000000180)=0xcc) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffe61, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0xb602}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) [ 331.095528] binder: 20121:20123 got reply transaction with bad transaction stack, transaction 936 has target 20121:0 [ 331.106378] binder: 20121:20123 transaction failed 29201/-71, size 0-0 line 2774 [ 331.183651] FAULT_INJECTION: forcing a failure. [ 331.183651] name failslab, interval 1, probability 0, space 0, times 0 [ 331.195109] CPU: 0 PID: 20127 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 331.200786] binder: BINDER_SET_CONTEXT_MGR already set [ 331.202478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.202485] Call Trace: [ 331.202509] dump_stack+0x1c9/0x2b4 [ 331.202531] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.220050] binder: 20121:20135 ioctl 40046207 0 returned -16 [ 331.223354] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 331.223375] ? __save_stack_trace+0x8d/0xf0 [ 331.223403] should_fail.cold.4+0xa/0x1a [ 331.247814] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.248465] binder_alloc: 20121: binder_alloc_buf, no vma [ 331.252929] ? save_stack+0x43/0xd0 [ 331.252948] ? kasan_kmalloc+0xc4/0xe0 [ 331.252970] ? kmem_cache_alloc_trace+0x152/0x780 [ 331.258577] binder: 20121:20123 transaction failed 29189/-3, size 0-0 line 2967 [ 331.262120] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 331.262134] ? __list_lru_init+0x46a/0x7c0 [ 331.262148] ? sget_userns+0x782/0xf20 [ 331.262166] ? graph_lock+0x170/0x170 [ 331.295427] ? do_mount+0x581/0x30e0 [ 331.299145] ? ksys_mount+0x12d/0x140 [ 331.300126] binder: 20121:20135 got reply transaction with no transaction stack [ 331.302971] ? __x64_sys_mount+0xbe/0x150 [ 331.302988] ? do_syscall_64+0x1b9/0x820 [ 331.303020] ? find_held_lock+0x36/0x1c0 [ 331.310502] binder: 20121:20135 transaction failed 29201/-71, size 0-0 line 2759 [ 331.314619] ? __lock_is_held+0xb5/0x140 [ 331.314648] ? check_same_owner+0x340/0x340 [ 331.338688] ? rcu_note_context_switch+0x730/0x730 [ 331.343629] __should_failslab+0x124/0x180 [ 331.347873] should_failslab+0x9/0x14 [ 331.351681] kmem_cache_alloc_trace+0x2cb/0x780 [ 331.356356] ? __kmalloc_node+0x33/0x70 [ 331.357622] binder: release 20121:20123 transaction 936 out, still active [ 331.360332] ? __kmalloc_node+0x33/0x70 [ 331.360361] __memcg_init_list_lru_node+0x185/0x2d0 [ 331.367293] binder: undelivered TRANSACTION_COMPLETE [ 331.371237] ? kvfree_rcu+0x20/0x20 [ 331.371259] ? __kmalloc_node+0x47/0x70 [ 331.376268] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.381343] __list_lru_init+0x46a/0x7c0 [ 331.381363] ? list_lru_destroy+0x4d0/0x4d0 [ 331.402969] ? __lockdep_init_map+0x105/0x590 [ 331.407461] ? __init_waitqueue_head+0x9e/0x150 [ 331.412129] ? init_wait_entry+0x1c0/0x1c0 [ 331.416365] sget_userns+0x782/0xf20 [ 331.420840] ? test_gfs2_super+0x50/0x50 [ 331.424899] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 331.429736] ? destroy_unused_super.part.11+0x110/0x110 [ 331.435089] ? rcu_read_lock_sched_held+0x108/0x120 [ 331.440096] ? kmem_cache_free+0x25c/0x2d0 [ 331.444331] ? putname+0xf7/0x130 [ 331.447776] ? filename_lookup+0x39c/0x510 [ 331.452005] ? filename_parentat.isra.58+0x570/0x570 [ 331.457157] ? cap_capable+0x1f9/0x260 [ 331.461046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.466599] ? security_capable+0x99/0xc0 [ 331.470746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.476288] ? ns_capable_common+0x13f/0x170 [ 331.480709] ? test_gfs2_super+0x50/0x50 [ 331.484771] sget+0x10b/0x150 [ 331.487872] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 331.492711] gfs2_mount_meta+0x12f/0x2a0 [ 331.496765] ? init_sb+0xcc0/0xcc0 [ 331.500303] ? module_unload_free+0x5d0/0x5d0 [ 331.504809] mount_fs+0xae/0x328 [ 331.508179] ? mpi_free.cold.1+0x19/0x19 [ 331.512247] vfs_kern_mount.part.34+0xdc/0x4e0 [ 331.516824] ? may_umount+0xb0/0xb0 [ 331.520451] ? _raw_read_unlock+0x22/0x30 [ 331.524599] ? __get_fs_type+0x97/0xc0 [ 331.528483] do_mount+0x581/0x30e0 [ 331.532029] ? lock_downgrade+0x8f0/0x8f0 [ 331.536171] ? copy_mount_string+0x40/0x40 [ 331.540398] ? __check_object_size+0x9d/0x5f2 [ 331.544901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.550429] ? _copy_from_user+0xdf/0x150 [ 331.554574] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.560101] ? copy_mount_options+0x285/0x380 [ 331.564598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.570130] ksys_mount+0x12d/0x140 [ 331.573757] __x64_sys_mount+0xbe/0x150 [ 331.577722] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 331.582735] do_syscall_64+0x1b9/0x820 [ 331.586613] ? finish_task_switch+0x1d3/0x870 [ 331.591115] ? syscall_return_slowpath+0x5e0/0x5e0 [ 331.596049] ? syscall_return_slowpath+0x31d/0x5e0 [ 331.600975] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 331.606340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.611189] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.616368] RIP: 0033:0x455ab9 [ 331.619550] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.638928] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.646631] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 331.653897] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 331.661156] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 331.668416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 331.675675] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001d 03:36:15 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140), 0x9}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x11) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='limits\x00') r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x2dac, 0x80800) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000240)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="68a679cc19343b8b359d304201adb3e489d8060289b653fc6cb56610477e4a411c114a1c629b5235", 0x28}], 0x1}, 0x0) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = dup3(r0, r0, 0x80000) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) [ 331.747470] gfs2: gfs2 mount does not exist 03:36:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = socket(0x10, 0x80000, 0x7) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000)=0x6, 0x4) 03:36:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") keyctl$setperm(0x5, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x80, @empty, 0x20}, @in6={0xa, 0x4e24, 0x58, @ipv4={[], [], @loopback}, 0x2}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}, 0x4}, @in6={0xa, 0x4e23, 0x944, @mcast2, 0x7}, @in={0x2, 0x4e23}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast1}, 0xffffffffffffb431}], 0xbc) keyctl$describe(0x6, 0x0, &(0x7f00000000c0)=""/157, 0x9d) [ 331.815127] binder: send failed reply for transaction 936, target dead [ 331.818253] binder: 20095:20098 ioctl 8030ae7c 20000040 returned -22 [ 331.835151] binder: undelivered TRANSACTION_ERROR: 29189 [ 331.840817] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.859141] binder: undelivered TRANSACTION_ERROR: 29189 03:36:15 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x44140, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f40000001100000026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="04000000100000000c000200abe4b6320c6b000008002000010001002419240030d9ad3d341ae3405d19b902b135de39f95316ce311b7ddb5a41d0bb6f09d46c24000e0007000000000000008100000000000000ff010000000000000300cd020000000008000500950000002000220012a5f72483ca927554d4ce64891fe87f58574adefe8e35247565000024000e00c00000000000000000000000010000000200000000000000ffff7d070000000008001e000800000024000e00f9000000000000002f010000000000000080000000000000070005a800000000"], 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 03:36:15 executing program 4 (fault-call:3 fault-nth:30): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000180)=0x8) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/201, &(0x7f00000001c0)=0x10) [ 332.044086] FAULT_INJECTION: forcing a failure. [ 332.044086] name failslab, interval 1, probability 0, space 0, times 0 [ 332.055412] CPU: 1 PID: 20168 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 332.062785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.072239] Call Trace: [ 332.074859] dump_stack+0x1c9/0x2b4 [ 332.078521] ? dump_stack_print_info.cold.2+0x52/0x52 [ 332.083826] ? __save_stack_trace+0x8d/0xf0 [ 332.088182] should_fail.cold.4+0xa/0x1a [ 332.092282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.097596] ? save_stack+0x43/0xd0 [ 332.101245] ? kasan_kmalloc+0xc4/0xe0 [ 332.101842] binder: 20095:20098 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 332.105144] ? kmem_cache_alloc_trace+0x152/0x780 [ 332.105165] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 332.105180] ? __list_lru_init+0x46a/0x7c0 [ 332.105198] ? sget_userns+0x782/0xf20 [ 332.105214] ? graph_lock+0x170/0x170 [ 332.105230] ? do_mount+0x581/0x30e0 [ 332.105246] ? ksys_mount+0x12d/0x140 [ 332.105264] ? __x64_sys_mount+0xbe/0x150 [ 332.105283] ? do_syscall_64+0x1b9/0x820 [ 332.105300] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.105319] ? find_held_lock+0x36/0x1c0 [ 332.105342] ? __lock_is_held+0xb5/0x140 [ 332.105370] ? check_same_owner+0x340/0x340 [ 332.105386] ? rcu_note_context_switch+0x730/0x730 [ 332.105405] __should_failslab+0x124/0x180 [ 332.105423] should_failslab+0x9/0x14 [ 332.105436] kmem_cache_alloc_trace+0x2cb/0x780 [ 332.105454] ? __kmalloc_node+0x33/0x70 [ 332.128291] binder_alloc: binder_alloc_mmap_handler: 20095 20001000-20004000 already mapped failed -16 [ 332.131330] ? __kmalloc_node+0x33/0x70 [ 332.131354] ? rcu_read_lock_sched_held+0x108/0x120 [ 332.131379] __memcg_init_list_lru_node+0x185/0x2d0 [ 332.131397] ? kvfree_rcu+0x20/0x20 [ 332.131416] ? __kmalloc_node+0x47/0x70 [ 332.131439] __list_lru_init+0x46a/0x7c0 [ 332.131459] ? list_lru_destroy+0x4d0/0x4d0 [ 332.131480] ? __lockdep_init_map+0x105/0x590 [ 332.131503] ? __init_waitqueue_head+0x9e/0x150 [ 332.131518] ? init_wait_entry+0x1c0/0x1c0 [ 332.131543] sget_userns+0x782/0xf20 [ 332.131556] ? test_gfs2_super+0x50/0x50 [ 332.131572] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 332.131589] ? destroy_unused_super.part.11+0x110/0x110 [ 332.131602] ? rcu_read_lock_sched_held+0x108/0x120 [ 332.131620] ? kmem_cache_free+0x25c/0x2d0 [ 332.167157] binder_alloc: 20095: binder_alloc_buf, no vma [ 332.168961] ? putname+0xf7/0x130 [ 332.168983] ? filename_lookup+0x39c/0x510 [ 332.169002] ? filename_parentat.isra.58+0x570/0x570 [ 332.169033] ? cap_capable+0x1f9/0x260 [ 332.169056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.169077] ? security_capable+0x99/0xc0 [ 332.174076] binder: 20095:20171 transaction failed 29189/-3, size 24-8 line 2967 [ 332.178265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.178282] ? ns_capable_common+0x13f/0x170 [ 332.178299] ? test_gfs2_super+0x50/0x50 [ 332.178318] sget+0x10b/0x150 [ 332.253927] binder: undelivered TRANSACTION_ERROR: 29189 [ 332.257427] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 332.257448] gfs2_mount_meta+0x12f/0x2a0 [ 332.257464] ? init_sb+0xcc0/0xcc0 [ 332.257486] ? module_unload_free+0x5d0/0x5d0 [ 332.257508] mount_fs+0xae/0x328 [ 332.257523] ? mpi_free.cold.1+0x19/0x19 [ 332.257542] vfs_kern_mount.part.34+0xdc/0x4e0 [ 332.257558] ? may_umount+0xb0/0xb0 [ 332.263880] binder: 20095:20171 ioctl 8030ae7c 20000040 returned -22 [ 332.267943] ? _raw_read_unlock+0x22/0x30 [ 332.267960] ? __get_fs_type+0x97/0xc0 [ 332.267982] do_mount+0x581/0x30e0 [ 332.268001] ? lock_downgrade+0x8f0/0x8f0 [ 332.268026] ? copy_mount_string+0x40/0x40 [ 332.268038] ? check_same_owner+0x340/0x340 [ 332.268053] ? __check_object_size+0x9d/0x5f2 [ 332.268081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.268096] ? _copy_from_user+0xdf/0x150 [ 332.268115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.268127] ? copy_mount_options+0x285/0x380 [ 332.268140] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.268156] ksys_mount+0x12d/0x140 [ 332.268174] __x64_sys_mount+0xbe/0x150 [ 332.268186] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 332.268206] do_syscall_64+0x1b9/0x820 [ 332.294343] binder: 20095:20098 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 332.294608] ? finish_task_switch+0x1d3/0x870 [ 332.458894] ? syscall_return_slowpath+0x5e0/0x5e0 [ 332.463813] ? syscall_return_slowpath+0x31d/0x5e0 [ 332.468748] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 332.474113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.478961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.484151] RIP: 0033:0x455ab9 [ 332.487324] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.506919] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 332.514710] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 332.521978] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 332.529253] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 332.536519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 332.543787] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001e [ 332.563468] gfs2: gfs2 mount does not exist 03:36:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pause() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) sendfile(r0, r1, &(0x7f00000001c0), 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x5, 0x4) preadv(r1, &(0x7f00000003c0), 0x3b9, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x6, @mcast2, 0xfff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 03:36:16 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)) 03:36:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:16 executing program 7: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)='ext2\x00', 0x800000, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) 03:36:16 executing program 2: shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = msgget$private(0x0, 0x80) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40027c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10006, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/212) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100ddb8bc08000001000080"]) 03:36:16 executing program 4 (fault-call:3 fault-nth:31): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:16 executing program 5: r0 = memfd_create(&(0x7f00000001c0)="2d42d57aa0cd254e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61db2ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000840)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') 03:36:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000080)=0x101, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) 03:36:16 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2000000000, 0x40000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0x44}}) [ 332.732386] binder: 20182:20188 got reply transaction with bad transaction stack, transaction 943 has target 20182:0 [ 332.743471] binder: 20182:20188 transaction failed 29201/-71, size 0-0 line 2774 [ 332.755556] binder: BINDER_SET_CONTEXT_MGR already set [ 332.762151] binder: 20182:20194 ioctl 40046207 0 returned -16 [ 332.772542] binder_alloc: 20182: binder_alloc_buf, no vma 03:36:16 executing program 7: r0 = accept4(0xffffffffffffff9c, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x80800) accept$unix(r0, &(0x7f0000000340), &(0x7f00000000c0)=0x6e) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x80803, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) dup(r2) connect$inet6(r2, &(0x7f0000000240), 0x1c) [ 332.778518] binder: 20182:20188 transaction failed 29189/-3, size 0-0 line 2967 [ 332.787105] binder: 20182:20194 got reply transaction with no transaction stack [ 332.794726] binder: 20182:20194 transaction failed 29201/-71, size 0-0 line 2759 [ 332.803848] binder: send failed reply for transaction 943 to 20182:20188 [ 332.811845] binder: undelivered TRANSACTION_COMPLETE [ 332.817140] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.822659] binder: undelivered TRANSACTION_ERROR: 29189 [ 332.829454] binder: undelivered TRANSACTION_ERROR: 29189 [ 332.835051] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.849469] FAULT_INJECTION: forcing a failure. [ 332.849469] name failslab, interval 1, probability 0, space 0, times 0 [ 332.860871] CPU: 1 PID: 20195 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 332.868247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.877619] Call Trace: [ 332.880233] dump_stack+0x1c9/0x2b4 [ 332.883891] ? dump_stack_print_info.cold.2+0x52/0x52 [ 332.889112] ? __save_stack_trace+0x8d/0xf0 [ 332.893472] should_fail.cold.4+0xa/0x1a [ 332.897571] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.902699] ? save_stack+0x43/0xd0 [ 332.906349] ? kasan_kmalloc+0xc4/0xe0 [ 332.910254] ? kmem_cache_alloc_trace+0x152/0x780 [ 332.915119] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 332.920325] ? __list_lru_init+0x46a/0x7c0 [ 332.924594] ? sget_userns+0x782/0xf20 [ 332.928502] ? graph_lock+0x170/0x170 [ 332.932341] ? do_mount+0x581/0x30e0 [ 332.936078] ? ksys_mount+0x12d/0x140 [ 332.939893] ? __x64_sys_mount+0xbe/0x150 [ 332.944095] ? do_syscall_64+0x1b9/0x820 [ 332.948179] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.953594] ? find_held_lock+0x36/0x1c0 [ 332.957717] ? __lock_is_held+0xb5/0x140 [ 332.961812] ? check_same_owner+0x340/0x340 [ 332.966156] ? rcu_note_context_switch+0x730/0x730 [ 332.971105] __should_failslab+0x124/0x180 [ 332.975358] should_failslab+0x9/0x14 [ 332.979175] kmem_cache_alloc_trace+0x2cb/0x780 [ 332.983859] ? __kmalloc_node+0x33/0x70 [ 332.987847] ? __kmalloc_node+0x33/0x70 [ 332.991846] ? rcu_read_lock_sched_held+0x108/0x120 [ 332.996900] __memcg_init_list_lru_node+0x185/0x2d0 [ 333.001938] ? kvfree_rcu+0x20/0x20 [ 333.005596] ? __kmalloc_node+0x47/0x70 [ 333.009606] __list_lru_init+0x46a/0x7c0 [ 333.013694] ? list_lru_destroy+0x4d0/0x4d0 [ 333.018053] ? __lockdep_init_map+0x105/0x590 [ 333.022686] ? __init_waitqueue_head+0x9e/0x150 [ 333.027461] ? init_wait_entry+0x1c0/0x1c0 [ 333.031718] sget_userns+0x782/0xf20 [ 333.035442] ? test_gfs2_super+0x50/0x50 [ 333.039526] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 333.044388] ? destroy_unused_super.part.11+0x110/0x110 [ 333.049771] ? rcu_read_lock_sched_held+0x108/0x120 [ 333.054801] ? kmem_cache_free+0x25c/0x2d0 [ 333.059055] ? putname+0xf7/0x130 [ 333.062526] ? filename_lookup+0x39c/0x510 [ 333.066779] ? filename_parentat.isra.58+0x570/0x570 [ 333.071896] ? cap_capable+0x1f9/0x260 [ 333.075786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.081324] ? security_capable+0x99/0xc0 [ 333.085484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.091022] ? ns_capable_common+0x13f/0x170 [ 333.095440] ? test_gfs2_super+0x50/0x50 [ 333.099495] sget+0x10b/0x150 [ 333.102594] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 333.107441] gfs2_mount_meta+0x12f/0x2a0 [ 333.111493] ? init_sb+0xcc0/0xcc0 [ 333.115035] ? module_unload_free+0x5d0/0x5d0 [ 333.119528] mount_fs+0xae/0x328 [ 333.122884] ? mpi_free.cold.1+0x19/0x19 [ 333.126943] vfs_kern_mount.part.34+0xdc/0x4e0 [ 333.131517] ? may_umount+0xb0/0xb0 [ 333.135146] ? _raw_read_unlock+0x22/0x30 [ 333.139284] ? __get_fs_type+0x97/0xc0 [ 333.143167] do_mount+0x581/0x30e0 [ 333.146707] ? lock_downgrade+0x8f0/0x8f0 [ 333.150859] ? copy_mount_string+0x40/0x40 [ 333.155084] ? check_same_owner+0x340/0x340 [ 333.159401] ? __check_object_size+0x9d/0x5f2 [ 333.163916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.169455] ? _copy_from_user+0xdf/0x150 [ 333.173598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.179128] ? copy_mount_options+0x285/0x380 [ 333.183634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.189172] ksys_mount+0x12d/0x140 [ 333.192792] __x64_sys_mount+0xbe/0x150 [ 333.196763] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 333.201783] do_syscall_64+0x1b9/0x820 [ 333.205675] ? syscall_return_slowpath+0x5e0/0x5e0 [ 333.210606] ? syscall_return_slowpath+0x31d/0x5e0 [ 333.215551] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 333.222150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.227001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.232185] RIP: 0033:0x455ab9 [ 333.235359] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.255219] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.262918] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 333.270193] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 333.277466] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 03:36:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x5410020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000000)=""/135, 0x87, 0x0, &(0x7f0000000140)=@l2, 0x80) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ff3bfecf", @ANYRES16=0x0, @ANYBLOB="000008000080001d001617b2c90496392204817a06d61152898757017af50602000000"], 0x14}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x1, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000380)=""/242) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x89f, @remote, 0x1}], 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000240)=0x1004000, 0x4) write(r0, &(0x7f00000000c0)="2400000052001f0014f9f407000904000a00071008000700feffffff0800000000000000", 0x24) [ 333.284740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 333.291996] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001f [ 333.304975] gfs2: gfs2 mount does not exist 03:36:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f00009b2000), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 03:36:16 executing program 4 (fault-call:3 fault-nth:32): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:16 executing program 5: r0 = socket(0x4, 0xe, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) finit_module(r1, &(0x7f0000000040)='em0bdevsecurity]\x00', 0x3) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="8f61366e26db8bc77b7f4e76fd38ebeb", 0x10) r3 = fcntl$getown(r1, 0x9) ptrace$setregset(0x4205, r3, 0x200, &(0x7f0000000140)={&(0x7f00000000c0)="9fd95e947d13302352435fd075e945e7c34706768d98cf5de38c7ab8dc783e3f5a217358a5974b9d4d906f049c4569823c59a6550409f9a477752101e2e462bc6455c3d38bfdb648ec77791083e9e3f84eac9508d4d26dd2eefa6bc11a1d05b6dbe3f387ede8b0e2752d50692cc407e933a026eff6407d1a181aae5f9f", 0x7d}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000180)={0x3, 0x81}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@int=0x8, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x101001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000240)={0x7, 0x1, 0x2}) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00000002c0)={0xb3, "1d81f5c56c6ac42abbd9e3f60eb4f7386918ebe4f5dc968ca0c0b008a238d759083aae42144f6a0d527f202671a16177b3b2c40e2ee8a9449c743596fd7550925ccc645cece0e2d86fcd73308e3cf2c15fae30f1a8fc422c1254e3a7570b342f2d89693cf9d1c80f4f38030680fbe6fa298f35cc0d7017f0082007cbef2878dcfacbe5b8e3d90c91502eb756c441909f4a0632d5ff4a30c9400d0af43ca690b81df517c9dd1acfc20fc48a1c004bb6912d7d5f"}) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000380)=""/193) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000480)={0x0, 'veth0\x00', 0x4}, 0x18) sendmsg$alg(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="0d051da97f36463919a3bb221ac48b2248c17d87ba487a7ac38574c1b4881383eebc6bd085152b97ca742dc0f7c0fcbf0f79851aa1884890b4fa1444d9b2d207980073065ea891d1cf97837756fbd7527b9739499d57d80cf1822f36", 0x5c}, {&(0x7f0000000540)="1cfa460fac53dab0761af717d1604e58b9e22e3678b140b06bae621bec100307017232253c504154e63e8d513891e328bfcab7309240ac2cdf2a622c759f55e9f59268b6690dd6b457b14c5ce61428f30c", 0x51}, {&(0x7f00000005c0)="65d6d0ead0a5a8291d07c934cdce90b458bfa4d06e587534cfbf190f27d052fab23329877ad9a34395f747014f1fac9059f14dddcbcbef62cb77353843575be134def59ddd08376ec142a6d0bd9f14a1b19a0d6230b7b34d8421cdfaa840fdf115daf017522541a4dabed827d1a06e15d0af65389cbda8ca2cb239c99dbcb4a9", 0x80}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="b5a3bf2721ae1cd74d1832300c5aa2f6b00c5508ea7f6fa5647aa1cd2da58ccaa376bd4468d541a29716042a6b0ab1e22794a979eb22ea1bb5c911933bd42a114b3aac17fb1454bd3a74d51e7f348078b9", 0x51}, {&(0x7f00000016c0)="ba11a8b686a43e72d9164dda8bda63391c6bfaa12e5eea292fe07fe320bdfb8a0f65a8a511bcdf0401027b180d50098a7d9abc9edf02583d4a435f25b73cf70d02a790c10f2a7d0309e39078d64ecdb1e2952b4db35b82b2b9ccce097d0fde36987a5835d41c9daa5def21661d85695b3c64fbcc55d4eab2947c9c1c9592a25b5003c5304d", 0x85}], 0x6, &(0x7f0000001800), 0x0, 0x804}, 0x40000) ioctl$KIOCSOUND(r4, 0x4b2f, 0x2) r5 = semget(0x1, 0x4, 0x2) semctl$GETZCNT(r5, 0x7, 0xf, &(0x7f0000001880)=""/107) socket(0xf, 0x80003, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001900)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001940)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001cc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c80)={&(0x7f00000019c0)=@gettaction={0x284, 0x32, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x10001, 0xb287}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x16, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x18, 0x2, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1d, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0x18, 0x1, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0xb8, 0x1, [{0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x14, 0x16, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0x11, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x1f, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x2, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1e, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x13, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x19, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xf, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x18, 0x1c, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0xcf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0xa4, 0x1, [{0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x3e7a}}, {0x10, 0xd, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x14, 0x3, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000001d00)={0x7fff, 0x6, 0x4}) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001d80), &(0x7f0000001dc0)=0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) execveat(r4, &(0x7f0000001e00)='./file0\x00', &(0x7f0000002040)=[&(0x7f0000001e40)='tunnel_key\x00', &(0x7f0000001e80)='userem1vboxnet0securityselfppp1nodev^%)trusted)\x00', &(0x7f0000001ec0)='-\x00', &(0x7f0000001f00)='security^+\x00', &(0x7f0000001f40)="657468301f242d2a2d70726f633a657468312e706f7369785f61636c5f6163636573732400", &(0x7f0000001f80)='police\x00', &(0x7f0000001fc0)='skbmod\x00', &(0x7f0000002000)='/dev/audio\x00'], &(0x7f0000002200)=[&(0x7f0000002080)='eth0eth1nodevppp0%eth1cpusetwlan0\x00', &(0x7f00000020c0)='connmark\x00', &(0x7f0000002100)='GPL]ppp0*.\x00', &(0x7f0000002140)='em0bdevsecurity]\x00', &(0x7f0000002180)='sample\x00', &(0x7f00000021c0)='ife\x00'], 0x800) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000002280)={0x34, 0x0, &(0x7f0000002240)}) write$vnet(r4, &(0x7f0000002400)={0x1, {&(0x7f00000022c0)=""/76, 0x4c, &(0x7f0000002340)=""/131, 0x0, 0x7}}, 0x68) 03:36:16 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x3, 0x3000, 0x54000406, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget(0x1, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 333.380652] binder: 20212:20214 got reply transaction with bad transaction stack, transaction 948 has target 20212:0 [ 333.391525] binder: 20212:20214 transaction failed 29201/-71, size 0-0 line 2774 [ 333.402416] binder: BINDER_SET_CONTEXT_MGR already set [ 333.408128] binder: 20212:20218 ioctl 40046207 0 returned -16 [ 333.418749] binder: 20212:20218 got reply transaction with no transaction stack [ 333.418759] binder_alloc: 20212: binder_alloc_buf, no vma [ 333.418802] binder: 20212:20214 transaction failed 29189/-3, size 0-0 line 2967 [ 333.426922] binder: 20212:20218 transaction failed 29201/-71, size 0-0 line 2759 [ 333.448558] binder: release 20212:20214 transaction 948 out, still active [ 333.455684] binder: undelivered TRANSACTION_COMPLETE [ 333.460990] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.466862] binder: send failed reply for transaction 948, target dead [ 333.481974] binder: undelivered TRANSACTION_ERROR: 29189 [ 333.487681] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.586812] FAULT_INJECTION: forcing a failure. [ 333.586812] name failslab, interval 1, probability 0, space 0, times 0 [ 333.598504] CPU: 0 PID: 20231 Comm: syz-executor4 Not tainted 4.18.0-rc6+ #160 [ 333.605880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.615245] Call Trace: [ 333.617853] dump_stack+0x1c9/0x2b4 [ 333.621502] ? dump_stack_print_info.cold.2+0x52/0x52 [ 333.626713] ? __save_stack_trace+0x8d/0xf0 [ 333.631243] should_fail.cold.4+0xa/0x1a [ 333.635318] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 333.640420] ? save_stack+0x43/0xd0 [ 333.644059] ? kasan_kmalloc+0xc4/0xe0 [ 333.647934] ? kmem_cache_alloc_trace+0x152/0x780 [ 333.652777] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 333.657976] ? __list_lru_init+0x46a/0x7c0 [ 333.662211] ? sget_userns+0x782/0xf20 [ 333.666105] ? graph_lock+0x170/0x170 [ 333.669918] ? do_mount+0x581/0x30e0 [ 333.673643] ? ksys_mount+0x12d/0x140 [ 333.677445] ? __x64_sys_mount+0xbe/0x150 [ 333.681586] ? do_syscall_64+0x1b9/0x820 [ 333.685652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.691049] ? find_held_lock+0x36/0x1c0 [ 333.695116] ? __lock_is_held+0xb5/0x140 [ 333.699201] ? check_same_owner+0x340/0x340 [ 333.703525] ? rcu_note_context_switch+0x730/0x730 [ 333.708447] __should_failslab+0x124/0x180 [ 333.712691] should_failslab+0x9/0x14 [ 333.716497] kmem_cache_alloc_trace+0x2cb/0x780 [ 333.721168] ? __kmalloc_node+0x33/0x70 [ 333.725224] ? __kmalloc_node+0x33/0x70 [ 333.729194] ? rcu_read_lock_sched_held+0x108/0x120 [ 333.734202] __memcg_init_list_lru_node+0x185/0x2d0 [ 333.739399] ? kvfree_rcu+0x20/0x20 [ 333.743043] ? __kmalloc_node+0x47/0x70 [ 333.747026] __list_lru_init+0x46a/0x7c0 [ 333.751100] ? list_lru_destroy+0x4d0/0x4d0 [ 333.755457] ? __lockdep_init_map+0x105/0x590 [ 333.759954] ? __init_waitqueue_head+0x9e/0x150 [ 333.764613] ? init_wait_entry+0x1c0/0x1c0 [ 333.768850] sget_userns+0x782/0xf20 [ 333.773424] ? test_gfs2_super+0x50/0x50 [ 333.777476] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 333.782330] ? destroy_unused_super.part.11+0x110/0x110 [ 333.787720] ? rcu_read_lock_sched_held+0x108/0x120 [ 333.792732] ? kmem_cache_free+0x25c/0x2d0 [ 333.796960] ? putname+0xf7/0x130 [ 333.800403] ? filename_lookup+0x39c/0x510 [ 333.804632] ? filename_parentat.isra.58+0x570/0x570 [ 333.809731] ? cap_capable+0x1f9/0x260 [ 333.813624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.819168] ? security_capable+0x99/0xc0 [ 333.823319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.828868] ? ns_capable_common+0x13f/0x170 [ 333.833292] ? test_gfs2_super+0x50/0x50 03:36:17 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_bt_hci(0xffffffffffffffff, 0xc00448df, &(0x7f00000000c0)="3f994546c304ca5ac6922db27f323f98299f1fd609341722814d864d6dc6c8fbe4") 03:36:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:17 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xf80f906080133ca4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='security.capability\x00', &(0x7f0000000340)=""/65, 0x41) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000480)=0x1f, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000540)={{0x9, 0x3, 0x5, 0x1, 'syz0\x00'}, 0x1, 0x100, 0x0, r1, 0xa, 0x3, 'syz0\x00', &(0x7f00000004c0)=['\x00', 'wlan1!+bdev@*bdev,md5sum!\x00', '-/self$\x00', '\x00', 'em1+mime_type.ppp0cpusetvboxnet1\x00', 'ppp1"\x00', '\x00', '\x00', '}&*proc]\x00', 'security.capability\x00'], 0x6a, [], [0x4, 0xffffffff, 0xfffffffffffffffe, 0xff]}) r2 = msgget(0x3, 0x10) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000006c0)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000680)="957da7179d576513bd01252090117765", 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x3, 0x3, 0x8000, 0x5, 'syz1\x00', 0xfffffffffffff349}, 0x6, 0x60, 0x7, r1, 0x7, 0x1, 'syz0\x00', &(0x7f0000000080)=['ppp1"\x00', '\x00', '\x00', 'keyringvboxnet1wlan1userselinuxselinuxcgroup$vboxnet1-\x00', '\x00', '\x00', "10"], 0x42, [], [0xdd, 0x81, 0x8, 0x2]}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="d2b75267ae07000000000000008902000000000000060e00000000000035000200000000000400000000000000380b000000000000020000000000000000000000000000000000000000000000ff0b0000000000002000000000000000030b0000000000000300000000000000fb0b0000000083d475589412fd5ae3a6d10000000000"]) 03:36:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890e, &(0x7f0000000040)="025cc83d6d345f8f762070") clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={r1, r2+30000000}, &(0x7f00000000c0)) 03:36:17 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x200f1526, r0}, &(0x7f0000000280)={0x171, 0x0, 0x0, 0x9, 0x20000}) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000010c0)={0xa, 0x1, 0x0, @ipv4={[], [], @dev}}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x2a0, 0x138, 0x138, 0x390, 0x2a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x7, 0x7fff}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@remote, @ipv6=@local, @gre_key=0x1, @port=0x4e24}}}, {{@ipv6={@local, @ipv4={[], [], @loopback}, [0x0, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'bcsf0\x00', 'sit0\x00', {0xff}, {}, 0x6f, 0x1ff, 0x3, 0xc}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x4, 0x4, 0x1, [0x0, 0x1, 0x22, 0x1, 0xed, 0xd10, 0x1, 0x6, 0x9b, 0xb1, 0x3, 0x7f, 0x900000, 0xffffffffffff7fff, 0x400, 0x5], 0xd}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x5c, 0xfff, 0x9, 0x5, 0x5, 0x400, 0x2048}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0xff0000ff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff0000ff, 0xffffffff, 0xffffffff], 'bcsf0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x33, 0x0, 0x3, 0x3}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x401, 0x9, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@multicast2, @ipv4=@multicast2, @port=0x4e20, @gre_key=0x400}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) [ 333.837367] sget+0x10b/0x150 [ 333.840490] ? __gfs2_fallocate.cold.20+0x8c/0x8c [ 333.845341] gfs2_mount_meta+0x12f/0x2a0 [ 333.849418] ? init_sb+0xcc0/0xcc0 [ 333.852968] ? module_unload_free+0x5d0/0x5d0 [ 333.857466] mount_fs+0xae/0x328 [ 333.860821] ? mpi_free.cold.1+0x19/0x19 [ 333.864876] vfs_kern_mount.part.34+0xdc/0x4e0 [ 333.869461] ? may_umount+0xb0/0xb0 [ 333.873088] ? _raw_read_unlock+0x22/0x30 [ 333.877229] ? __get_fs_type+0x97/0xc0 [ 333.881119] do_mount+0x581/0x30e0 03:36:17 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001703000000000000000000000000000000000000000000000001e000000200000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) [ 333.884655] ? lock_downgrade+0x8f0/0x8f0 [ 333.888798] ? copy_mount_string+0x40/0x40 [ 333.893032] ? check_same_owner+0x340/0x340 [ 333.897363] ? __check_object_size+0x9d/0x5f2 [ 333.901887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.907433] ? _copy_from_user+0xdf/0x150 [ 333.911577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.917104] ? copy_mount_options+0x285/0x380 [ 333.921601] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.927144] ksys_mount+0x12d/0x140 [ 333.930774] __x64_sys_mount+0xbe/0x150 [ 333.934747] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 333.939755] do_syscall_64+0x1b9/0x820 [ 333.943628] ? finish_task_switch+0x1d3/0x870 [ 333.948119] ? syscall_return_slowpath+0x5e0/0x5e0 [ 333.953041] ? syscall_return_slowpath+0x31d/0x5e0 [ 333.957963] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 333.963333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.968165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.973349] RIP: 0033:0x455ab9 [ 333.976539] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.995795] RSP: 002b:00007fe7c3cfbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.003492] RAX: ffffffffffffffda RBX: 00007fe7c3cfc6d4 RCX: 0000000000455ab9 [ 334.010750] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 334.018106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 334.025373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 03:36:17 executing program 4 (fault-call:3 fault-nth:33): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 334.032635] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000020 [ 334.040502] gfs2: gfs2 mount does not exist [ 334.088092] binder: 20242:20244 got reply transaction with bad transaction stack, transaction 953 has target 20242:0 [ 334.098967] binder: 20242:20244 transaction failed 29201/-71, size 0-0 line 2774 [ 334.120812] binder: BINDER_SET_CONTEXT_MGR already set [ 334.149673] binder: 20242:20245 ioctl 40046207 0 returned -16 03:36:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xffffffffffffff5d, './file0'}]}}, 0x2a) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000080)={0x6, 0x100}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose='loose'}]}}) pivot_root(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)='./file0\x00') [ 334.202554] binder_alloc: 20242: binder_alloc_buf, no vma [ 334.208332] binder: 20242:20244 transaction failed 29189/-3, size 0-0 line 2967 [ 334.240332] gfs2: gfs2 mount does not exist 03:36:17 executing program 6: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000000c0)={0x4, 0x8, 0x6580, 0x4, 0x49c5}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 03:36:17 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x2953, @remote, 0xa7b9}}, [0x7e0, 0x2, 0x7, 0x3f, 0x6, 0x2, 0x2, 0x1000, 0x8001, 0x7, 0xfffffffffffffffd, 0x9, 0x6, 0x1a, 0x61b7]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x7}, &(0x7f0000000200)=0x8) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000a200a0009000100011ee4000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:36:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 334.257480] binder: 20242:20264 got reply transaction with no transaction stack [ 334.265119] binder: 20242:20264 transaction failed 29201/-71, size 0-0 line 2759 [ 334.287324] binder: send failed reply for transaction 953 to 20242:20244 [ 334.296196] binder: undelivered TRANSACTION_COMPLETE [ 334.301594] binder: undelivered TRANSACTION_ERROR: 29201 03:36:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000040)="f8fea5c1980e544cd818cd7297a567e0a483cebf4388394af39ca855711f1611623262831c1ca71a280451d0dc53812f9c334018a7b4d750a478329a3a3c5fc57d7c8b147822f72f6b2612456659f11bdee88c95c4eb5cede4dd78529bae29db3bab3d4abdffdfcbc4c76a1666d32750003f08d639226a9e0cbe85186ecb10741f49d0ebf7206da93622b17c463c92c5320651bebc0df1f80661a049fb9eb4affe8f72670586e8a74c0480eec4c2391abec7ade53a816656e7c3", 0xba) listen(r0, 0xffffffffffffff80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:36:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 334.307312] binder: undelivered TRANSACTION_ERROR: 29189 [ 334.313300] binder: undelivered TRANSACTION_ERROR: 29189 [ 334.319478] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.436513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 03:36:18 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000540)={0x2}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='\x00'}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000300)=""/198) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000240)={@local, r2}, 0x14) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f00000002c0)={0x18, 0xffffffffffffffff, 0x2, {0x4}}, 0x18) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500)={0x3, 0x6, 0xa172}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000600)=""/134) connect(r1, &(0x7f0000000400)=@rc={0x1f, {0xea56, 0x0, 0x8001, 0x6a0, 0xfffffffffffffffd, 0x5ca}, 0xe4}, 0x80) 03:36:18 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$TCSETSF(r1, 0x40045109, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) setpgid(r2, r3) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000040)="b172") 03:36:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\nfs2meta\x00', 0x0, 0x0) [ 334.480538] binder: 20283:20288 got reply transaction with bad transaction stack, transaction 958 has target 20283:0 [ 334.491594] binder: 20283:20288 transaction failed 29201/-71, size 0-0 line 2774 [ 334.503757] gfs2: gfs2 mount does not exist 03:36:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x7ff, 0x6, &(0x7f0000000680)=[{&(0x7f00000001c0)="ff62b3227c9d2f9528fbd671a1702308884c31fdade582f8f1312167eedd150b3296ee", 0x23, 0x5}, {&(0x7f0000000380)="0e469560ffa840dfd6cf3ef9db442f32cfc86133cfb3bbff7b9a9ade64678168cf90028ab19adaa8fbdac1e156a9b065c8a7dfe398f0113f81ca1f8fc7aac7edc082f64281038c6575f5c2b87983492473f0709232ea627c358203669bb904e4d8c2fb68a1f8ed9928f28c42ed8b7266260e7c03a2c1d8cad7def79adaa12da6eda8ec92520a93876328e6de4553fd9e45e40816822d", 0x96, 0x7}, {&(0x7f0000000440)="5ed460a5342b465a2f3e63fd2cb2cef1c25e101a3184c3c7747fbc338845bb55487fcdf38199ec995c65864f47f86781cfa9f748686a013ed9d5823d092ea9159ef0cd9d80014e8a2f46afe32685f8bb3633c881bd02ec524da174d71c13a1c98a24ba35342d6fc5f8f2631ac147183c80f5f1afb14f09ea9983fa32618b1947fe3bf698ee5c84200a79924466c7c45692816397b97b1bc77f62227ccd60a7e209780a5ed42d8de010d17aab549709493f564a9b69b8c177", 0xb8, 0x400}, {&(0x7f0000000500)="5fac182a0128cba94d63f1aa6247f31ec6b85b1565dd2aaadce5a525e1b37f1d0ed4e5374e6b502b18758f6a9cecb542c1e8e37317620ef723939ffe1db76d5b3ad68e8b33d87eaf66032d7642a2f0d72e283aa14937be405ea131eeab5473c4328ad0019948e50fbbef665096e1ad554c24bcfecba173437a0000fb8429ee062e298bf5bf8a19a444771789195d3b2820befd8b7ea0a65062cda0d87cf00d87c344344181c508b677a87c8ef0fa89cccfd3eaee4532a6629a751e170bc45d254d3a5630834dc7e731b02e9614d8387859aa9f2fae716918382e78f4f88944628528aa5e6d2a1d8bea88ea6eae", 0xed, 0x8}, {&(0x7f00000002c0)="3b803b1b6bf51b0410991a4859fa89ec58e1ff18c11ff751312546b549318fdfe7f2625c9a5c09636d45fc26588648202ba56768db45b68da100a295d5c7bf39aede2e4fe81c2ab41135bb7b7ded88d6a4f60da490faaff914f3e06fe7df83fa017ba36ab09ac88063f9", 0x6a, 0x7ff}, {&(0x7f0000000600)="44a05f384c3a5ae13797614fa5f0f610164b87d093b93e2f8d7c88f77acbaaa6b833c64e0e8763246b0833592cc8d1dac8a09bd1d531dd216a159afd816331b6c5fbd58fc5cacd8b4ae2d0e6d45f65c5458c7d3533db04d4ac50d14b9dc66c8731cb02", 0x63, 0xaf61}], 0x0, &(0x7f0000000200)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x7) 03:36:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x1ff, 0x7, &(0x7f0000000900)=[{&(0x7f0000000240)="099b9962d67a6cb88a944d6ff02cea26ddaf7214142d1cd924f00d0cf9560083e5791b51d3814aca62b8e7842124ccb764fbd2d32eee8220a482551e02cb9ed1141c91aba497e7abe10c57893d38fef06d15f8bc7b5893676424b54cc81b5a64b59a1a9157b162017c92e56436b1ce5c33b118815e8776dfa8c076154ca05c37404ff3abc565b354034795ce447a176c4ac66ff47d670aa993e7f723ed0f973ee5baa476a8e9d51bdbb09af272441e07f4edc7d2a078f56e688364f9b5c5bd06ea0b0bb704b16bbb6c6bf312be8496c0b242e5a65389797dc8fc6d05e841a91258386ef0b8f799a4ea1fe42a38d9f4e2968135", 0xf3, 0xffffffff}, {&(0x7f0000000140)="a06f34f511f36ccfbb32f30df019860c72df9bcf7c07223d1e8cf09475cbf9e5324cd24e26acc3fec4df8487b2a53e599a985953890f7f3c9ccfcfe91f3cf3ce51e6620f326fb689b4606a5fbf596b423d572b18747254476cf3e71a89d6cc13727da00daf96c1e6", 0x68, 0x80000002}, {&(0x7f0000000340)="0e88efdf2c71f669c267d32d3ebc6ddd60fa09836e3b03ab59880adb6131b5a51f5ca4c03af838110788ecb964961bf186b6524ef7bb0e69813c8aa75b0f339725d18c10346f3a2201df29e969c00baf4deb670a28f9081b99b278656145e055efe1a55ff6e3e2206ef063ae10b15c7483435377915179bbb676da18dffae5136a4a9d9f0c1392db0d2c1896c70875cc559d33380a856bcd9a4c43e52be994d5f7cd172ac230dfdc", 0xa8, 0xfffffffffffffffc}, {&(0x7f0000000840)="ee1dbccb3791c1e4feef057590e6ec70778bc6d98b31b06a930c185eb31daf7c6e11976fc44dbc26cf5fbc0f7d866b297a3c72788d954f095e309ba7d15c585dbd58077f626d2bd8466899ed0cef0e69e1bc45bf8d08183f85c5b324a6cead0dbcc8d885d47f2cfc5107e9ca24f42af8402a67cbff66508efa509ef9bf810762436f9fa9991e7fbb6921056b36179b2721f0c4e4f5652477f0a01b21c9e1eca59c00e407b50000000000000000e8f6ea3a1621f714a71b480e00000000e2", 0xbe, 0x5}, {&(0x7f0000000440)="acb2dcad2f3442ad2fd447bb1ac93cc9d1509ba9bfcec0b7959e5f2c3e615b6a3f0ef18f21ea693fd4a775ae4361827b9d728ff82675976877977512339c1f220f0bb71ee760a0a51e243b049f67c7eb5e09d6fb255414c1879cdea2648972c4a58d483d43b29e8ff7a4f2ff85c6c1e76a0dd7d9470a2a7fe486d3a7eafb76d55789e4b69f6f989b71eea42ebfb543bc0cb4cae5dacff20c80c47f5f402cf1c6ce8acc79b3412a66fca570e5ffbac33ed91289792128580d22bbf6a1903edc9f46d68ee6d3a4b7b2", 0xc8, 0x401}, {&(0x7f0000000540)="58c16d381d8084abc7f209017ae2dc85c6b80984f602337177a3673e99bb3a2cf84d3d6e1241b24dae4d8e8bbc8a1e14cd3c97e1f09fef44f6728ce4074054e40b92592f37a9b20aaa9cda30fcc3db94023f4054a15972aad67ac997063243f1ec7462ceb11b2e02153c48e5e2397375e76c2dc1eb3465b1ee840a54ae021827454d2a430e7bd56b9f035788d6ee8d73ae5cceb57fac06baffe13677fbb8128244e229170c2dd1da82c5f5d96194f9309ef3c23744a7ca84ea26c42bd3026fe82a", 0xc1, 0x9}, {&(0x7f0000000640)="6e68856021cfcc64da7ef3ac0220776680dd29d2084e205862bd384c334de080e7d4da066aef8229fe41846b1284fc898ac3c7da52465178d5d858de16d38d094ecd49cee00b4c517cd0c242aac3c5dc93de5e17da8d8b164cbfe8b9e9addf6cf37d26f053a5a3e3333513e7f0e777a3f72e043d6f301c8101f7eeab87449fafa1a06bf6cf387ed2a65dc649cf094f88acf0be0724cd9ccfef27dd4d6c6c37217b20a2d066cb3f3dc95db90fae1196461796eb3315fd0cfba455c4ac61f5c3bfe42b1507b3e9e0cbc5d921fb597850290540e7bf715113b85fc449068e843f639c585f0d74d85622519035724a01756da582f874393be30f96", 0xf9, 0x5d0}], 0x40004000, &(0x7f0000000800)={[{@rodir='rodir'}, {@utf8no='utf8=0'}]}) [ 334.567409] binder: BINDER_SET_CONTEXT_MGR already set [ 334.573807] binder: 20283:20292 ioctl 40046207 0 returned -16 [ 334.582792] binder_alloc: 20283: binder_alloc_buf, no vma [ 334.584163] binder: 20283:20292 got reply transaction with no transaction stack [ 334.588865] binder: 20283:20288 transaction failed 29189/-3, size 0-0 line 2967 [ 334.596068] binder: 20283:20292 transaction failed 29201/-71, size 0-0 line 2759 [ 334.613767] binder: release 20283:20288 transaction 958 out, still active [ 334.620861] binder: undelivered TRANSACTION_COMPLETE [ 334.626124] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.631878] binder: send failed reply for transaction 958, target dead [ 334.646794] binder: undelivered TRANSACTION_ERROR: 29189 [ 334.652480] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.746774] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 334.782128] FAT-fs (loop3): invalid media value (0x7a) [ 334.787701] FAT-fs (loop3): Can't find a valid FAT filesystem [ 334.796105] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 03:36:18 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001980)=0x0) syz_open_procfs(r2, &(0x7f00000019c0)='net/mcfilter\x00') r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001940)='/dev/sequencer\x00', 0x6000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000200)="561f1cdc") vmsplice(r0, &(0x7f0000001800)=[{&(0x7f0000000000)="8fa7d26b1e44bef10d49188d6dbfb76c54a8bce713f2fab481bb778e18d33ef7c7e0e5e1124787563c9c27949fce3f6907a73226209d1d57c5ac52f9", 0x3c}, {&(0x7f0000000100)="09480f340e034f1e336beb22d573e3417731a5586ae2154f8daa36f31e180ddb413139594095b81c2c581c6683e1337338861653b9127f90d6ab45007da07957a3cf6fe394e513127f0f0946852e0625c34a4edd9165c65a144449c1c2c09a7dfbc243d0008ff2fe5b92de65e4370a9ac9db196a79968c7a7286be608fb8643336f4d4ee0bc9b7608e0af620d4c0eb8aa3e515e50689ee78cfbb3c4dd09264ba414ae36927cd544ef5ea050fa5dc255c631cf85f063b710252c63a145bcbf0c98a69695a913d234a10c97874361cede95c3c73c2a7ee302c262fd9924e8597cc2455af1ad65a0d9e67c44248a25aef", 0xef}, {&(0x7f0000000240)="e1d31d4774e91141f7c881dc5fbec0a204998db30aebe1eac1a51801ac7b5d7c0d14ce72b981dd71ddebc2fffe0395d9025e59d373c6c5d6aa02c663f3647996d6286d5f7afaa68d6ed3c02b7dbbb1c97fc2ea530954571fab3d4ddf07b1010847fe30fc5f175b85681fa471f41dc36607ca8893ddb590d23a4b6165d9f1e27faf9f584c0fef8c65f2f9cf97ccdf00", 0x8f}, {&(0x7f0000000300)="6e98298b30202a8c6c5f031820ef7d7b6b017d3d049ac7e806db5aacdb7b2cbc854b65d4a53180a68aeb40244511ea232b41643688662cf6bc434a428b9e2b2be538ffc8596ca62ec4c7ff6ff5b3dd768d7cb7ca54d826fe3ca589710946c4fc2e9394f3118bb4d21a1f8bd8ca384bd30661d6a472802ca3804d9fffebb61ddb60b79b7db27ac848570651378d7f33e5440edb1270dbbf93f9fe1683d60a990cb4e73990fe40ce7f27034f6dbeba012eaa1b40e665c179576579557bc7a3715eb60e4e71c182fcca0bfb54cb4cfb1ad127f51174a772aee55790464df7ba4a187b0c344c", 0xe4}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000040)="7d23032b3f6f87cd79bd412a4fc4d977c2155569cb0fe58e0bf73381ab40e1d153a14ac9ba8d77f0ae89522a7e020b2e419e71609078bbce0b12f3", 0x3b}, {&(0x7f0000001400)="5ad957ff8f7f89876f2f88e0c4a6a43fce37a8e4705a1d026de8b9ce271f04b5203dd9569762c4cdd30dc297ae31b7c9341e82a46486e28621666b17143e1c049f9aa80ace8bde4ff6a4666d02e77c05b96ca505d3301be1da70d08f81588e34da9c74d2d7df92913e226528e3d5e653385001739f7fbcdd0bfe8798850b9537c69ffb48ee9b3e1026226cff93b49af4417d5190bb06ed7350658cd43ddb076cc878c43e790eab399a738fd0b3072fbb215c8a3c35892425546c1108d5fd7138d3c4d15ef1c4314680926ea872e665c2ff548579b50f8b2b91fd7b21bcbf2d66e19d1bb2c528ba240df09574e6f11d3deb550c99de", 0xf5}, {&(0x7f0000001500)="e9e1034878fd935908e56148da380b1b225ac8ac18aeaf8fc6fb17e1fc253da30c52d99d047551da28097f2683d4293a816762aaf704f1c5f5ca2bd222553f9557e9e2e8823aef7c77fe37c3143a54da09c01c4a78ec06e21e115a042355a0980f9ecd64653b18ff33fcc79a082f28f3a8e7c2173193659554170f3e3c5d7f9829d90584f9e139c93284e6470e0d8ada70f168c3dc0d8e3eb95a99d5ce2e18eb0c0addb25dc1770d3b7ff1fa0aa64d9e4a85d3c5eb321676342b1c54ccc0808ea68a7926177bc4d6471a47", 0xcb}, {&(0x7f0000001600)="ed623b95b1235c2110bf12decbfdd58f0eb2a5efd3b22b469ea0def0b82192d9b27e372c7fa0688a3ca8ed22e5fa5e1b3f9aab75af3463bd9b114c849d351450e5207c9dbc5169d094a079247a7e01a136e321e73a723aca1719a5b17d379405ff507c129320535b459fa19f0180413cd93ef54a66f56da12b859d06d79b7e746c1ff922cfda9072d5646d7f832d7961869be452c58e275d6bd8fb3df8695993a2de28083f27ad280ce057cd6aa5ac0b624c2a6091a0913e50981ab692f066d69f224d6c379c9c322a9903fd50068aac94f011", 0xd3}, {&(0x7f0000001700)="5d80d71b2a93dd5402a3a45a0c68e1b1704ab5453d7dc7a724f6ce3ac22e78ba55624743c14a50d0a0ee2bab5312cdc9f0a20aed61170f981bba1952aa40479339bbe22ca5f7d87ec745c32a4cc2cc1240b1befb3895206e0ab14ee09ff288920b75a6664415b69aaa38d829ead446e93f0417c4cbcd6ee028714ada0a45d009ce5a3ece06d94ce94cdcf366682aa27aa81badb07ddba50502b14a148b7c0e100e41101b7206833d1d3306649363033afb6a549349c3895be3345d6c3808db2618538e052f6d53e1cc08b16da2bd3f1b72a7d60dfa9ff7", 0xd7}], 0xa, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000018c0)={@empty, 0xfffffffffffffffe, 0x1, 0x3, 0x2, 0x0, 0x0, 0x9}, &(0x7f0000001900)=0x20) 03:36:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8a07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:18 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = memfd_create(&(0x7f0000000000)="cf2670726f632f00", 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x137f) 03:36:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') sendfile(r0, r0, &(0x7f0000000000), 0x16) write$cgroup_int(r0, &(0x7f0000000080)=0xfffffffffffffffb, 0x3) 03:36:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='%fs2meta\x00', 0x0, 0x0) 03:36:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0xfffffec5) userfaultfd(0x80800) 03:36:18 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x100000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dc]}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xffffffffffffffbe) 03:36:18 executing program 2: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800) sendto(r0, &(0x7f0000000080)="688fbd63e39bd2ed5af5678a2dcc1afa313775982f237d5d9da0755895d9cd7c8b0f119ef1caaf85f780c7449c290447f90eb59b47d46f87557ee8d03abbc973262fc84f9b891b7e7ef4d26e3aa88606db3b10028699965f3cc50dfbd19c3bd7c2e66aa4137d3c60186136f7ea8e6995c518b6144e3ecf19e94385c0798bfdb73e1eae", 0x83, 0x40, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 03:36:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x57, 0x1a000) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/223) bpf$OBJ_PIN_MAP(0x14, &(0x7f0000000000)={&(0x7f0000000040)='./file0\x00'}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) [ 335.034608] syz-executor6 (20344): /proc/20339/oom_adj is deprecated, please use /proc/20339/oom_score_adj instead. [ 335.066235] binder: 20338:20345 got reply transaction with bad transaction stack, transaction 963 has target 20338:0 [ 335.077285] binder: 20338:20345 transaction failed 29201/-71, size 0-0 line 2774 [ 335.106238] binder: BINDER_SET_CONTEXT_MGR already set [ 335.112981] binder: 20338:20353 ioctl 40046207 0 returned -16 [ 335.121211] binder_alloc: 20338: binder_alloc_buf, no vma [ 335.127101] binder: 20338:20345 transaction failed 29189/-3, size 0-0 line 2967 [ 335.137856] binder: 20338:20353 got reply transaction with no transaction stack [ 335.145829] binder: 20338:20353 transaction failed 29201/-71, size 0-0 line 2759 [ 335.157014] binder: release 20338:20345 transaction 963 out, still active [ 335.164103] binder: undelivered TRANSACTION_COMPLETE [ 335.169275] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.174964] binder: send failed reply for transaction 963, target dead [ 335.195274] binder: undelivered TRANSACTION_ERROR: 29189 [ 335.201006] binder: undelivered TRANSACTION_ERROR: 29201 03:36:19 executing program 1: r0 = socket$inet6(0xa, 0x4002, 0xffb) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0x7e5f8a4efcd377c5}, 0xb) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:36:19 executing program 3: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) add_key(&(0x7f0000000040)="485afa298752ddaf852a660c7960e10e1d23bfb04dabc01a42a058fc7237682341b0d21204a2ca498d8e77ec1f0000000000354a1f51b7ab30417c7510ecaa75c32b2d21d9aeb6d44d0d1df6e07e61191023db9327c00edb870d0539", &(0x7f00000000c0), &(0x7f0000726000), 0xfffffffffffffe64, 0xffffffffffffffff) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='g\ns2meta\x00', 0x0, 0x0) 03:36:19 executing program 6: r0 = socket$inet6(0xa, 0xa, 0xfffffffffffffffb) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x181000) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000180)="53beed77e257e8459fc663c0f6610fcf320e44b82f5ab214d03d8b57259cb1b642e23e634649578bea1c03dbd78ead694aba087106ae779cbc6174c39faff3c2c1a3d1d5d01865b6c35dae4129893f19356307d3bf4e55752b622f5796440b724d24de00cfdba700b32fc3ae2b34f1133b3fe7724d8aa82e6036f4ac91d683ef25522b35b7f4aa0bf0ae098e810e1058ea8f2699f8664a73cf5e03d00b965dd48f9b842fddbdd8c7a714ae29f347435329107f7e0411de0d921b813e6da176af", 0xc0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82501, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x2, 0x10000, 0x9, 0x6]}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) 03:36:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:19 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) dup2(r1, r0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x3, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) 03:36:19 executing program 2: shmget$private(0x0, 0x3000, 0x78000001, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x54000002, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10081, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x17, &(0x7f0000000040)=0x3f800000000000, 0x4) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:19 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="9e4ed11d0ddb6c0e5fba96d509a83f04bad338243f5cb8855c03550501d161cdce94f7aefc2a474db8148b73e3aaec63cf44ec4872f08def7c44de711c0d6155a53535dc3f62614264fc60fd562ae4d03e71dbede30cb5af5759ed0ca51a92c7420ae8b8fba95877069ffe4c747f124144c23822ad6974055976c0b47522ff0e145ab6d5f8", 0x85, 0x4000000, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl(r0, 0x200081204101, &(0x7f0000000080)) 03:36:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0xfffffffffffffffe, &(0x7f00000001c0)="d11894e96ac501e6", &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000140)) [ 335.503475] binder: 20378:20386 got reply transaction with bad transaction stack, transaction 968 has target 20378:0 [ 335.514384] binder: 20378:20386 transaction failed 29201/-71, size 0-0 line 2774 03:36:19 executing program 3: socket$kcm(0x2c, 0x7, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff8001, 0x490400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x7, @local, 0x1}, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @remote}, 0x91d}], 0x38) socketpair(0x0, 0x0, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x7) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="a10ccb5a7b4da9c7b8cf9dab5f84bfac0bc56936c46503dde9e074d0f60e57dc7252b632a99a9df93fb87b9e3a27b74bea06b0d43f430a7555a9052e6cc21b502b86ad51007322a511f4a0f7ba11a1f0d73ed7988b2ada97bb26e18aee30b625593da8183dd4a58f65ec340517ca617954860df6c66c0172b9272ac5bda20f0d95a749f2c8ff7f5c", 0x88}], 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 03:36:19 executing program 6: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x6}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000200000000000069078ac1414bbac1b14aa000000003d93e9c939fbcb935faaa9821072fb18a334d9df2c8bd7dfbd0202b850accd3e8b96541a6e414ef272bd04137eb005eca2b881ed9c3251622100000000f3791eddd9273a27", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000000)) io_setup(0x97, &(0x7f00000000c0)=0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x80) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x80, 0x0) r6 = dup(r2) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x200, 0x0) socketpair(0x8, 0xb, 0xe54, &(0x7f00000007c0)={0xffffffffffffffff}) socketpair(0x4, 0x1, 0x80000001, &(0x7f0000000900)={0xffffffffffffffff}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x260400, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) io_submit(r3, 0x8, &(0x7f0000000ac0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x5fe, r0, &(0x7f0000000180)="f0ff559d61596743b0422d6f8db073bd55e3b5300fb03cdab828125d79d90fa3d83561bb3f1fc60291edab19b1710836cb8fe4665a5e6574e1f3dfa2a856ad1f48036fd0492df3e7b045d549eac106d61e8f4b4aa77f96a7f0c7d23d7be821d9dba06f32641b711ab022576fe7d9f632e172420d243d3fe2f37ed76ac33211ef029251893502e0649d6eff9d8ff598fd24ce2fe24f640f99b4dcc2fc3388fa328c1c692bbe1bbf2a7f0c62cbefcdaa8743bb07b26f44003cea503c340fd12e73a0cdd73e5cf64a886e75b60346e69e16b174d689904b7055f3ebd03c7e00e581a19f5a669b1a1e577980", 0xea, 0x9, 0x0, 0x1, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x9c5e, r0, &(0x7f0000000300)="314a643e21269f9dbea1165eb377748986201889036699d9339010382bb8554b595adafb474f01f2eb3a1aadbbea0d560ef93f9ab89296274ed119099be8637499f716f5f7e959ce33bdf5093fd651fdc6e90dbea5c800f29b671c101b25a1", 0x5f, 0x0, 0x0, 0x0, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f00000003c0)="c4922ed6b813bfb92b4482aec6833cdc514ddfae605375eea747f8443aa12a70e19675345d0b68d37508b1cd18e4e6f8b2253d0cf0022dc976e61ccf93b97ab08313c9f0e191d02ab4fa4c95c048e856665e421514279f8bc4353ac2af3b04f80051a54708539b0bf4abd1f8c01106", 0x6f, 0x6, 0x0, 0x0, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f00000004c0)="a6158ab45dfb050dc2", 0x9, 0x81, 0x0, 0x0, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000540)="4d1b0c17c4ab714bb2e2dd9edc5bd869b4cfe1c54dccd9e6c82d2a8bb7e73489a8395db9dd16d301496bd34ada9f89dee3f9cfc268e9af76a0f9b097da29bb32ba2d1fa209d1ba82d2069fb3956f325cc70c91857e35648530e8ee117234627803acfa70fe018e6d6fcc595a6b9c98872df7fb66b57984732c5c7a051051c8d950ce2618f6cd7898a60e16c76af432624930e420484d51df02a4a97c43d59dfef2c1f56d98b397db8a58460c259540927924c1536887326d4aa96d90156a7d6362", 0xc1, 0x3, 0x0, 0x1, r7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xf, 0x7, r1, &(0x7f00000006c0)="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", 0xfc, 0x2, 0x0, 0x1, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, r0, &(0x7f0000000840)="7a58a294f4b55eddc6a209d46b62a71bbee14a862b45bd0668ca806c2b2293c63eebf97c7c6d2c5282492a9cd2b13185f808a7c6285772f7763b3d0d18bbf0dbfd8f28a1c9529dcb084a329739a70c96c3bee50ecdec4376aa684f0a1e8368a0dcf7396c2b4a8cf10f3b583914496bbb0d8cef565968dc232b6defc526f9a774e3f156af9ee23e19b34f4cf99fbb662adf673183dc6cc135a75d1403f41d7449ff7da142aa11c6c824e51173396f48aa5874", 0xb2, 0xffffffffffffffff, 0x0, 0x0, r9}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0xd5d, r0, &(0x7f0000000980)="96e392c19c62ca9ebc74cd3fa28f65c57f3c4bc915faaa416f6a5f6a08a5bc9f9b08e2d21b6092105944d91f59f07b4d2d9c60a66855fd24c633a95f33c23f8e2025ecc1d868e1287a94763ae955f4a2cf5e6a022ba139aafb5159566a401ca2b4b3d545a9fbd3562b62e2146bb7a0e3963eba08860d7a99838c5b5f0fec39d1c1e86d5ba5dcd916e238a3291c440369f79da04283b6e34972e9e1abf7f401e85215e7328268582d9ebb", 0xaa, 0x3, 0x0, 0x1, r10}]) 03:36:19 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x78a, 0x7, 0x9, 0x8000, 0x7fffffff}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, &(0x7f0000000440)=0x84) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5bb6, 0x21, 0xfffffffffffffff7, 0x1, 0x20}) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='g%s2meta\x00', 0x0, 0x0) 03:36:19 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = memfd_create(&(0x7f0000000000)=',-vmnet1\x00', 0x3) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x800) inotify_rm_watch(r0, r1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) [ 335.583965] binder: BINDER_SET_CONTEXT_MGR already set [ 335.594542] binder: 20378:20398 ioctl 40046207 0 returned -16 [ 335.604221] binder: 20378:20398 got reply transaction with no transaction stack [ 335.604296] binder_alloc: 20378: binder_alloc_buf, no vma [ 335.611814] binder: 20378:20398 transaction failed 29201/-71, size 0-0 line 2759 [ 335.625207] binder: 20378:20386 transaction failed 29189/-3, size 0-0 line 2967 03:36:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 335.634351] binder: release 20378:20386 transaction 968 out, still active [ 335.641407] binder: undelivered TRANSACTION_COMPLETE [ 335.646611] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.652215] binder: send failed reply for transaction 968, target dead [ 335.662516] binder: undelivered TRANSACTION_ERROR: 29189 [ 335.668171] binder: undelivered TRANSACTION_ERROR: 29201 03:36:19 executing program 1: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000200)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) getresuid(&(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) getrusage(0x0, &(0x7f00000002c0)) shmdt(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) write$binfmt_elf32(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x24000, 0x10001, 0x0, 0xaf, 0x3f, 0x3, 0x6, 0x5, 0x341, 0x38, 0x374, 0x5, 0x100000000, 0x20, 0x2, 0x81, 0x3, 0xa76}, [{0x6474e551, 0x8, 0x4, 0x2, 0xa2d2, 0xcd, 0x4, 0x401}, {0x1, 0x7, 0x4, 0x1, 0x6, 0x6, 0x2, 0x5}], "8c99ddcca1f86ee57a452233469e575171cba4035b1ee6ce1f95c2b01f694faa5bb064cff99414f30ebae86311ffea3c507e6e96a615546869d45a6450af703db074e64bc119ec8846a6b9834af7f1b048148492f79f4ace81a9601bc8e3d23e6742dfee39a0dec4a779a5d20fd21ff974d83d50b1ca12f80b558265d869ac4982a53c7e844c046189e7b1c481a416f0a4b1f5d1f490e466180595f009eb838759534e42b98ea4e2bb8e93c6b2196418d86f2a5b419b77990a465f141e26a7aa688b8182", [[], [], [], [], [], [], [], [], []]}, 0xa3c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r1, 0x2}}, 0x18) 03:36:19 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x10000) r1 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7fff) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f000002b000)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca0000cf", 0x1f) [ 335.820152] binder: 20418:20424 got reply transaction with bad transaction stack, transaction 973 has target 20418:0 [ 335.831102] binder: 20418:20424 transaction failed 29201/-71, size 0-0 line 2774 03:36:19 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20000111006, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000180)) shmget(0x2, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget(0x2, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) socketpair$inet6(0xa, 0x80003, 0xa, &(0x7f0000000280)={0xffffffffffffffff}) ioctl(r2, 0x1f, &(0x7f0000000040)="6143965ce017b11a823ee7d7fd66b504ece4ece48621406c65c772c9310ce44ad8aff52e85ef0ba30a6b13ec47e0c1215109fdd062fa72fdce7e1e701b434c34ab203bc41321cc3eb89032028fa6d106cf1594a73e150867fc914d52703da18756c80abad5c674a2f26c458f94d35b6076385f14c45f226aa8f31e8f4ebf87e50fe174e8138fa65c62e4f9e463e77e83ab555cbc286f96e5f60974d16c68127dd0b6fb1ab94930f784c9262a40ffa8493b82b42ceaf391c8147bae219610489904a930fcc2a2b83b0636c3f49b3c1f68ffb2755e204679c3ec482bba2b6587cde6d5d5b9645a0f9f10df43ac0dcf50ecfd1f25f8ed") 03:36:19 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x20, 0xfffffffffffffffe, 0x18400) lseek(r0, 0x0, 0x3) 03:36:19 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101000, 0x44) ioctl$KDADDIO(r0, 0x4b34, 0x9) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='nfsd\x00', 0x430, 0x0) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='g.s2meta\x00', 0x0, 0x0) [ 335.909395] binder: BINDER_SET_CONTEXT_MGR already set [ 335.918512] binder: 20418:20432 ioctl 40046207 0 returned -16 [ 335.928150] binder_alloc: 20418: binder_alloc_buf, no vma [ 335.933922] binder: 20418:20424 transaction failed 29189/-3, size 0-0 line 2967 [ 335.940179] binder: 20418:20432 got reply transaction with no transaction stack [ 335.949168] binder: 20418:20432 transaction failed 29201/-71, size 0-0 line 2759 03:36:19 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000000000000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x7b, 0x0, [0x34], [0x0, 0xd004]}) [ 335.958835] binder: release 20418:20424 transaction 973 out, still active [ 335.966237] binder: undelivered TRANSACTION_COMPLETE [ 335.971467] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.977141] binder: send failed reply for transaction 973, target dead [ 335.985692] binder: undelivered TRANSACTION_ERROR: 29189 [ 335.991545] binder: undelivered TRANSACTION_ERROR: 29201 03:36:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000040)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x20, @mcast1, 0xa187}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0x3}}, 0x101, 0x7, 0x3f, 0xfffffffffffff079, 0x6}, &(0x7f0000000280)=0x98) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) r5 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x4, r5}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) 03:36:19 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2000000000007, &(0x7f0000000200), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x4000000000003) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xa) write$P9_RATTACH(r1, &(0x7f00000025c0)={0x14}, 0x14) 03:36:19 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = shmget$private(0x0, 0x3000, 0x54000c44, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) [ 336.176499] EXT4-fs (sda1): re-mounted. Opts: (null) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='g/s2meta\x00', 0x0, 0x0) [ 336.218965] binder: 20457:20462 got reply transaction with bad transaction stack, transaction 978 has target 20457:0 [ 336.230145] binder: 20457:20462 transaction failed 29201/-71, size 0-0 line 2774 [ 336.243752] EXT4-fs (sda1): re-mounted. Opts: (null) 03:36:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x9c8f, 0x208, 0x7fff, 0xfffffffffffff1b0, r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x1ea, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f800000016000b37effad6da044808a8cfb30d7b01060000000000000400fe806acf0000000000000000000000aaff01004005000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000747c00000000000000000000000000000000d68e43a52c4a147663be000000000000000000000000000000000000000000000016c10000000000000000000000000000000000"], 0x4}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x44040, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={r1, 0xc5}, 0x8) syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x9, 0x40000) 03:36:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8915, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=ANY=[], 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x4000) close(r2) close(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @rand_addr}, &(0x7f00000000c0)=0xc) [ 336.266443] binder: BINDER_SET_CONTEXT_MGR already set 03:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xfff, 0x111c01) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000180)={{0x105000, 0x2000, 0xf, 0xfffffffffffffff8, 0x0, 0x2, 0x2, 0x3, 0x80000001, 0xffffffff, 0x8, 0x6}, {0x1000, 0x2, 0xf, 0x1, 0x1, 0xfff, 0x0, 0xfffffffffffffffd, 0xe828, 0x401, 0x8001, 0x2}, {0xd000, 0x1, 0x1b, 0x6, 0x14c, 0x1000, 0x7ff, 0x81, 0x3, 0x8, 0xff, 0xffffffffffff4e04}, {0x3000, 0x6003, 0x8, 0x5e07, 0xf1, 0x2, 0x5, 0x0, 0xf28, 0x0, 0x286, 0x7f}, {0x0, 0x3000, 0xf, 0x4, 0x6, 0x800, 0x1, 0xfffffffffffffffe, 0x8, 0x0, 0x8, 0x1}, {0x6000, 0x100000, 0xf, 0x3, 0xc8bf, 0x1, 0x7, 0x5, 0x34, 0x7fff, 0x1f, 0x1000}, {0x100001, 0x7004, 0xb, 0x8001, 0x2, 0x6, 0x5, 0x4dc, 0x6, 0x5, 0x0, 0x80000}, {0x6000, 0xf003, 0x8, 0x3, 0x7f, 0xfffffffffffffffb, 0x81, 0x9, 0x1f, 0x3c9a8703, 0xf91f, 0x6}, {0x3000}, {0x5000, 0x1000}, 0x20, 0x0, 0x103000, 0x200, 0x6, 0x400, 0x107002, [0x9, 0x0, 0xa7, 0x2e099d39]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="040000000000000001feffffffffffff01000000010000800700000000000000ff7f0000000000000700000000000000000000000000fc1f0000000000000003000000000000000008020000000000000000000000000000090000000000000003000000000000000100000000000000000000000000000000000000000000000004000000000000000000000000000040000000000000000400000000000000544b0000000000000000000000000000000000000000000086000000000000000000000000000000cbccbf0000000000000000000000000003000000000000000000000000000000000000000000000084100000000000000000000000000000490000000000000009000000000000010001000000000000000000000000000000000000000000000021000000000000000000000000000000040000000000000800000000000000810000000000000000000000000000000000000000000000000900000000000000000000000000000300000000000000050000000000000003000000000000000000000000000000000000000000000082200000000000000000000000000000"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x48) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000eadf2c7700000000cb0000000001"]) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0xc0000, 0x0) [ 336.294538] binder_alloc: 20457: binder_alloc_buf, no vma [ 336.300385] binder: 20457:20462 transaction failed 29189/-3, size 0-0 line 2967 [ 336.303627] binder: 20457:20467 ioctl 40046207 0 returned -16 [ 336.322343] binder: 20457:20469 got reply transaction with no transaction stack [ 336.330014] binder: 20457:20469 transaction failed 29201/-71, size 0-0 line 2759 [ 336.350146] binder: release 20457:20462 transaction 978 out, still active [ 336.357279] binder: undelivered TRANSACTION_COMPLETE [ 336.362458] binder: undelivered TRANSACTION_ERROR: 29201 03:36:20 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 336.419764] binder: undelivered TRANSACTION_ERROR: 29189 [ 336.425349] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.476923] binder: send failed reply for transaction 978, target dead [ 336.540403] binder: 20489:20492 got reply transaction with bad transaction stack, transaction 983 has target 20489:0 [ 336.551280] binder: 20489:20492 transaction failed 29201/-71, size 0-0 line 2774 [ 336.606753] binder: BINDER_SET_CONTEXT_MGR already set [ 336.612722] binder: 20489:20495 ioctl 40046207 0 returned -16 [ 336.638975] binder_alloc: 20489: binder_alloc_buf, no vma [ 336.644801] binder: 20489:20492 transaction failed 29189/-3, size 0-0 line 2967 [ 336.671212] binder: 20489:20495 got reply transaction with no transaction stack [ 336.679134] binder: 20489:20495 transaction failed 29201/-71, size 0-0 line 2759 [ 336.688580] binder: send failed reply for transaction 983 to 20489:20492 [ 336.696185] binder: undelivered TRANSACTION_COMPLETE [ 336.701437] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.706940] binder: undelivered TRANSACTION_ERROR: 29189 [ 336.719979] binder: undelivered TRANSACTION_ERROR: 29189 [ 336.725560] binder: undelivered TRANSACTION_ERROR: 29201 03:36:21 executing program 1: timerfd_create(0x0, 0x0) unshare(0x40000000) clock_gettime(0x7, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 03:36:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000006c0)="6e6f646573e6", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$P9_RREADDIR(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2ab900d60bf192"], 0x7) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xbe11, 0x0, 0x0, 0x0, 0x0, "804e2486cff9d9266b6504d1017e922724e09b8a6d2cec6c5249be3594ed7f102204bb458c81a116e92825862da340dec9ee4a6bb74e77d3dd1a52f33cc1748d", "9b9565fd6c7860bd47638a0e3a6899a829b38528694cb064080000bdf5c1d14998d5bbac6c4deae26bc26c30acd5983cc9a8453e000873477ebc926e83d8fccc", "1afce8d40c23003f15ffffca5100f900"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000140)=""/231) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000004c0)={0x7b, 0x0, [0x400000b7]}) 03:36:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0xa, 0x79b, 0x9, 0x6]}) r1 = socket$l2tp(0x2b, 0x1, 0x1) getsockname(r1, &(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000000)=0xa7) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)="0895ad9d1219bb4fe381b5d0e2a7e88564b84178118fcf4fac76fc78cb200ea7438ad13b46efa4a62c5d3797f502278aeba9") 03:36:21 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000040)={@mcast2}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x200004e24, @multicast1}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'ip6_vti0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'bridge_slave_1\x00', 0x3}, 0x18) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:36:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x8a070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gf\n2meta\x00', 0x0, 0x0) 03:36:21 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:21 executing program 2: r0 = shmget(0x1, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x3, 0x6) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/32, 0x20}, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e23, @local}, 0x8, 0x1, 0x0, 0x8001, 0x2, &(0x7f0000000000)='erspan0\x00', 0x14}) shutdown(r0, 0x0) 03:36:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) sendto$inet(r0, &(0x7f0000000000)="98", 0x1, 0x1, 0x0, 0x0) close(r0) [ 337.552722] binder: 20515:20520 got reply transaction with bad transaction stack, transaction 988 has target 20515:0 [ 337.563944] binder: 20515:20520 transaction failed 29201/-71, size 0-0 line 2774 [ 337.617630] binder: BINDER_SET_CONTEXT_MGR already set 03:36:21 executing program 3: r0 = socket(0x800008002b, 0x4, 0x8) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xfffffffffffff2a7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0xe2}, 0x8) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[]}}, 0x20008850) ioctl$sock_inet6_SIOCDELRT(r1, 0x8918, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr}, @mcast2, @remote}) 03:36:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000467911cb00000000a16e6e74a500f58766a7394363347b6e5489ff12a3ee90059c5d6fce02c06120c5b829681a49164654dc7eeabcc760c39294e0fb8506a476"], 0x10) [ 337.661564] binder: 20515:20536 ioctl 40046207 0 returned -16 [ 337.696625] IPVS: ftp: loaded support on port[0] = 21 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gf%2meta\x00', 0x0, 0x0) [ 337.748193] binder: 20515:20551 got reply transaction with no transaction stack [ 337.756115] binder: 20515:20551 transaction failed 29201/-71, size 0-0 line 2759 03:36:21 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget(0x1, 0x2000, 0x1080, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 337.819772] binder: send failed reply for transaction 988 to 20515:20520 [ 337.823654] IPVS: ftp: loaded support on port[0] = 21 [ 337.827011] binder: send failed reply for transaction 990 to 20515:20520 03:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB='overridereckperm,unhide,\x00']) 03:36:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 337.889819] binder: undelivered TRANSACTION_COMPLETE [ 337.895229] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.900778] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.928538] binder: undelivered TRANSACTION_COMPLETE [ 337.933847] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.939753] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.026467] binder: 20570:20574 got reply transaction with bad transaction stack, transaction 993 has target 20570:0 [ 338.037616] binder: 20570:20574 transaction failed 29201/-71, size 0-0 line 2774 [ 338.151958] binder: BINDER_SET_CONTEXT_MGR already set [ 338.165505] binder: 20570:20584 ioctl 40046207 0 returned -16 [ 338.201500] binder_alloc: 20570: binder_alloc_buf, no vma [ 338.207378] binder: 20570:20574 transaction failed 29189/-3, size 0-0 line 2967 [ 338.246092] binder: 20570:20584 got reply transaction with no transaction stack [ 338.253756] binder: 20570:20584 transaction failed 29201/-71, size 0-0 line 2759 [ 338.293746] binder: release 20570:20574 transaction 993 out, still active [ 338.300881] binder: undelivered TRANSACTION_COMPLETE [ 338.306095] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.329115] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.335254] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.341519] binder: send failed reply for transaction 993, target dead 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs%meta\x00', 0x0, 0x0) 03:36:23 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x3, 0x3000, 0x22, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x4000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/11, 0xb}], 0x2, &(0x7f0000000200)=""/210, 0xd2, 0x7}, 0x1}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/59, 0x3b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/64, 0x40}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x9, &(0x7f0000002780)=""/30, 0x1e, 0x6e2}, 0x8}, {{&(0x7f00000027c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002840)=""/240, 0xf0}, {&(0x7f0000002940)=""/52, 0x34}], 0x2, &(0x7f00000029c0)=""/244, 0xf4, 0x1ff}, 0x3}, {{&(0x7f0000002ac0)=@sco, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/152, 0x98}], 0x1, &(0x7f0000002c40)}, 0x5}, {{&(0x7f0000002c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d00)=""/214, 0xd6}, {&(0x7f0000002e00)=""/164, 0xa4}], 0x2, &(0x7f0000002f00)=""/116, 0x74, 0x7fff}, 0x7fffffff}, {{&(0x7f0000002f80)=@rc, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003000)=""/69, 0x45}, {&(0x7f0000003080)=""/128, 0x80}, {&(0x7f0000003100)=""/182, 0xb6}], 0x3, 0x0, 0x0, 0x8}, 0xffffffffffffffc2}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003200)=""/108, 0x6c}, {&(0x7f0000003280)=""/235, 0xeb}, {&(0x7f0000003380)=""/60, 0x3c}, {&(0x7f00000033c0)=""/11, 0xb}, {&(0x7f0000003400)=""/124, 0x7c}, {&(0x7f0000003480)=""/213, 0xd5}, {&(0x7f0000003580)=""/128, 0x80}, {&(0x7f0000003600)=""/89, 0x59}], 0x8, &(0x7f0000003700)=""/230, 0xe6, 0x6}, 0x5}, {{&(0x7f0000003800)=@in, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/173, 0xad}, {&(0x7f0000003940)=""/18, 0x12}, {&(0x7f0000003980)=""/47, 0x2f}, {&(0x7f00000039c0)=""/6, 0x6}, {&(0x7f0000003a00)=""/28, 0x1c}], 0x5, &(0x7f0000003ac0)=""/189, 0xbd, 0x4}, 0xe8ab}], 0x8, 0x20, 0x0) r4 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000002c40)={0x19980330, r4}, &(0x7f0000003d80)={0x5, 0x0, 0x1ca4, 0x1, 0x9, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400000000000000040000000000000007a97eb23cc29bfd9d690501962697962c96324aade249046abd456012cb8b42899589a3aa8a38f7f3"], &(0x7f0000003dc0)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000003e00)={r5, 0x10000}, &(0x7f0000003e40)=0x8) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x7, 0x99, 0x80000000}) 03:36:23 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x400, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1000000008012, r0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000140)=0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12051, r0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) 03:36:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x10000, 0x7, 0xfffffffffffff193, 0x0, 0x5, 0xfffffffffffffffb, 0x1b65, 0x5, 0x1, 0x0, 0x7, 0x20, 0x0, 0x8, 0x4, 0x7fffffff, 0x200, 0x0, 0x10000}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x200, 0x70, 0x2, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000aa10e50c9ad8b8dc0728"]) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="202d001908000000000020e1ffd53d79d20cbe9a0beb74e33b36653699000000"], 0x20}}, 0x0) 03:36:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000829e73d22d18f0acef0353bb66cf42000000000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000380)="37493f10ec967cd49c4cffe7fc8ca200275a61587c9516e3f97c11f5a4579a6db362d1801057d88fcf4bec21457b95ec1fb1e96ccde2c15e9e6c70fa36aef286ee0e17a8063505fff64672d5528a2375d57192a46c87029516760f06014e69be0586928e257deae5d2335144f5646062d404c6151c72a6e07a9bed23d402d1444c615de38f7ccab2b18c8367e1e361d274be4f2f481e39113e8ee400ee06bda2e9b18637753ffc8a04241ce0cc686322b145589dd4627639143c8dfeb57f624851c83b4f8f587e7dd40aa96b9e74d73c6eaf1b79ef0d1f8231f495620817fd1c415d06f6a8a058b1494850cadafd6f5ddb037a676e13f3ae2d") r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x1a3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x517f, 0x7fff, 0x8, 0x11, r0, 0x4}, 0x2c) 03:36:23 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x40000) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000600)) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000340)='fuse\x00', 0x1000, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x10000}}]}}) r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x8, 0x101000) connect(r3, &(0x7f00000002c0)=@generic={0x13, "9486cdb7ed08cb3d34aed5d4a7bf3104a0cd03ed3ccb58b11fe033f3f14c5c698ddd4554e3c99dc32814953296222e2230f385700cdd577848b6bd46b8e3ea7e62636e9723a8e307603760e2441e24dd3207168d3be4d28f1c7310bc0fc2e7dc39597fb6cb6e845f6d48bc822d40b453384f6141ee1cad700d6482fbb1e9"}, 0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)="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", 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f0000000180), 0x4) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000800), &(0x7f0000000880)=0x68) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)="aa", 0x1}, {&(0x7f00000000c0)="1c070dc1862be56c7c8ecd49bade8fa016972ed727fc456a477f8421efb52f09692272889c0a1fa4f96c8870128c445fe0b2e6095cf6a4802ab132ecd5c19f85fb7d1784c96868f5e1f9236efbb4b183f6a362cdd69b25b5fa168fcfe0f439f0665769e59063536e6b6d5c5563e276b2bc5608e16a16cfcaccd432308b8f75ed796e8675efa7a2b7a5515eb71d03e84622692c78f29b93b6e88755da03b411ae93789fb728b12c726c499dbe28352a356632c1d0d7e621c7ffcacd5fcfee8ef0f33596f36e756103ab269c7ec95f0e9466af8e694b8a", 0xd6}, {&(0x7f0000000200)="60e965ea6d3f4d82b78aebb93bf395111f87b027ef9ed4e52750b0ec09d91d0b5c54d628e0757e41b60262964ebd89be", 0x30}], 0x3, 0x0) ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000240)={0x3, 0x1, 0x2, 0x4, 0x80000001, 0x80}) 03:36:23 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x2, 0x4) r1 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x80000) getsockopt(r1, 0x8, 0x7ff, &(0x7f0000000240)=""/1, &(0x7f0000000280)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x894, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000018000900000000000008001500b9021372080003000000000000000000000000000000001004f4894714f9f9e20d13eb87dc9d770d49ff0c54d36053580f9e7402147bedcc1dbfbe403b13e086191c18ce29f7025f9593958a1047505e2f86d97c0597cfa17bd4"], 0x2c}}, 0x0) 03:36:23 executing program 6: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)='U', 0x1}], 0x1, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x512, 0xffffffffffffff01, 0x6}, 0xc) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x7b}}], 0x1, 0x0, &(0x7f0000001340)) [ 339.669685] binder: 20601:20612 got reply transaction with bad transaction stack, transaction 998 has target 20601:0 [ 339.680874] binder: 20601:20612 transaction failed 29201/-71, size 0-0 line 2774 03:36:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, 0xe1d7, 0x1, 0x3, 0x0, 0x1ff, 0x1000, 0x2}, &(0x7f0000000040)=0x20) lsetxattr(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000100)=@known='security.evm\x00', &(0x7f0000000140)='security\\louser^:bdev)em1mime_type\'-/proc\x00', 0x2a, 0x80000000000000) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.evm\x00', &(0x7f00000001c0)="257365637572697479ab2f00", 0xc, 0x0) 03:36:23 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs\tmeta\x00', 0x0, 0x0) 03:36:23 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000080), 0x0) 03:36:23 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 339.798420] binder: BINDER_SET_CONTEXT_MGR already set [ 339.812933] binder: 20601:20624 ioctl 40046207 0 returned -16 [ 339.831440] binder_alloc: 20601: binder_alloc_buf, no vma [ 339.837208] binder: 20601:20612 transaction failed 29189/-3, size 0-0 line 2967 03:36:23 executing program 3: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x100, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r2 = gettid() r3 = syz_open_dev$dspn(&(0x7f0000000500)='/dev/dsp#\x00', 0x0, 0x800) mkdirat$cgroup(r3, &(0x7f0000000540)='syz0\x00', 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ab5000/0x1000)=nil) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000740)={&(0x7f0000000580), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf0, r5, 0x402, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe7}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x9}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000780)={@remote, @dev}, &(0x7f00000007c0)=0xc) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x10, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}]}}) open(&(0x7f0000000800)='./file0\x00', 0x80000, 0x100) [ 339.840878] binder: 20601:20633 got reply transaction with no transaction stack [ 339.852392] binder: 20601:20633 transaction failed 29201/-71, size 0-0 line 2759 [ 339.876686] binder: release 20601:20612 transaction 998 out, still active [ 339.883878] binder: undelivered TRANSACTION_COMPLETE [ 339.889120] binder: undelivered TRANSACTION_ERROR: 29201 03:36:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) inotify_init1(0x800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x80080, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10000, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xb) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x878, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000000280)=""/11, 0xb6) [ 339.905457] binder: undelivered TRANSACTION_ERROR: 29189 [ 339.911348] binder: undelivered TRANSACTION_ERROR: 29201 03:36:23 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040)=0xf09d, 0x8) r1 = shmget$private(0x0, 0x4000, 0x141, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 340.013253] binder: send failed reply for transaction 998, target dead 03:36:23 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\'vboxnet1\x00') r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000002c0)=""/127) 03:36:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x1, 0x6, 0x0) 03:36:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) fcntl$setstatus(r0, 0x4, 0x2c00) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @dev, 0x1}]}, &(0x7f0000000200)=0x10) listen(r0, 0x43) r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x80, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc43}, 0xb) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={r1, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) [ 340.056209] binder: 20656:20660 got reply transaction with bad transaction stack, transaction 1003 has target 20656:0 [ 340.067199] binder: 20656:20660 transaction failed 29201/-71, size 0-0 line 2774 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfscmeta\x00', 0x0, 0x0) [ 340.121554] binder: BINDER_SET_CONTEXT_MGR already set [ 340.130604] binder: 20656:20664 ioctl 40046207 0 returned -16 [ 340.138871] binder_alloc: 20656: binder_alloc_buf, no vma [ 340.144697] binder: 20656:20660 transaction failed 29189/-3, size 0-0 line 2967 03:36:23 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$inet6(0xa, 0x1, 0x3f) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/104) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/92, &(0x7f0000000180)=0x5c) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000000c0)) [ 340.179623] binder: 20656:20664 got reply transaction with no transaction stack [ 340.187246] binder: 20656:20664 transaction failed 29201/-71, size 0-0 line 2759 03:36:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 340.233310] binder: send failed reply for transaction 1003 to 20656:20660 [ 340.255819] binder: undelivered TRANSACTION_ERROR: 29189 [ 340.261441] binder: undelivered TRANSACTION_ERROR: 29201 03:36:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="0f21d866f243d223b9c10200000f32c7442400bc000000c7442402b76a0000c7442406000000000f011c24260f017a84c74424002d77018fc744240200300000c7442406000000000f011c24660f388046c766b80f000f00d0c4c1fd5b1ab9800000c00f3235008000000f30", 0x6c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7, 0x40001) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 03:36:23 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x0, 0x0, 0x1f, 0xfffffffffffffffc}}, 0xfffffffffffffe67) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000400)={'nr0\x00', {0x2, 0x4e22, @multicast1}}) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="f80c8eabf98d68c354e997703da39f6db460b6cf4e24a042a68db9ea7692bf0f5b3978ba0f86662d6636970bb2cfbad6b86f53a9ac453ffdc39826d934ebdc7abc6060f64ff8069622e00f5752e738a00c194f0cb203e7562e37cf96bd65f074136cc8ee13c514581f28f9bd0ffabeddbcb20d2e3d0e7cd3fc0d26d2fbfd9f30d02a1d8342b3234589ac00c59afa9fe5964fa8de98a00841f1bf7dc0bb5212d9e0e7b80d0543cc42990a2bbc1697412ab1d98d2c9e3034f58dc4ebc6b0739c7fffcb7712363238b79474ae0ec334de3c469cf55bc5f3002351c1e2ee7ad7dde0a6", 0xe1}, {&(0x7f00000001c0)="74963d7a3cc5a02e438b552f9dd7c5bd166795d96786955a24d424b11f1b1da3d20cb30e4680377875d296a4519c137ea50c2e84544a31860e7e86a3abc288c109285ec21444ba09a7b694300212686b9512f245256da24a7792cbecd2a4e167560941d9d588d3e077376371b5f7c1f83098cbcc0b3ce1d709ef6d999ad052edcce6efbf417004a35186ad5fe43345de7bdd71e1c5fe20058ad233969784acfef4b4", 0xa2}, {&(0x7f0000000000)="2febdb0eebd34fdf4c91646f1c721623c10a9f3d23a9b0db777f0acfd724d0a22b079e2c", 0x24}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x260, 0x20008084}, 0x4) r2 = memfd_create(&(0x7f0000000300)="6d696d655f747970659a216574683100", 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000340)=""/27, &(0x7f0000000380)=0x1b) bind$bt_sco(r1, &(0x7f0000000040), 0x8) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x7, 0x151e4d8aeb7f717a) read(r0, &(0x7f00000002c0)=""/28, 0x1c) listen(r0, 0x0) listen(r1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0xc2000, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000005c0)) [ 340.328199] binder: undelivered TRANSACTION_COMPLETE [ 340.333490] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.339008] binder: undelivered TRANSACTION_ERROR: 29189 03:36:24 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f000079df88)) msgsnd(r0, &(0x7f0000e74f60)={0x2}, 0x8, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000000c0)={0x5, 0x7, 0x10001}, 0xc) msgsnd(r0, &(0x7f0000be2f0a)={0x2}, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000001c0)={{0x3e, @multicast2, 0x4e21, 0x0, 'lblc\x00', 0x1, 0x4, 0x7d}, {@empty, 0x4e22, 0x0, 0x3ff, 0x7fffffff, 0x6}}, 0x44) socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80, 0x440000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) fcntl$setown(r1, 0x8, r3) ioctl$RTC_WIE_OFF(r2, 0x7010) msgrcv(r0, &(0x7f0000745000)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs\nmeta\x00', 0x0, 0x0) [ 340.452243] binder: 20697:20700 got reply transaction with bad transaction stack, transaction 1008 has target 20697:0 [ 340.463226] binder: 20697:20700 transaction failed 29201/-71, size 0-0 line 2774 [ 340.528321] binder: BINDER_SET_CONTEXT_MGR already set 03:36:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_rr_get_interval(r1, &(0x7f0000000100)) ioctl$KVM_GET_REGS(r0, 0x40047211, &(0x7f0000001540)) [ 340.558883] binder: 20697:20704 ioctl 40046207 0 returned -16 [ 340.590951] binder_alloc: 20697: binder_alloc_buf, no vma [ 340.596764] binder: 20697:20700 transaction failed 29189/-3, size 0-0 line 2967 [ 340.623345] binder: 20697:20710 got reply transaction with no transaction stack [ 340.631289] binder: 20697:20710 transaction failed 29201/-71, size 0-0 line 2759 [ 340.643330] binder: release 20697:20700 transaction 1008 out, still active [ 340.650525] binder: undelivered TRANSACTION_COMPLETE [ 340.655732] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.663386] binder: send failed reply for transaction 1008, target dead [ 340.699625] binder: undelivered TRANSACTION_ERROR: 29189 [ 340.705289] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.836394] FAT-fs (loop5): Unrecognized mount option "./file0/file0" or missing value 03:36:24 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x6) ptrace$peek(0x1, r1, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="af54cfd3931903936667f76ff778a8fc3183eb6590c51ba006d69de9bc5cd283a502494c12dd89ab27befaf9806c2d96cbae992966d9953994e278ae21145743f3edba06a34c19d998b2fd075569f6"], &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x61, "8f0725198d4cb09a19b1a15b376f40de74c1fb7e1c87a2eb41c20b1b33edd4b1b4ca3df0f1112ca4f61e02085c65457476f5666f68e6df48d5036b0db0c6f495d6d4c3114de68fa86d99f9889ec441c493b7a811ede7208683da5fe32f9d709843"}, &(0x7f0000000140)=0x69) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2\neta\x00', 0x0, 0x0) 03:36:24 executing program 2: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = dup(0xffffffffffffffff) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x8, 0xffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x800) getsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:36:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff45}}) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x90182) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 03:36:24 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@rc, &(0x7f00000000c0)=0x80) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0xfffffffffffffe00, 0x1, 0x6, 0x0, 0xfb}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ade3"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffc, 0x600) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x401}}, 0x401, 0x5}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={r3, @in={{0x2, 0x4e20, @local}}, 0x10001, 0x996}, &(0x7f0000000080)=0x90) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000500)="c744240085000000c7442402ef490000c7442406000000000f011c24c74424009db36196c744240200000000c7442406000000000f011424c4e17ff030b9630900000f320fc75b29260f01d10f01d10f001a0f60fd0f0119", 0x58}], 0x1, 0x14, &(0x7f0000000580)=[@flags={0x3, 0x10000}, @cr0={0x0, 0x40020}], 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:36:24 executing program 2: shmget(0x1, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x300, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget(0x2, 0x1000, 0xdcf9ece70849bb5e, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 340.961858] binder: 20735:20742 got reply transaction with bad transaction stack, transaction 1013 has target 20735:0 [ 340.972995] binder: 20735:20742 transaction failed 29201/-71, size 0-0 line 2774 [ 340.998512] binder: BINDER_SET_CONTEXT_MGR already set [ 341.005375] binder: 20735:20748 ioctl 40046207 0 returned -16 03:36:24 executing program 1: r0 = memfd_create(&(0x7f0000000080)='lo\x00', 0x2) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='ip6gre0\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) accept4$unix(r0, 0x0, &(0x7f0000000100), 0x800) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r2 = socket(0x40000000015, 0x40000000000005, 0x0) getsockopt$sock_int(r2, 0x1, 0x30, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 03:36:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0xc0) ioctl$RTC_PIE_ON(r0, 0x7005) mkdir(&(0x7f0000000240)='./file0\x00', 0x14) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00000000c0)=""/35, 0x23) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2%eta\x00', 0x0, 0x0) [ 341.021012] binder_alloc: 20735: binder_alloc_buf, no vma [ 341.026886] binder: 20735:20742 transaction failed 29189/-3, size 0-0 line 2967 [ 341.040176] binder: 20735:20748 got reply transaction with no transaction stack [ 341.047838] binder: 20735:20748 transaction failed 29201/-71, size 0-0 line 2759 [ 341.062564] binder: release 20735:20742 transaction 1013 out, still active 03:36:24 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x89070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 341.069750] binder: undelivered TRANSACTION_COMPLETE [ 341.075011] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.080587] binder: send failed reply for transaction 1013, target dead [ 341.088577] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.094353] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.236583] binder: 20774:20777 got reply transaction with bad transaction stack, transaction 1018 has target 20774:0 [ 341.247553] binder: 20774:20777 transaction failed 29201/-71, size 0-0 line 2774 [ 341.309784] binder: BINDER_SET_CONTEXT_MGR already set [ 341.320635] binder: 20774:20782 ioctl 40046207 0 returned -16 [ 341.335313] binder_alloc: 20774: binder_alloc_buf, no vma [ 341.341209] binder: 20774:20777 transaction failed 29189/-3, size 0-0 line 2967 [ 341.344395] binder: 20774:20782 got reply transaction with no transaction stack [ 341.356632] binder: 20774:20782 transaction failed 29201/-71, size 0-0 line 2759 [ 341.373436] binder: release 20774:20777 transaction 1018 out, still active [ 341.380755] binder: undelivered TRANSACTION_COMPLETE [ 341.385990] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.391987] binder: send failed reply for transaction 1018, target dead [ 341.401815] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.407384] binder: undelivered TRANSACTION_ERROR: 29201 03:36:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)) 03:36:25 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0x3f, 0x6}) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000800)=""/142, 0x8e}], 0x3, &(0x7f00000008c0)=""/165, 0xa5}}], 0x1, 0x0, &(0x7f00000009c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000031000100000000000000000400000000"], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:36:25 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x1, &(0x7f0000000280), &(0x7f0000000000)=0xfffffffffffffd2d) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x100) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) 03:36:25 executing program 6: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x80000) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) fstatfs(r0, &(0x7f0000000000)=""/122) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syslog(0xb, &(0x7f0000000140)=""/67, 0xffffffffffffff56) 03:36:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2m%ta\x00', 0x0, 0x0) 03:36:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r1, &(0x7f0000000400)=""/103, 0x67) getdents(r1, &(0x7f0000000000)=""/181, 0xb5) 03:36:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:25 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$unlink(0xb, 0x0, 0x0) flistxattr(r0, &(0x7f0000000040)=""/8, 0x8) 03:36:25 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) shmget$private(0x0, 0x4000, 0x54001000, &(0x7f0000ffc000/0x4000)=nil) recvfrom$llc(r0, &(0x7f0000000000)=""/19, 0x13, 0x20, &(0x7f0000000080)={0x1a, 0x33a, 0xb1a, 0x5, 0xffffffff00000001, 0x59, @dev={[], 0x20}}, 0x10) shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x12, &(0x7f0000ffc000/0x3000)=nil) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) ioctl(r0, 0xe50, &(0x7f00000003c0)="098585b642109b5f64166b402bda686f63e8d9d1c904e45f3121193018c31b2af420d26a1742d368ae094def7db5c609bb481ed997a6f5f7001b25b9150fe3e0b16e38bfd4b32d7b49ebd57e5bc61eda04709f0d30697e4f6c64db80778abd4933a8d9d4b112342c6bba9f2dfd5021eb4dd336dbca12df662f025d92106b0b1e1463ca3ba96acbffcc32ccd84847eedaa10a4af1fc805803c4ae166be1a45863c220e142ed75072806484fc63cfb772f60757923e349382335e101323fdbd127a7124d31e9314060f2dec1c93b2ce96b78b0274a13661d563672db") r1 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='/dev/vcs\x00', 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000540)='logon\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000004c0)='wlan1)#{vmnet0eth0\x00', 0xfffffffffffffffc) keyctl$instantiate(0xc, r1, &(0x7f0000000200)="efe51426c77832106ad29792e0b89bc3543f534e3dedd25c7e99d70cad16b2dae289c1a82dd387e46501e6fe64c734845a7c965b9ded025e073277a9dab83b5303bd1564153404401ac0d550d91167372c990754a311f45e5ba6af65fdfb9eac7df1b4896c9fd10ac94c3297feb0ae0c9af218291ed980cd88ecab3407ff4187d8273cff2f5ab4b5382ee9fc9c18b0386c8fe0be68be9a8d70e57a9156fd22f29e1f7d509ef525efa40adefdfcb07d93c7def6b55a145fef6792bf047390f3cda80e88b83b85463bb6edefa05d277649f28ea9d9bb600618511f0257f6f3e2fe", 0xe0, r2) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 341.671475] binder: 20797:20804 got reply transaction with bad transaction stack, transaction 1023 has target 20797:0 [ 341.682601] binder: 20797:20804 transaction failed 29201/-71, size 0-0 line 2774 [ 341.721242] binder: BINDER_SET_CONTEXT_MGR already set 03:36:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)}], 0xfffffffffffffffc, &(0x7f0000000300)=ANY=[]) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280), 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000003c0)={0x0, {{0x2, 0x4e21}}}, 0x88) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x5, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000300)=0x2) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x8) mkdirat(r1, &(0x7f0000056ff8)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x8) mount(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x23, &(0x7f0000000140)) openat(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3f, &(0x7f0000000480)=""/192, &(0x7f00000002c0)=0xc0) 03:36:25 executing program 5: r0 = socket$inet(0x2, 0x803, 0x1) getsockopt(r0, 0xff, 0x1, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6) socket$inet_tcp(0x2, 0x1, 0x0) 03:36:25 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010e00000000000000000300000b000000075f000000000000000000373a1429ab285e5679846ce19edc389000000000000000afe48e2d9d41f48796a34cfdbf2a01000000f85185c496ccb6ef9a21e0c739ea66ef1351880ec9c8a7a665512e164fe9d423f0bcb888eff3e74c7d00e098f6a90000000000000000000000b54c0000"], 0x23a}, 0x1, 0x0, 0x0, 0x40014}, 0x0) [ 341.746103] binder: 20797:20815 ioctl 40046207 0 returned -16 [ 341.771188] binder_alloc: 20797: binder_alloc_buf, no vma [ 341.777017] binder: 20797:20804 transaction failed 29189/-3, size 0-0 line 2967 03:36:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2m\nta\x00', 0x0, 0x0) 03:36:25 executing program 2: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmget(0x1, 0x3000, 0x78000200, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) mount$9p_virtio(&(0x7f0000000040)='lovmnet1&[\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x120801, &(0x7f0000000100)={'trans=virtio,', {[{@debug={'debug'}}, {@loose='loose'}, {@cache_fscache='cache=fscache'}, {@debug={'debug', 0x3d, 0xfffffffffffffff9}}, {@fscache='fscache'}]}}) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x101, 0x109000) umount2(&(0x7f0000000000)='./file0\x00', 0x2) [ 341.829598] binder: 20797:20828 got reply transaction with no transaction stack [ 341.837207] binder: 20797:20828 transaction failed 29201/-71, size 0-0 line 2759 [ 341.849049] binder: send failed reply for transaction 1023 to 20797:20804 [ 341.862343] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.868088] binder: undelivered TRANSACTION_ERROR: 29201 03:36:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:25 executing program 6: r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4623, @dev={0xac, 0x14, 0x14, 0xb}}, 0x40) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0xe8, 0xe8, 0x460, 0xe8, 0xe8, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x9, 0x7}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x200, 0x14, 0x1, 0x1}}, @common=@inet=@set4={0x50, 'set\x00', 0x4, {{0x2, 0x5, 0x11}, {0x3, 0x3}, {0xec, 0x3}, 0xf9c2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1b}}}, {{@ip={@multicast2, @rand_addr=0x750, 0x0, 0xffffffff, 'gretap0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x3, 0xa}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x18}, 0x1, 0x7, [0x17, 0x12, 0x2, 0x40, 0xc, 0x1e, 0x3d, 0x1c, 0x1b, 0x2a, 0x38, 0x21, 0xf, 0x2b, 0x1f, 0x29], 0x0, 0x1, 0x10001}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@inet=@multiport={0x50, 'multiport\x00', 0x1, {0x0, 0xb, [0x4e20, 0x4e20, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e24, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xab5, 0x7, @multicast2, 0x4e24}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x4, 0xffffff00, 0xff000000, 'team0\x00', 'ip6gretap0\x00', {}, {}, 0x2, 0x1, 0x41}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x640) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r2, 0x321, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x22cc0000000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) [ 341.896291] binder: undelivered TRANSACTION_COMPLETE [ 341.901619] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.907155] binder: undelivered TRANSACTION_ERROR: 29189 03:36:25 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20002, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0xfffffffffffff000, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000280), 0x2) [ 342.082166] binder: 20851:20856 got reply transaction with bad transaction stack, transaction 1028 has target 20851:0 [ 342.093817] binder: 20851:20856 transaction failed 29201/-71, size 0-0 line 2774 [ 342.170394] binder: BINDER_SET_CONTEXT_MGR already set [ 342.180972] binder: 20851:20866 ioctl 40046207 0 returned -16 [ 342.211357] binder: 20851:20866 got reply transaction with no transaction stack [ 342.213419] binder_alloc: 20851: binder_alloc_buf, no vma [ 342.220317] binder: 20851:20866 transaction failed 29201/-71, size 0-0 line 2759 [ 342.225838] binder: 20851:20856 transaction failed 29189/-3, size 0-0 line 2967 [ 342.248337] binder: release 20851:20856 transaction 1028 out, still active [ 342.255718] binder: undelivered TRANSACTION_COMPLETE [ 342.260911] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.266945] binder: send failed reply for transaction 1028, target dead [ 342.277275] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.282882] binder: undelivered TRANSACTION_ERROR: 29201 03:36:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000012000), 0x2c) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)="8900", r0}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x420c0, 0x0) r3 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="fa441d943d3535e4c67d579162c407d5d532cfce0914fd7b84ef1b910e3ad4233f2864f94622c388eef7b1a53c1c043e437bbf5b51fedff58960da9710a31cb465a29f0e53775532b9a44bf3f312db475562744efed2001e9fa87967dd071f6051dc075fde355cb4ee7cac8a", 0x6c, 0xfffffffffffffff8) keyctl$link(0x8, r3, r4) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x7, r2}) 03:36:26 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00j\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x80000001}, 0x8) dup3(r0, r1, 0x0) 03:36:26 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x2af) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x25, &(0x7f00000005c0)=""/239, 0xef}}], 0x2, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x480100, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r3, 0x101, 0x30}, &(0x7f0000000180)=0xc) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2me\na\x00', 0x0, 0x0) 03:36:26 executing program 2: shmget(0x1, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:26 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x4, 0xa280) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @dev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delneigh={0x38, 0x1d, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1e, 0x0, 0x0, r1, 0xc, 0x8, 0x3}, [@NDA_VNI={0x8, 0x7, 0xd3c}, @NDA_CACHEINFO={0x14, 0x3, {0x38, 0xb65, 0x7, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r3, &(0x7f0000002280)='7', 0x1) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r4) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000890) 03:36:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000080)=0x63, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0xfffffffffffffc83) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x5c) 03:36:26 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x8907, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:26 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x3000, 0x81, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) [ 342.523511] binder: 20876:20881 got reply transaction with bad transaction stack, transaction 1033 has target 20876:0 [ 342.534640] binder: 20876:20881 transaction failed 29201/-71, size 0-0 line 2774 03:36:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffffffffffffff7f) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000200), 0x8) 03:36:26 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30d, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x6, 0x7) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73656375726f401a99dadc9bcf6e657430776c616e315d5d70726f63212573797374656d6d696d655f74797065005763d1582ee81ce95376017988c8c3946f6be604f9c6f6326fd385cd9b090ab18a51fe164c2740a1df"]) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) 03:36:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) getsockname(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0xf5bc1d640ea0d3b) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="f2410f1b1c74460fc71a66430f3881a00a0000000f20e035004000000f22e066ba6100b00deeb805000000b9a82e00000f01d966ba4000ed663ed9f7c442c1aac6c4c1245ce4", 0x46}], 0xca8, 0x0, &(0x7f0000000240), 0x10000000000001c4) 03:36:26 executing program 7: capset(&(0x7f0000f0fffa)={0x200f1526}, &(0x7f00008e7000)={0x0, 0xfffffffffffffffd}) timerfd_create(0x8, 0x0) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2me%a\x00', 0x0, 0x0) [ 342.625995] binder: BINDER_SET_CONTEXT_MGR already set [ 342.633976] binder: 20876:20900 ioctl 40046207 0 returned -16 03:36:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="a47761da2cb13e514ffca0671c0132bc27f3dc577c51705fceca793d49b7b43257d67ad71557e88e2de0d74f28c2b7a564ee6c2d451f6ee3b948971dcde5ada431cb60e370d9c34cfe2c1b4aa5420b7d46bed7c9a627ff6dfa3466e2f2c510fdb332d5392225eab1c429edf27f0bc88cf1a5df262560ceeee89d6f4b1be0c029b86a0006e1b01b83da807e176dafa74b0565bedf79a21d9bd1b21ebe7a150f1dd2c631eb", &(0x7f0000000280)=""/36}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1d, 0x6, 0x4, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000001440), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001440)={'security\x00'}, &(0x7f00000014c0)=0x54) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000300)={0x9, 0x4, 0x1f}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000)="91", &(0x7f0000001540)="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", 0x2}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0x4, 0x2, 0x0, 0x4, 0x800, 0x6, 0xfb32, 0x0}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x8}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r1, &(0x7f00000003c0), &(0x7f0000000400)=""/4096}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f00000000c0)}, 0x20) [ 342.688255] binder_alloc: 20876: binder_alloc_buf, no vma [ 342.694326] binder: 20876:20881 transaction failed 29189/-3, size 0-0 line 2967 [ 342.697225] binder: 20876:20900 got reply transaction with no transaction stack [ 342.709433] binder: 20876:20900 transaction failed 29201/-71, size 0-0 line 2759 [ 342.717880] binder: release 20876:20881 transaction 1033 out, still active [ 342.725172] binder: undelivered TRANSACTION_COMPLETE [ 342.730353] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.735956] binder: send failed reply for transaction 1033, target dead [ 342.746319] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.751969] binder: undelivered TRANSACTION_ERROR: 29201 03:36:26 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:26 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) socket(0x0, 0x3, 0xffff) 03:36:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000006, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x3}}) 03:36:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000007001b000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 03:36:26 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x90000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800042}, 0xc, &(0x7f00000016c0)={&(0x7f0000002d00)={0x20, 0x26, 0x40000000000001, 0x0, 0x0, {0x1}, [@nested={0xc, 0x3, [@generic="c565fa75c2"]}]}, 0x20}}, 0x0) 03:36:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2a040) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0xfffffffffffffda0) connect$packet(r1, &(0x7f0000000140)={0x11, 0xf8, r2, 0x1, 0x3de, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) write$binfmt_aout(r0, &(0x7f0000000080)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x20) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x9) [ 343.004581] binder: 20929:20934 got reply transaction with bad transaction stack, transaction 1038 has target 20929:0 [ 343.015609] binder: 20929:20934 transaction failed 29201/-71, size 0-0 line 2774 [ 343.035656] binder: BINDER_SET_CONTEXT_MGR already set 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2met`\x00', 0x0, 0x0) [ 343.081172] binder: 20929:20940 ioctl 40046207 0 returned -16 [ 343.119431] binder_alloc: 20929: binder_alloc_buf, no vma 03:36:26 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) shmctl$SHM_UNLOCK(0x0, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) [ 343.125211] binder: 20929:20934 transaction failed 29189/-3, size 0-0 line 2967 03:36:26 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x800) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@local, @dev={0xac, 0x14, 0x14, 0x10}}, 0x8) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0xc31, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) accept4(r0, &(0x7f0000000280)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000500)=0x80, 0x0) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000300)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8b, 0x6}, &(0x7f0000000140)=0xffff, &(0x7f0000000180), 0x8000, 0x1000, 0x41, 0x23a, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x8}, &(0x7f00000001c0)=0x1f, &(0x7f0000000200)=0x7, 0x10001, 0x1, 0x7f, 0x1000, 0x8, 0xe71}}], 0xb0}, 0x0) 03:36:26 executing program 3: syz_emit_ethernet(0xffffffffffffff4e, &(0x7f00000000c0)={@empty, @remote, [], {@llc={0x4, {@snap={0xaa, 0x1, "c4e8", "80b3e0", 0x88bf, "a2d4524d2735cdc44235aab4953bf215d50145e553fc404c3ebe615b4f52072664f8a0bcb6fce93c0edb442bdef04dc1bb0ecdc41ee2095d2692781f9085793944bb070b518fecc40945f5f22b60fd4f594c8840bd4ceff54d59e794c05cb8f0a741bd1eabaf9a86b4f634a38a7742f1d0"}}}}}, 0x0) 03:36:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x40000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8008000) ioctl$TCGETA(r0, 0x541a, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20100, 0x0) [ 343.154674] binder: 20929:20949 got reply transaction with no transaction stack [ 343.162309] binder: 20929:20949 transaction failed 29201/-71, size 0-0 line 2759 [ 343.203842] binder: release 20929:20934 transaction 1038 out, still active [ 343.211145] binder: undelivered TRANSACTION_COMPLETE [ 343.216340] binder: undelivered TRANSACTION_ERROR: 29201 03:36:26 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x103001) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x120, {0x14, 0x3, 0x8}, 0x44, r2, r3, 0x0, 0x2, 0x32e, 0x6, 0x401, 0x800, 0x1, 0x80000000, 0x2ffd, 0x40, 0x3714, 0x3, 0xfffffffffffffffb, 0xffffffff, 0x6a}}, 0xa0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:26 executing program 7: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r1, r2+10000000}, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 03:36:26 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 343.289225] Unknown ioctl 44548 [ 343.293239] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.298887] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.337777] Unknown ioctl 44548 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2metb\x00', 0x0, 0x0) 03:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=""/83, &(0x7f00000000c0)=0x53) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x1, 0x400) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r3 = semget(0x0, 0x0, 0x0) semctl$SETVAL(r3, 0x1, 0x10, &(0x7f0000000200)=0x5) r4 = socket(0x200000000000011, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) finit_module(r2, &(0x7f0000000140)='raw\x00', 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socketpair(0x5, 0x2, 0xcc, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) read(r4, &(0x7f0000000400)=""/236, 0xec) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000540)={@multicast2, @local}, &(0x7f0000000300)=0xfffffd7e) syz_emit_ethernet(0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000009078e0000002e000000200000000"], &(0x7f0000000240)) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0)=0xb196, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000340)={0x4, 0x1, 0x1, 0x3ff, 0x3fb}, 0x2ae) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 03:36:26 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x435c689c, 0x400) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x2000, 0x1282, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 343.358859] binder: send failed reply for transaction 1038, target dead 03:36:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet(0x10, 0x3, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x8000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x43}], 0x1}, 0x0) 03:36:27 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x5, 0x1, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='/dev/snapshot\x00', &(0x7f00000000c0)='-\x00'], &(0x7f0000000180)=[&(0x7f0000000140)='selinuxvmnet1lo#^,\x00'], 0x400) [ 343.467142] binder: 20981:20987 got reply transaction with bad transaction stack, transaction 1043 has target 20981:0 [ 343.478134] binder: 20981:20987 transaction failed 29201/-71, size 0-0 line 2774 03:36:27 executing program 6: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x6, &(0x7f0000000300)=@raw=[@alu={0x7, 0x800, 0x8, 0x3, 0x8, 0xffffffffffffffff, 0xfffffffffffffff0}, @alu={0x7, 0x2, 0xd, 0x2, 0x5, 0xffffffffffffffe0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000002c0)='syzkaller\x00', 0xc6, 0x42e, &(0x7f00000004c0)=""/207}, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x42000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={[], 0x2, 0x200, 0x1000, 0x9, 0x2, r1}) 03:36:27 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7a2, 0xc440a, 0x1, 0x3}, 0x10) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="676673326d65746102", 0x0, 0x0) 03:36:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac1414aae00000020000000000000000fe736fad7372aca1bdb1deced4333da0ef84b9f08197f9cd0b29ffb734a18d4e1db68441535151eec1032c52553dd4b7335a9aabb0e704e346a3217dffb32875a64f3c0c"], 0x234) [ 343.630159] binder: BINDER_SET_CONTEXT_MGR already set [ 343.641604] binder: 20981:21007 ioctl 40046207 0 returned -16 [ 343.661424] binder_alloc: 20981: binder_alloc_buf, no vma [ 343.667216] binder: 20981:20987 transaction failed 29189/-3, size 0-0 line 2967 03:36:27 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x2000000000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000080)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) read(r0, &(0x7f0000001040)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 343.686163] binder: 20981:21012 got reply transaction with no transaction stack [ 343.693952] binder: 20981:21012 transaction failed 29201/-71, size 0-0 line 2759 [ 343.704365] binder: send failed reply for transaction 1043 to 20981:20987 [ 343.711669] binder: undelivered TRANSACTION_COMPLETE [ 343.716929] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.722447] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.729862] binder: undelivered TRANSACTION_ERROR: 29189 03:36:27 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x8a040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 343.735466] binder: undelivered TRANSACTION_ERROR: 29201 03:36:27 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) r1 = socket$inet6(0xa, 0x80000, 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xffffffff, 0x1, 0x5, 0xff}]}, 0x10) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/73) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:27 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="0f013b0f013866b8f63eefe00f23c00f21f8663502000e000f23f8c966b9b700004066b80500000066ba000000000f30f20f23cbf30f013ab810010f00d80fc758010f18cb", 0x45}], 0x0, 0x2, &(0x7f0000000080), 0x10000000000000c1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/15) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="676673326d65746104", 0x0, 0x0) [ 343.880559] binder: 21028:21030 got reply transaction with bad transaction stack, transaction 1048 has target 21028:0 [ 343.891721] binder: 21028:21030 transaction failed 29201/-71, size 0-0 line 2774 [ 343.904139] binder: BINDER_SET_CONTEXT_MGR already set [ 343.909972] binder: 21028:21031 ioctl 40046207 0 returned -16 [ 343.918477] binder_alloc: 21028: binder_alloc_buf, no vma [ 343.922159] binder: 21028:21031 got reply transaction with no transaction stack [ 343.924369] binder: 21028:21030 transaction failed 29189/-3, size 0-0 line 2967 [ 343.931761] binder: 21028:21031 transaction failed 29201/-71, size 0-0 line 2759 [ 343.948239] binder: release 21028:21030 transaction 1048 out, still active [ 343.955473] binder: undelivered TRANSACTION_COMPLETE [ 343.960822] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.966390] binder: send failed reply for transaction 1048, target dead [ 343.976670] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.982547] binder: undelivered TRANSACTION_ERROR: 29201 03:36:27 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/221) 03:36:27 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:27 executing program 5: r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000000040)="2423e6885f721ad9da48ac7ee9002526c51b000400edfc0e1c0b0020e800004f8909ffeb", 0x143) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x8, 0x1, "7043edf2a668fba9265cfea33e0542f79189f738e346b74d25f8be3c863364f812f6ec1cea9234f4bfa4b294cc285815356ca65312ea29615fc3c0d44946af40", "173b07a5989b5383749f442af6511ccee0e29164d9c0d4d8dceb32a8ef3bb51f3651a3b919a9c25ede35194eebf5c7fa85d61ea570504dcb48f84603d8cef6e8", "d9327b3a2f7d59e999054933a54d1e92b8a680ca698193b345b02a1a54141ef1", [0x9, 0x400]}) [ 344.379571] QAT: Invalid ioctl [ 344.435748] binder: 21057:21059 got reply transaction with bad transaction stack, transaction 1053 has target 21057:0 [ 344.446751] binder: 21057:21059 transaction failed 29201/-71, size 0-0 line 2774 [ 344.471325] binder: BINDER_SET_CONTEXT_MGR already set [ 344.493111] binder_alloc: 21057: binder_alloc_buf, no vma [ 344.494361] binder: 21057:21062 ioctl 40046207 0 returned -16 [ 344.498925] binder: 21057:21059 transaction failed 29189/-3, size 0-0 line 2967 [ 344.504921] binder: 21057:21066 got reply transaction with no transaction stack [ 344.520302] binder: 21057:21066 transaction failed 29201/-71, size 0-0 line 2759 [ 344.537656] binder: release 21057:21059 transaction 1053 out, still active [ 344.544966] binder: undelivered TRANSACTION_COMPLETE [ 344.550152] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.557967] binder: send failed reply for transaction 1053, target dead [ 344.565553] QAT: Invalid ioctl [ 344.573631] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.579206] binder: undelivered TRANSACTION_ERROR: 29201 03:36:28 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RSTATu(r0, &(0x7f0000000240)={0x62, 0x7d, 0x1, {{0x0, 0x4d, 0x4, 0x6, {0x2, 0x2, 0x2}, 0x12000000, 0x0, 0x4, 0x100000001, 0x1, '!', 0x18, ')^}keyring+vboxnet1user!', 0x1, '^'}, 0x0, "", r1, r2, r3}}, 0x62) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = gettid() fcntl$setown(r0, 0x8, r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x0, 0x0) readahead(r2, 0x0, 0x0) 03:36:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14}]}, 0x30}}, 0x0) 03:36:28 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0xdc0f0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:28 executing program 3: getpgid(0xffffffffffffffff) r0 = getpid() r1 = getpgid(r0) capset(&(0x7f0000000000)={0x400019980330, r1}, &(0x7f0000000040)={0x0, 0x1000, 0x0, 0x0, 0x6}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x68400) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x1008000, 0x4) mbind(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x0, &(0x7f0000000140), 0x1, 0x6) 03:36:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @multicast1}, &(0x7f0000000040)=0xc) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x5ff1, 0xffffffffffffff43, 0x0, 0x0, 0x1}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r1, 0x20201) write(r3, &(0x7f0000000140), 0x28d) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0xde4, 0x3, 0x5, 0x1f, 0x2, 0x3}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x1, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000180)) 03:36:28 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x20000000002, 0x0) listen(r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x4, &(0x7f0000000080)) [ 344.768697] gfs2: gfs2 mount does not exist 03:36:28 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x6000, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x80000001, 0x2, 0x3, {0x77359400}, 0x8, 0x7160}) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="676673326d657461f6", 0x0, 0x0) [ 344.798591] binder: 21085:21089 got reply transaction with bad transaction stack, transaction 1058 has target 21085:0 [ 344.809726] binder: 21085:21089 transaction failed 29201/-71, size 0-0 line 2774 [ 344.825262] binder: BINDER_SET_CONTEXT_MGR already set 03:36:28 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0xd8202, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002680)={0xb, 0xc, 0xfff, 0x80000000006, 0x1}, 0x2c) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000000c0)={0x6}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f0000000100)=""/19}, 0x1a1) r3 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000280)={{0x4, 0x7, 0xba09, 0xa000000000000, 'syz1\x00', 0x5}, 0x1, 0x30, 0x7fffffff, r2, 0x3, 0x5, 'syz1\x00', &(0x7f0000000240)=['\x00', '/\x00', '/md5sum\x00'], 0xb, [], [0x8, 0x5, 0x4, 0xb49a]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uinput\x00', 0x40, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) ioctl$KVM_NMI(r4, 0xae9a) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000180)="4bd68abd00b9", &(0x7f0000000040)=""/5}, 0xfffffffffffffe88) [ 344.856170] binder: 21085:21093 ioctl 40046207 0 returned -16 [ 344.891812] binder_alloc: 21085: binder_alloc_buf, no vma [ 344.897732] binder: 21085:21089 transaction failed 29189/-3, size 0-0 line 2967 03:36:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b805000000b90d0000000f01c10f01d12e0f01cfb826cb45ab0f23c80f21f8350800c0000f23f8b8010000000f01c1b9800000c00f3235002000000f30debd350000003e0f01c9b9140200000f32", 0x5c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080)={0x77359400}, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 344.947421] binder: 21085:21093 got reply transaction with no transaction stack [ 344.955149] binder: 21085:21093 transaction failed 29201/-71, size 0-0 line 2759 03:36:28 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TIOCSTI(r0, 0x5412, 0xffffffffffffffc1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 03:36:28 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x800000000000001, 0x1) bind$nfc_llcp(r0, &(0x7f00000006c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811888754a539d39c2bd6a40fa80cc00c27860525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b300", 0x2b}, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x1, 0x0, "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", 0x91, 0xc6f5, 0x7, 0x800, 0x8ed, 0x5, 0x9e}, r1}}, 0x120) listen(r0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x2710}, 0x100000267) accept$packet(r0, &(0x7f0000001540), &(0x7f0000001580)=0x14) 03:36:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x20000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000040)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f000000b780)='mslos\x00', 0x5010, &(0x7f000000b7c0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x400200100000003, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7, 0x800) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0x7a, &(0x7f00000000c0)="0d48a86d1d2cbd0eef3963a2415ab5893e3c318e9f2c1c6a8c2b34c140543a2e49a1ff8d94b8f7c3d01cd9ed940e954ae09cf267ec22e093370ed6f0c25bd47f922c992ba53b7d13431b752f4dbf406625bdef5b8654879cd42777d2e53133b6fb5412648f6b1ed0d2f2e219ba1f37cd0d83107b5c3aaf5a0dfa"}) accept(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000002c0)=0x80) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) r5 = dup2(r3, r4) recvfrom$unix(r5, &(0x7f00000003c0)=""/242, 0xf2, 0x2021, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000004c0)=0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="ba0200000000000000e99f7b05adc2f2", 0x10}], 0x1, &(0x7f0000000100)}, 0x0) [ 345.036073] binder: send failed reply for transaction 1058 to 21085:21089 [ 345.057992] binder: undelivered TRANSACTION_ERROR: 29189 [ 345.063599] binder: undelivered TRANSACTION_ERROR: 29201 03:36:28 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00010100000000000000001c0000000000000000005e00"], 0x1c}}, 0x0) [ 345.120224] binder: undelivered TRANSACTION_COMPLETE [ 345.125583] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.131111] binder: undelivered TRANSACTION_ERROR: 29189 03:36:28 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000000c0), 0x0) ioctl$VT_RELDISP(r0, 0x5605) getdents(r0, &(0x7f0000000000)=""/127, 0x7f) 03:36:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x200000002ffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9affd8}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:28 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) gettid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xd00, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000200)={0x101, 0x10, 0x1}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000180)="67660f384075800f01d166b8be0000000f23d80f21f86635400000e00f23f8a5440f20c0663502000000440f22c0670f22dd652680e7020fc71d0f01bfb3bf9a0020ae00", 0x44}], 0x1, 0x0, &(0x7f0000000200), 0x0) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x2000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[]}}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000080)=0xb0c7) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:36:28 executing program 5: time(&(0x7f0000000080)) io_setup(0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000002700)='/dev/input/mouse#\x00', 0xff, 0x40000) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000002680), &(0x7f00000026c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000002bc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="71000000d3d1b1b7baa20c0fd94ad0142d2e6bd6454a9357dda50ac4e1b348a11b75e11ae10fc9ae0cfab310d22cda00e57901f4c9fb659aa975dcd38ab8a84c54edd4f1963d7897786fddb39e8572a216f45717d69fb227a577d358dbeecc066c82aef9f8e55607820a5dda7b4ff2766594ff00000000000000e10501a9fbd23491ab0a48861284d8cab5845ecd86dd5112e6834a01b60fb57e9efed3e8a25d7f7c5c90ef"], &(0x7f0000002b00)=0x79) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002b40)={r2, 0x2, 0x5821677a}, &(0x7f0000002b80)=0x8) recvmmsg(r0, &(0x7f0000008740)=[{{&(0x7f00000083c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0)=""/109, 0x6d}}], 0x2, 0x0, &(0x7f0000000040)={0x77359400}) sendmsg$xdp(r0, &(0x7f0000002640)={&(0x7f0000000100)={0x2c, 0x2, r3, 0x13}, 0x10, &(0x7f0000002580)=[{&(0x7f00000001c0)="10503b4dcf0e0b05591a14f08eccd5cf6a37fd094643b8e07f49720f997ce5424919e917cec6ae5cd412e63736a6729a62b4bd2624b8f93035796d437dd5ede402244a826d0113bb65ca8ae72052450dd0775728d5b83dbb76ea7e575a4072ff1017c934a82b5f467183f2042dce0508ccb0b4da007618bb5eaa8f0645681b5308028d35584ce23deb78af930e13549be7fda667e4f58feb928c4b4b2d14fbbadc1efdd118ca66b883c6be2570dc2757ab9cd28c9148ecfe6fc235a263ff55ae3adb16178240cbdc59a3ecdd5c2bd7678e3e6becdb09afff5e260189cf58f328c3644d43ccc6f8baea23a157abde9df4bdb74a71b9b586528cdd01335e7266dd0ac9c95b8baccbadb9671930460515c9dc299f2643960890dc78c08541db981dc7b13ad6d83d2b5904e423a58bd3ac629b32b2ef61026cfb7b67cb8db7000ff42d15f96e503e0c0d4f262292ba98c10f5b630ec084ded1404d522c10ed36449048c692f8922ebc43a27603a28ccb4af02e790d93926db7040b2ebcf3d442faf5b4b5f5d41cbf35ca3f0ee12604f214cd83af95459c95c97b9addc3d544a4b573896920cb0204fd746f54f51150bf51faf7d40e9d366a991ce3c1810f93009a200b03d94b2e0ac4ac98a522cc7231f1e677c95adc8a8af1d960b0720c05e47657a3556b9b67fc06fe4a3eb76e8749480a9b350cd4bc93a3577d666e21805f4b348452b70a677f4102cfe01b07cad1260e8e2839123a4b1cdb65a204a1541ac72bdcb4d03c2fefe1446903e855b79455b5bbcb7178ec7beb4755c3f4adbf0cf11f8316994aa8d3abb898d505681ab81ea7149865f11ac8a6d06d65c46649a43fd15f97b1ddce8fe32b5b6242badcc306aec846d0d93b4a0e3c8c14869c1e720e94091790dc5a40c98c16f265f29a47dc5da972db198c15f06a44ad525ffcf1d617f1ce320346af512f4525c4e32889b186ebe191f58340bf745feeab4f52c3be6112c009b7c895b00ba0d5c5aedd980966d0c0dedac147c6225728ac68348e84f9e904feb2286dc7dd520f43801f59805d544abd5091f7e7998a9689e483820425289806249e224c261d3b8cdffda8b6f6d057de4853547db1c404827e06207f60e9a440bc530628757e527f60cc2c82566948a1ac45deee406a6b8cb8adabbd191a080f3e3ee535d56af61a9f8b5d01afd7cd8853ff2e253895990964da81952871ddf3f09ee576603886950b6b5e6d1cfbffbdf473d720c0a31be7839674e0ce5f031ca81667a41321b0b91270cad4aac6bb07f1dec63c44f3e1801cf2aa3b0a72a3e02c5899223f91673f0cf7bd01327aff8eb6e118f09f817235b21a6c1afa4d7eda24233f8362ea6291381b9db3ecdb1f549b24809abb395dc99af1d88ebd1bc695fa99f6120530384eb05a495b08a97f4a9b48f2e861ba15e58825d5cd09c77415bf548f6b57ed7fa7daa3d47cfbf936353d8e373f2fe79e4a1fe098c8c2faaaa20d5217001657e7d1f5b0f806f6294481ca4645e08825f15e8445438326abd5e308a84cdc387e22da1402f6b5584e26dccbd2e13cb33bd9179affd79185028ed8efd24131f518b0a1d435008f2351aaf02e3bbac0dc023c27ea2532894ad0cc3bede4551b8ac38c709e18ec2a9c99d17b092302aef9d7165e791e62ea57c16005afc58a7fd41af9499bd411514fa2d895faf5ff698fa455cd88b1378f61c92cdd5d46c5434b01c42c1275211be2401d57166f327c107671ffb0aa2a31bc046cfbaedced0cb0ae9e4f63e1ce35382ff7e0220f896157b282974ba231604cd7db82904b99212e877ff90d11d75bb8eb586998ff1404ca4698cffa9e62368ebc03edfdd33e42e004ad4d28b8e9fe9883d9846355183a573e034f068334f2effb28f6aa370d22329869727ddec5a0d870692675ff90e566ce08075e96071bddf0554b7bee1e0859eec8b81543b6ce61dde0d62c434ff2f6f99b2fa8f4b56079c891664334632f3f2e829df416a789f392717881cbd29586f550451e4ad60545a4a810baee59d719f0f1b5e9d61f11c22549b304deebc2156e235e241c693ac22d96c833df6c60a2163a6038e61e538b60872150346685e766e847c38656ef7be55dc66e7d13469dc030836f7a7fd4f8770b5eda75183100912ebb410e1cd8a8dc102438bb31c8f2bef18f8f08a464db4c669164a93b38a2a0bc32147a2bd1a936c57c8dd88376ef2dd7d1ea98524e12ae119e117e6dfa7c3dce473f0146a61a5f18d41d5a681e6a8f8db4aa50df3d9b6e45c43f9c206fdd487df19753accf674d86287b056be8d2e676e3ab33120315132593d9b22e4df0f838e899ad0b79c90c7fee2943436549ddcb91dfa1fbac8abd495cad8814ec54308d06e3379acd35c9767a20cda80b14a8d0654714ff2f546c8174e29c2a0c13f2088cb5c168a51450fe3886450fe0dbc610f89325ab8d8b6d1ec503eda04962de3d24866b706924579b7405a650f14973d78760afb1f2894c6166e9702b0d1db31eaaa2d165d695597dbb2364f5ed4cf9dbc98f525f6c7b80710b1a3825c16d488b7a40c698052e0829c3d829ed863a66cdcea735950e12c68edcebbf5593ed602c877b15ca0e527eaabf7aff8a1ea91a8c32280d367fd6123f3be3a7bbbfd1ed27d857dcb12b1577f1d60fd9bd4ff65c418b026eaf64bbc0b71f289009362e6bb671810d69a1bf1801236618f50e529d4661a082aca3fca290e344427e9ba44d2dd2141493eba7b3b4f494bbab4684bea30be5a8d8723e9ef0ec7ab1b20fda1db02efb4e30dc20a9b7fc6300a484fadbab1dcf6b90ca82f5272a7cd63805da76f6b8ed488625561dd461f9671ddf77e47c323b2ef563fb96cf1c40d83cd7e69ab8f6d137b5f697325d1b54424744fd0f690881c1e327fcdf0d82990e270a5b705700e6f98c22991248a4ea8698c7d7a7a9c4615f192365b6297af73fafd4ed22ae9055fd2511f3708cfc59ff05f3541ee39c02fae9c2865edc843593318bb0d7d6ce4045e6df5be73678f61570ae7dc37cb6e1fb408c787b0955804a1260efb38e56062e40589b803d44f8ac06f863063ca109d35b7b4fd1b613a1d413714b20e58662e729c6031577ae3dac60e82b3101d822f3522f5aed77f390b42a888f02af3a5e917840c0c4c66bf1e59984f651005b610e5145f0463c91af914e947d33c344cadae459d602e3516dc03b82e3a607d559e8f410e2a07981ea0e53721005eb6069d6fb2a2d7210f0e9e8e45180b7ff000ad166096318a73fb77f4f5b37059c1fcae967f778fa1893c8a9ee02d16c68eb259287188fb8d74c928bcffba615cc2f30d1c83e7a012b2e204830f848c5aa0f4007f0af5d55d6766d850c23a773c8856d68d17f1c0419ffe82a807d848ca166219fb16160ccf251b01bd6def6083dbc7d79006f95a13ee17f6dd14cc6bd82368c9c3c531f2a5c29034d3ff458908eb8b6d3e2aef9f99131122cf2bc8cd8530e93996600d842505a55f86b31d6520959b4d31f67a64bc387cc4e0321e5d18eb1a90df6330077e4effbfb1cc7f0acc38268cbb0115ef26aa3aaa49fa032c39464c6767ee1fc66e52793eb5bdfcf11781ceaedd49cc497940d3c9655d730b310d10942493ac81d5e8ba19cf8be6e30e5fb4e3bad87b31a150a405c034936e2236c8a5ab3e9eda024946900afc979c7245634acb7de35641ad0b4af6b47e02347085d2535c4d44a1e6b075d1f179300bb7c46f6fe87e1bb702bb9b4ca0a32117b4a47518fcd5e2986b30e1035dceddc8c8860aec24b73a971ddd749e3ae86a0cd9e1c969c6625be1b36202e41be6f744dd734b1ad30c3ab27b628094094133c2c91b3a096690dd67ec6c543b8a29362a693537a78c1e70fba4770c6a7e8f45209ea54f56097e2afa043d1deaef3d5732794e0ea6592b43ebbdc9b02f37fce2c4dcc55c447ffe215050b77bd16ebc11749f64bf03d82f6731422d3f3d48711d1e99a103d1c2e893c8a25c2671ee4dadfee6e63818209ff8f8950703a20ee106f8b4609a0809ecdefacc49b8ef0807dfa27ee476fb38aebd0f19255a583926f819d7e3e29bc9a7eaee505de07217b4ccc83b1de594f6236e43a0854ebae9fce9301c64dadff619f89fb28ab08100110ce304533ae4908c876bd4e5cfc12064956c8b21ae7c651034bf50468a64489c352d0fd70e4d4176850ed3c7e50278a8319848edf24600b859a22943b352de707dcc29af9841fb26d27d567f146c13d2e35c9c73305dcd98ed9606b6347a49ef1320f86645564f53821901fb1a22b75b057aab3311c3d84bd1167bf29dbf74c0f5ce503a0387240f9734618386a79a3c31426dd90b1f016c447ce6a1b3f25abda1b2a9e6e2fa5c2794dc35773c58903b56891987b5ab58380e37e844b8c02109ad3f1f311b9b1de90379256693b2f2344115eed65c551b0f0d1f8847eb18552a3e79d876b13c5813113bc229b34df512f5c9d8cf3279417809570dca44caa1ccfb38e4f01fa34b27bb5933b84ae5247e4343abba0e79836a8ec0b274f0bc68bcd6dacfc5ed2c6fcb51e1baab3d3ee24ac0a5a2d23a5a9a96186bbf4999d67ba8b3f95ca84ddac42c6f6c6db49053f5ff983260aeb89527edcf3dae3772623ae19bbbd2975f551508200b638b446f52a3ebfd02c1d00bb89b35457b04ef2619aeafe2fde65de4d0030e4c78fc96a6f0a893ced98a437a18017773a0c5cf00c0d0669a77a580973d7267f8e3e30c22719fde3057f93cec787711a91943622b85f77dcfd7182e1ec69c13cbf1a873f0cd03de8a047b758b993f396430a137f26f03a8e08a9dda248472305f3cc78533897248c82aec587414fbdbc397e8aba18b9311eca000d753093a709e5e117c53aba8b5af998ef829801a228792fca742fcf410b22822b53718407997f60ccd29e350c6aeceb251b6c45aa9b23fab1d54f3af12fbb39877308e08e9c8f10df473c354d8c05e278843e4ccbc21e71e35907502e29c859b835911af5994137e0892d6c04e16dd8113c46559b77041fdff9d0b97d0ebd4011f21724d9a191d500757ce5b46e8c0e03c5ead29b527803c5f65277e64cd6e61dc3ea0ea7edde2b521d2e3b42cf31da8034e202b087eaf186d560194c0d6a69d4f8c400a8013a4237619769b622902e8ec066aa7b28fbe9f67e8b1c2d22ec417f2a99b3073aaf7c748c23ea04616c995bceb90c8ff1700e0b9dfe12b24f2bf0de6a49bb9d8014ac4313bdcd22c3b7465bc3f8b176258e306e19d6d58e7d4e0b51a1612939357ee26af99774e1a0f987487c036255ff1efe115224421daaf257feeb9c9e5867bebe2e91277f968ebcaf601b8b8875fe79345c89640ce8dcdc06ddad37ba015efda22036a0eb8469e46941506c3a0700c19043a715fad9b1deccaad738fc73b622b8f2cd1e7cc3d73ce0e6ba9b79aa95952b7368300824493911ecaf07b0c9612ec20905564bfa0c56c2706f42c60282d0555275cc47f600f8a6cfd184640267bf9f377cff9ed81c3a886a9081785500b2883598fc8167e600f50cdcc1968e42b8c553658915581abb907821aab02a41460b6d81992953acdbc4a2cea5df8c1d30a1d033b7fcf6b8cebebfa5f2bbd52e154acffc7235aa1f353a27482cb9ed364016707aea13bd2ec405640b3554bf7c3f926291ead203ea4ad72a90c4276748cc96514ae949cf9f59b8de3f3b5a5b91e54878474b599e618fc92591af32925bdf90f99744f066e274cb8976aed9e27a8ec8174f05e2f7a7eb0fbcb2d573d4", 0x1000}, {&(0x7f00000011c0)="8e63e1dc2265c59c04e7171ce29896b1d38e42070fac7f10c353ee9a29163aa57473b09d7e94292cb1952afbd273e7d2121b10558574c3660ef70189376044b9b1df7fe1d12964d809e316271fdc07869e9807357cac955d4b7a82b45b19e6d5b3", 0x61}, {&(0x7f0000001240)="7db0eff4f504bbf6af5ce907457dbba6dc70612f01d853622f529d096d99299bbcdcf985875bf984d05666760eb676314c030a6122a2b684a59abd10714cac666629573b4dc3fa8df2a7e2e91f3695fb971736a96f4430febe3c8f6ef8b41f857bee347083a5a5e49c5318d857d733505c9b98fa90372228fad8da6f3e295b36146d1c55a8ea8d1e422658208c4daacf6dd26eb4eec66deaa0e80e615df9c1aec4e782f02f338cc0152a73f28573e08824f9", 0xb2}, {&(0x7f0000001300)="1d9aef84b5754a5655e065b5c29e9e682f71dfde760f27906e02fed7bc865a70300a5ecce4fc317089f248bbfcdaee592ca85f643b913821d5fc58f57abb82073083e11b139bd6fec0796bb684f954e976440515fc5ff1", 0x57}, {&(0x7f0000001380)="481b2ebaa2fa2805e1b3c2a778be18c94f", 0x11}, {&(0x7f00000013c0)="f1d77db7f17147962932d46e5fbf0ef6e2", 0x11}, {&(0x7f0000001400)="f12c562d7de8d3be2616463276cf252044e98c3338fcfb9a6f99a7e5a8e7cd1058305aa0bb2480ea9aae739c1e11f031f239e865dbafe97ed67a6535b9afcf9b0f3525744bc428704979280bea4c535367b84fdd14e3d007efba0d26ce6cbf8c5190cf33b9d7305c9836fcc894e32a0032ba53d1a23f5f644ef3bf8aac81c7d1ccc859c350e77d734088d7bdcad1f398260ffcd92ade10072f9ecd27b00e60002d3254038f10096a0720679a42c82369ce3cb9800da6c777bf39a0424e9df481da69e85a34d70f1899af38de3517df811f0c189afdfeab3188d24ebc73", 0xdd}, {&(0x7f0000001500)="7865adc9329f3f1399972384f8b9ac4ecb27da9b0baf951a5f902ae45fd897669ae3c6e873d1cd8a768e203f3ff0c70c18b6fb0f6d559dc4db44c5ae4e68f37cbb7e8f630fe79416e17022975a6259d7c2055ceb514f180e8730186919798e721f33ca8d4b942d4df2eb6fa300f295a854226b2ea945a12a9f7f00ef5957ee57b4750a6fd383afa0e0783c66748cf8c4fada158a5d2561ba197ccfcbf75fab1ad47076eb5190dfcece5c021345059ab53854726d3e60a30055ca17bc271a656aed285e3224d403b8804558fa043c1e2ab6a818bf7246b5692af654ca37071436d85895a9a420f5b428d4b8fb4f063520e4b00ef5a9705f4b029e0d90c0022fe4379eb9fb9c50734802876837047e126499a7d78ca8a9af67a3089a225cb54007bffc313868f0abc78be98373a05cb386bfc68b254cae6206ab4b8b7934b9ab4a144939dd2a81f073c29bbe3165d361476531c294790b4686c4f2b93ec614045300c8e710aef9c8d626517f9b7b0b500b2910a4122375c702bb52ab7e9ae3a6729a807999ab91195f51b5c63365297d0e9b9d023da8d07e4a107a20210f5c5a081c2b34b54681a54c54c7f06bea0850dc0c0e59dbc600795da449c237ccf5d536c56d7ae7b802891349cef322a7746db9d1a6783b4608a50aa83a537ec970fbaa7b46774b794a76110160f21c5e1b32156992ab664ce38059021c9443a7d1ce06edad0ad24690edd28b8a75ca5a91f6c80b479a93267b617a77a05490e712de1292ccfcda1bb9b21a6ec36f356524d8aad6fbb6b2460eb82287c58ac6c13e50356029afe65a24be7ba05b836aae4b982c692062d4db282c22fc94ea7ba42b04daad12fbf434b81ee01ee877b1f77363d07ada63f3bf441427675035df741271eaefeff918e3f1ff3d90dc91eb6e61f0bf29968fe6ee4956f4a41664159b58a6388c2a0111243ce65fba32117a8468331c0e791786055f902d7c6d310ae5797b6f10d79ba470f44d6c4914edc22a619e2958319b232c5a2d28934abd4d7a95cb222fdc154cbff6a98683e5a1c70ac134f68591d1d571db04908ed02cea7c0a350686e07efdf62bb14fb60530da494286065b601a4833e991429da3479ce4c0fce3f16a79bf672933e2c0cf9b59cd053d95baaa8b6e20d122dc11c28ea73c7a5bb0026ba45ad23bc2e1f73fc0d9ccf65f35e56f1e5857b970c019adeb446ddd30d0ca231cfe254e702fa965cceef9b68f9e82849fa39ee41fc1e8b80bd367387a22cdab13cce46b0b9f11ebc4d63b279830b17b1546c746f7ab881c55c5a419ac04086273b967debd19906347c9e8fca00c6a4ebf7b1d6bc3ab527471d78e89bb34e4f589c57fcd35b67efc08ad153584a480b4e9bf1a37f609bef59287a6d0d439aad1ca47b545ba7ede597d2376f8a366c03119bd1c3d40ba00a306b02464ca5121ba461857162759577e3c17f3cce64215dfbc44fd6f895699783cfcd01e784c73d547d34bbcfddb1090c6ee10517acd8969a5c0c80d33dc1c134e64c9c8b0b9db32f605b897e3243d04dfedc26f8fc443aed1f03d5395c5fe8b8367aa9bfd4ce2f04264e9448cfc4b8e7746d663a63c1765b6427a86c8e7cffef6b401d8c8216a7e5fbb5d50fe8d8558ed70f83fe2511e845d59da9c8e92649bb185158c5cf95a6062706b85c297060c8604113d4515256a374fe29401b9ae7bdeecf4edd64d1f6543f4333b4be194ca25684bf25a360e48e9490993f49d07b4dc7cbf8620749479cdcdb0197587e650e001e9968ffdcf39b8b9900c3a5e95426e187b1d302f91c1433efa039dfbed111d8b195881d8ca38404b77e744a4c6898921906f3cf719b0842c384bdcd36b863b665e6e48d07d0ef9732e78e59025cedd4083dc73a9a99fb664b67193b6c1bedb5925febf364aad0767e0bd2771f56aef5cf7f87616a4c1abc81cefa34bca2e66cca931a258acfd39754e7a86299f932b5c07d24697a691241e6cad6888b76a57c3ba3f6d83ccf6ec7f8c802d105014ff2aea53efe5bcc3de30949d7d85d225757e7c74c1426979b8b92adc46db45f251f3e2410d103841695c9d52c3aa1e7a6ad8a2848b58d2bf09e1d853fd339a9f9d8ca1c51527e22114cdb414320688cb8b17a458b7d1efaac09414a8c4fea33c16851a959b986043f320984d25cbc2dd0b57151c299b7e513c60a9beaeef6f5ee9ac14d58c66ce54febf18ac9dc3a1ce369e571513bcac03709e642f549ac8fd0ee13732a7f2a14856aeb9e8f7c3e9a2f15439264333dbc35dd2a2f72c935ac86fffbeef4fe0f091c55f7e08167ef03182e328de3a8bf66005a938a5463cc4072a36ea217e162df3d184324b5597ba66813cad819fd0004b52ec2ba08a859c06ce218c6bf949b5c3fca51670a46b143001c2997a1833948eb31c842a637b11558c201979c0a333abdea1fdb6d8926abc392756887e2575ef84e3e3663a93a8152e6bb06ba6f6d6317a6732d7e1828c871096cc831633ab3f7bee6943a797a13950a0a301521131521a2b1ad63fca0b294027c260abc0029892d6b59907d346a1c90044ec6a4800c246709bf59f42ba95c7349e6e0b9baeb89e07520d4aa5787d4bf625778aa83579d020b8dab63aeba9fef778c630772c5a02e6bbf3478c0658bb6d716a56d5f51e0158d53ff219a5775388583fc81a1930dc3c46c3addd087953125264d5543c7b8d3ef41478b1c3006e88a532f2fc242767fffd17db7a6597a60418212b496fb6b0095ebe574c43785ff41f4ba143f7bd2bdc623de19ad5038cf8ba0f91bcf43f57cf0c27762ea978213652bcd16da06c202c1c84e07825961940f99d1f24b7990df1914ceef2fe00d8e8ab1eef72edc3b107e760e732968bb1faeabb69d3f68a70108ce7c879bd16b8cd146543bb8aea0b440760b285bd5c1d2369d070e4026cf430297843264eb0796c85cf443c0709a31fc4992839e2582268fab496edbdc385531c8513d2700395f04edd497a52f50de4c97cd85a76012e198c135f91ba1f7a9a33e0bf0a6912afd0899a05d526327fab16842f62778e23685de4a5976e17eff5e9e4874eac3e18aa2866208157ac19f26d48af41afd1e2a5bb4c2593457bd621e8f4dbc51d56ece02b5c55060ccd8953008a51b114b3781de46e2c91d5bc1caae579bcd2cb58e6b5d7f59b871dfae98f7552643b35d4ae0c58d0d2ff6172f15277711b9adea7d2c7c2996d2070098639911cd28bf8cd216454a468a536e969c7778ccbfc62984e4b7502effd62aaa7f53aef62dace4936d246d5087766688c09fbe0f31c41f68373ace7f6e6d38750d896630cec3b7c1c2ad82bc61b6e8270d6f6a51cb4c1f2eeeeec11e8422d38b1ef96c31db50cc1a339f1a1ee7bcc6d2127ba0847e383b728f17938d461294df62f333ab405ab3312f3bcf3e305976ca31ba0b6c7e9f73ec3c2d6697f544f0d1f42023389ffccf7343e22b20e56fa27cdd1cc24839aebaec85a6cecc351ee476191143081e11dd8c35d4a82314b250e255f92f3a3f628673bd05dac8845c1b1f8636d9256c44b1f6a381aac49d702aa38dda3ee03273ba45c533f4accf726c972ee6a53ec813285abebe8ede2ddd72112e5f8e968160357c140b0f5e85f6261c6cb055926a1ffef91085b06bfe33db97ab31cb01d0c52f080888e1843a9e38794a88ddb5818b25a377c10cc0bae7fe178e22485560aec1365c849c79db3df1f8a5836ded8b34073edd8aa55e4dfcc9e483ed65e3cdacbc48eb89e355c7966d7b229886c8e043fa0db92c2ea1cd7ce1e7d1fa8776002b6249f98c30130eb0f3b8c67b4c9efa94119a7bd766d563c17d4603bc71606fa0262e7831b6c2c614c080b964ea47efa9b1ac7556ecb7d7e7168e19571d33aeaf4cda94df84f58577da4b93ce3c2551b854bcf99b50244f75cb1a6e248f4e1020364c9929e3b2ea0831c9da6265330b2f81d4a18a064de1272fcea5ae3451809d71e65d7473ef4efab6074136f4a9a7cc97c75a5afdc86bd1c7f0bab45c12bf2f9e6a468fdf68edcde2648f00580ec53e000fdd8596018a41cd5da0c1aa97636bf8521f9157eec7cb7061b0afef7104ed70e77b96db16cd49c48e702e401da3a4b8ebe62da9952468a7393832d38380b240296d58ea7acc3e2f2e0ad097b89cffbc214877ab9d0ef5e1ff61383b4639c7ed34e77c3891d9f6e8011820dd07db19b300893ce5faf8475c9c3f6ffe4cb12bca69bd9240ae7f8cf6d2fc69f958802b1c40b418d432da7cb679715d025d9e51d07c06541dc55f0c420c059f2abab4d5a480ea602345793047bf3a915d2f4aefa37a2ec45ad9229c750ee69caa9ed1b61c078b70563b5cc59d38eff8a642736e29b7caf5a788a19fed0c007071340c3e4044cd2523821486f14e3793e9b867711641fbf1546ce90871604ecde09a727f73d543c2226573f6d8ec4445f072aa8bc6b700ae6f85cc49dcaeb13f3660d14a6994f27af5511cf356314ec5b0aa3da2adc971a69997d90000426b0344a448bfba48b24edd151904a779b6e8961943c2a323f2553866750d1d7011b98d9bf50afe49b973f613dfcbff8d84761e584be248808b2e8b33e7b22bd0799553cbf97d64a5f3a0e81844dd08196b7332d9ac8a38c57ce2ba91bfcc54986408c31278f0abd9f846772c7642b50887422e254ed670106841359716e6764b7bbbf1ccdf710e2bbbe58710fde31d3e73c0e49a489352815e78382e227343b69ffd3c44f1b038be874feb2d008beb70da4c95d2ec60fb39e01d596307efa15f72c6d209e89dcdbf6befa43e751ad24bd2a3f0ebca0454156f4a10038ca3b58e8a78a781102c72143b849dae7072511de5b5d8de3d6901c3fff0435132d4e400f59ae87fd9cc1cf459410f7765bb648f52c30209d258bf97ce58505756d652483b617009854c24c2b54a440021f56ece1ff12a928975f279e0849ab35da45a6fabd493c20cf4de3ebe34c3bfac8efb54134d28d47e39a6d1fede1bb446640b02fa032bdfd958bb814d187fb997a1bbc5c09f5f0cda6635834620e841135e53dd39545a093ef1d6f94d5e4c3dde6382b5bb69f8a2e899dacbbe0c8406ade4c609a86d2974b554d4169a32bb12aae8ecc503925acaa6d22c4f12a5053a395297e11ff4f75aa890f1d5aa0362d2a34faedbe0dfe61cf98c17fc73c6b8c6daea29b8e88d42d291d60bdf85b5857cc929ec957730cb2aef49d43d19e30d3f4e5d8e518e56e9e50c7dbddef9137267e824232b94df534fe0e00e08e5adbde88fd72bb35d335d8479562e0359e0bdd44e3fb2969e3be41a855c03257124c00059fea42ffd46620becf30ae4e4d5e5a7a6a3d599356c8ec174aace4fd547dc9cbfacd1665757f1619438725920dbe324b8edddc1fb902c7f927c8cadd6857ef4c6a511cd7f5e3b4417c8afef074c34b80d12ebe84357bc95eb87825227c88223fffa43fc5b0f35e2205d4fde6ca614d8e3a5fe318cdb36c5fefe2a40f954c46adeff7150cdd6b4c3cb42ac148589c18b8cee6b1f333e2a362128a15a26ef9a89b9299b2a87e29cb58e07b7c3d20ad7a6b9e8289d89dd178b65f4676a57bde3a7e00cd07c92a385bcdb17f86b7d05101dbb39de589e2429d645f7b79dfc42867a57898395e276e94bddbe9f79e899ec23035222fe675e2f2788cd7b8d4d69e44a7803be4d1f35bcf436f7703eba1ec34082ab0c89d5c6249f64feb6fad53837187c9ab4cb341dec589d81af1790e4cf3248243c34296951d3ca43c040a171334a0b1", 0x1000}, {&(0x7f0000002500)="9336b99b1bbb74f41f81a9590ea257321cea9e0b4ba0a329063a1ff926c677297bce729c99ac9b63096fb883eb2eb5e574973e3a42bc73f3eac886a5b3ceeb8f834b8ab002eaa7f6769791e6c0c9ab541e01ce38f39f0d5f2456dcae4e9d0bb947", 0x61}], 0x9, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000002a40)={0x5, &(0x7f0000002740)=[{}, {}, {}, {}, {}]}) [ 345.320755] binder: 21140:21143 got reply transaction with bad transaction stack, transaction 1063 has target 21140:0 [ 345.332009] binder: 21140:21143 transaction failed 29201/-71, size 0-0 line 2774 [ 345.341981] gfs2: gfs2 mount does not exist [ 345.365685] gfs2: gfs2 mount does not exist 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 345.382795] binder: BINDER_SET_CONTEXT_MGR already set [ 345.390395] binder: 21140:21147 ioctl 40046207 0 returned -16 [ 345.424468] binder_alloc: 21140: binder_alloc_buf, no vma [ 345.430236] binder: 21140:21143 transaction failed 29189/-3, size 0-0 line 2967 [ 345.453140] binder: 21140:21147 got reply transaction with no transaction stack [ 345.460780] binder: 21140:21147 transaction failed 29201/-71, size 0-0 line 2759 [ 345.473161] binder: undelivered TRANSACTION_ERROR: 29189 [ 345.478913] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.509986] binder: send failed reply for transaction 1063 to 21140:21143 03:36:29 executing program 6: r0 = socket(0x3, 0x803, 0x80000001) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000600)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6) sendto$inet(r0, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) [ 345.532352] binder: undelivered TRANSACTION_COMPLETE [ 345.537684] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.543331] binder: undelivered TRANSACTION_ERROR: 29189 03:36:29 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 345.637485] gfs2: gfs2 mount does not exist 03:36:29 executing program 3: mlockall(0x2) socket$inet6(0xa, 0x6, 0x635f) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 03:36:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000680)=""/246) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x8000000400001, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000200)=""/246) r3 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000004c0)="a5d85f615f9cdfca70ae1353f694a08c19871ae397e9e7d01dde3b886307bd3d471e637473197eb4a71e48d64cd7a3a33540dcc9e42eb3a453d615a5fb6f7ace36fd5eb63d103981cf73a576eb4c61a22abb58dec77dd9aadf579e31f9dd39a9106d5482a7025c0c056abf79fa51b939c18e029572026332b418733ce7b355c666ac7103ded0d390616622917be9bee0e449b716476bb1126eb56147f688f1dcc57ede90867ac2b55a6b8677ad30e122e6d68ab6abe59c84b080f6e2d4bb6ce7736f8eae1cdbd3d8a0ebe2bffbcbe65f744b7dc13addcf1aa9845e95d96cf4443a130122cfc489812e7002106cf5365f04388fb86311", 0xf6, 0xfffffffffffffffc) r4 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000640)='/dev/ppp\x00', 0xfffffffffffffff8) keyctl$reject(0x13, r3, 0x7, 0x9, r4) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)="5550ef4cf267ac6ca34d14bd8f3973bc43676b18f31d5094b8c798abf1aa5f138b4c0c9f294c1e7a8d035a8d093d32b8bd815731eb171e0a14c623ee796ae86a8a575949415a9cd8537fac10a121bbd167dfda6df3a18ad8aac082b369cb01acc5eafc45f9d71c630fb0d3", 0x6b}], 0x1, 0x0, 0x0, 0x4}, 0x10) dup2(r2, r0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) clock_getres(0x7, &(0x7f0000000040)) read$eventfd(r0, &(0x7f00000001c0), 0x8) 03:36:29 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x9, 0x4, 0x61, &(0x7f0000000000)="6be24bc98515d4ae699eae8d931fa007d88788a82ca381e658b826818f68c70ea5262acb9208d4ea34b7d9c9100cd329b9659fe93350b8147d0d447c9b7dce93b1bb5ee249f905ecadd94d8341b9e024c8af42e8db4724a29f870dc1db9cc31426"}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000005}) 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 345.770277] binder: 21173:21178 got reply transaction with bad transaction stack, transaction 1068 has target 21173:0 [ 345.781383] binder: 21173:21178 transaction failed 29201/-71, size 0-0 line 2774 [ 345.870765] binder: BINDER_SET_CONTEXT_MGR already set 03:36:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x8000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x1, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 345.921572] binder_alloc: 21173: binder_alloc_buf, no vma [ 345.923125] gfs2: gfs2 mount does not exist [ 345.927421] binder: 21173:21178 transaction failed 29189/-3, size 0-0 line 2967 [ 345.949268] binder: 21173:21194 ioctl 40046207 0 returned -16 03:36:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)=0x1) read(r1, &(0x7f0000ec6000)=""/50, 0xfd51) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x3, 0x3, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 03:36:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$chown(0x4, 0x0, r1, r2) 03:36:29 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8915, &(0x7f0000000080)="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") syz_read_part_table(0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="574556820400000000000000000000000000000000000000000000000000000000000000000000000002000020000000040000001000000080000000000800000000000000000000100e0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057455682", 0x88, 0x40}]) 03:36:29 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000002600), 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB="00f0b7e60c56c3f89fa98cb47cae993d8f3914ec20bc5ea7c0feedd6a8ace2c7e3042bb0a69d6816b860c0494d743613fd6a87fed2ab0db4cee1d17b991d25f76e4db39170adb656f596d2d47850fd2a11950cdc6d1015609eb29bfb85dc61011d32601e6732e8e5cbc095eed700"]) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x24841, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) rt_sigsuspend(&(0x7f0000000100)={0x3c}, 0x8) 03:36:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x0, 0x2, 0x100000001}) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(authenc(michael_mic-generic,chacha20-generic)))\x00'}, 0x58) [ 345.966460] binder: 21173:21199 got reply transaction with no transaction stack [ 345.974213] binder: 21173:21199 transaction failed 29201/-71, size 0-0 line 2759 [ 346.001686] binder: release 21173:21178 transaction 1068 out, still active [ 346.009230] binder: undelivered TRANSACTION_COMPLETE [ 346.014422] binder: undelivered TRANSACTION_ERROR: 29201 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="676673326d65746105", 0x0, 0x0) 03:36:29 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c8523bf012c") ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000000240)=""/174) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/72, 0x48}], 0x1, &(0x7f0000000140)=""/188, 0xbc, 0x2}, 0xfff}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000540)=""/151, 0x97}], 0x4, &(0x7f0000000640)=""/160, 0xa0, 0x4}, 0x401}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=""/36, 0x24}, {&(0x7f0000000740)=""/211, 0xd3}], 0x2, 0x0, 0x0, 0x7ff}, 0x8001}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/14, 0xe}, {&(0x7f00000009c0)=""/103, 0x67}], 0x4, &(0x7f0000000a80)=""/64, 0x40, 0xfffffffeffffffff}, 0x8ec4}, {{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)}], 0x1, &(0x7f0000003000)=""/4096, 0x1000, 0x7fff}, 0x8}, {{&(0x7f0000000bc0)=@generic, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/217, 0xd9}, {&(0x7f0000000d40)=""/116, 0x74}], 0x2, &(0x7f0000000e00)=""/232, 0xe8, 0x8}, 0xfff}], 0x6, 0x40000000, &(0x7f0000000f40)={r1, r2+10000000}) [ 346.023589] binder: send failed reply for transaction 1068, target dead [ 346.038159] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.044348] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.200153] loop7: 03:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="ed82b8193870c779463b11d60f01043317096b91868bc53696ebb0e971d61ca7429354e0e0f52aaa628c9119c15de496fb1d42de8ef14844e525d2499e761506375fdf1748e228ddb23b") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8912, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x44}}) close(r2) close(r1) 03:36:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d34008f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x2, 0x4) r2 = socket(0x10, 0x80002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000200)={0x4, 0x112, 0x9, 0x2, 0x81}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_deladdr={0x34, 0x15, 0x111, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @remote}}]}, 0x34}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x20880) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 346.268337] binder: 21236:21241 got reply transaction with bad transaction stack, transaction 1073 has target 21236:0 [ 346.279350] binder: 21236:21241 transaction failed 29201/-71, size 0-0 line 2774 [ 346.300663] loop7: 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0258c83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086610, &(0x7f0000000080)={0x20007ff00}) 03:36:29 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x1, 0x4) r1 = memfd_create(&(0x7f0000000380)='&vboxnet0{proc\x00', 0x2) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000003c0)=0x2, 0x2) ioctl$sock_ifreq(r0, 0x893a, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_settings={0x63a442a0, 0x9, @raw_hdlc=&(0x7f00000000c0)={0x8, 0xfff}}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x3, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="89130400004514ad773f717ff3f3768e83", 0x11) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80, 0x0) ioctl$TCSBRK(r7, 0x5409, 0x101) bind(r7, &(0x7f00000001c0)=@ethernet={0x307, @local}, 0x80) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r3, r4/1000+30000}}) fdatasync(r6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200000, 0x0) [ 346.336216] binder_alloc: binder_alloc_mmap_handler: 21236 20001000-20004000 already mapped failed -16 [ 346.365182] binder: BINDER_SET_CONTEXT_MGR already set [ 346.381189] binder: 21236:21248 ioctl 40046207 0 returned -16 [ 346.399617] binder_alloc: 21236: binder_alloc_buf, no vma [ 346.405661] binder: 21236:21246 transaction failed 29189/-3, size 0-0 line 2967 [ 346.414232] binder: 21236:21241 got reply transaction with no transaction stack [ 346.422116] binder: 21236:21241 transaction failed 29201/-71, size 0-0 line 2759 [ 346.444420] binder: release 21236:21241 transaction 1073 out, still active [ 346.451565] binder: undelivered TRANSACTION_COMPLETE [ 346.456745] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.463941] binder: send failed reply for transaction 1073, target dead 03:36:30 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x21054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640), &(0x7f00000000c0)=0x4) [ 346.504430] EXT4-fs (sda1): resizing filesystem from 524032 to 524032 blocks [ 346.511817] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.511834] binder: undelivered TRANSACTION_ERROR: 29189 03:36:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x67) r2 = getpgid(0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) [ 346.605869] EXT4-fs (sda1): resizing filesystem from 524032 to 524032 blocks [ 346.636595] gfs2: gfs2 mount does not exist [ 346.712540] binder: 21273:21275 got reply transaction with bad transaction stack, transaction 1078 has target 21273:0 [ 346.723572] binder: 21273:21275 transaction failed 29201/-71, size 0-0 line 2774 [ 346.736796] binder: BINDER_SET_CONTEXT_MGR already set [ 346.743267] binder: 21273:21279 ioctl 40046207 0 returned -16 [ 346.751431] binder: 21273:21279 got reply transaction with no transaction stack [ 346.751652] binder_alloc: 21273: binder_alloc_buf, no vma [ 346.759109] binder: 21273:21279 transaction failed 29201/-71, size 0-0 line 2759 [ 346.772573] binder: 21273:21275 transaction failed 29189/-3, size 0-0 line 2967 [ 346.781263] binder: release 21273:21275 transaction 1078 out, still active [ 346.788599] binder: undelivered TRANSACTION_COMPLETE [ 346.793793] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.800982] binder: send failed reply for transaction 1078, target dead [ 346.813686] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.819367] binder: undelivered TRANSACTION_ERROR: 29201 03:36:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/218, 0xda}], 0x6}}, {{&(0x7f0000000900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000b00)=""/84, 0x54}}], 0x1, 0x0, &(0x7f0000000a40)={0x0, 0x989680}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r1, 0x2, 0x1, 0x9, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x20) 03:36:30 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="24d2453b8f401cf5aaa067988d9584fb4ec3020180e5ee87326b772d9a551d346082e88b8fda83a2e16017dbe1b03ffd9fe3cfe847a7d0cd4c0c493c70e89f67435c") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="b13d290a3e9b1940bf34c399da17b5bef37ca25d6423dc5d834c7a4f6d05534e5bccaec1d5c6d66e73d8325b77cf6ed43e0db4eb010419e9709d8d88") fallocate(r0, 0x0, 0x0, 0x3) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0xffffffff, 0x2, 0x0, 0x5, 0x5}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40000, 0x0) 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:30 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000140)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000580)='./file0\x00', 0x200000, 0x0) symlinkat(&(0x7f0000000540)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') 03:36:30 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x8907000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="9a", &(0x7f0000000140)=""/209}, 0x18) futex(&(0x7f0000000080)=0x2, 0x4, 0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x1) 03:36:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) lstat(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='fuseblk\x00', 0x2800000, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}]}}) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) 03:36:30 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x807fd) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x10000, 0x0) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x7f, 0x4, 0x2, 0x0, 0xae, 0x4}}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x77, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr}], 0x10) close(r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x80]}, &(0x7f0000000100)=0x6) close(r1) [ 347.098012] binder: 21296:21304 got reply transaction with bad transaction stack, transaction 1083 has target 21296:0 [ 347.109250] binder: 21296:21304 transaction failed 29201/-71, size 0-0 line 2774 [ 347.120707] binder: BINDER_SET_CONTEXT_MGR already set [ 347.126707] binder: 21296:21307 ioctl 40046207 0 returned -16 [ 347.135563] binder_alloc: 21296: binder_alloc_buf, no vma [ 347.141651] binder: 21296:21304 transaction failed 29189/-3, size 0-0 line 2967 [ 347.143665] gfs2: gfs2 mount does not exist [ 347.152851] binder: 21296:21307 got reply transaction with no transaction stack [ 347.161415] binder: 21296:21307 transaction failed 29201/-71, size 0-0 line 2759 [ 347.169751] binder: send failed reply for transaction 1083 to 21296:21304 [ 347.178510] binder: undelivered TRANSACTION_COMPLETE [ 347.184052] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.189632] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.198394] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.204191] binder: undelivered TRANSACTION_ERROR: 29201 03:36:30 executing program 3: r0 = eventfd(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400041, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)={0x71, 0x6f, 0x2, {0x8, [{0xca, 0x4, 0x8}, {0x80, 0x1}, {0x24}, {0x20, 0x0, 0x7}, {0x10, 0x2, 0x8}, {0x18, 0x1}, {0x0, 0x3, 0x7}, {0x8, 0x3, 0x7}]}}, 0x71) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:30 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:30 executing program 5: socketpair$unix(0x1, 0x10000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r0, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000940)=@ax25, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/36, 0x24}}], 0x1, 0x0, &(0x7f0000003000)) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000e3b9e934fb3c08060000000006040000aaaaaaaaaaaadc0248a4aaaaaaaaaabb77b59f8802240c07ab463f49e8c00951"], &(0x7f00000000c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200040, 0x0) write$P9_RAUTH(r2, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x1, 0x3}}, 0x14) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) 03:36:30 executing program 6: setrlimit(0x8, &(0x7f00000a3ff0)={0x9, 0x4000000000}) r0 = socket(0x40000000015, 0x800, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) setreuid(0x0, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x40405, 0x0) mmap(&(0x7f0000912000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 03:36:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x2000) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x8000000000000) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x4, 0x1004, 0xba8f, 0x17, 0x8, 0x6, 0x2890}, 0xc) getsockopt$inet6_buf(r2, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x1c9) [ 347.359198] binder: 21323:21327 got reply transaction with bad transaction stack, transaction 1088 has target 21323:0 [ 347.367752] gfs2: gfs2 mount does not exist [ 347.370170] binder: 21323:21327 transaction failed 29201/-71, size 0-0 line 2774 [ 347.377784] binder: BINDER_SET_CONTEXT_MGR already set [ 347.389630] binder: 21323:21329 ioctl 40046207 0 returned -16 [ 347.398806] binder_alloc: 21323: binder_alloc_buf, no vma 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="676673326d657461c0", 0x0, 0x0) 03:36:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="31d4470434dd7b78a51328a06dc6b9bac97b1a97e74508552ea5edab47d334d779ea4491873537439c89fe73b03da7dcd81a6a0174215b48e93939e2dddd929f535271388d2fcd8f51bbc2bdd518e3"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000080)="6339e86e6a0e75c1635e", 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 347.404612] binder: 21323:21327 transaction failed 29189/-3, size 0-0 line 2967 [ 347.433614] binder: 21323:21329 got reply transaction with no transaction stack [ 347.441296] binder: 21323:21329 transaction failed 29201/-71, size 0-0 line 2759 [ 347.561948] binder: release 21323:21327 transaction 1088 out, still active [ 347.569183] binder: undelivered TRANSACTION_COMPLETE [ 347.574430] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.602785] binder: send failed reply for transaction 1088, target dead [ 347.610240] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.615832] binder: undelivered TRANSACTION_ERROR: 29201 03:36:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0xe630c4000000000}], 0x0, 0x0, &(0x7f0000000100)}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x2) 03:36:31 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8100, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e23, 0x9, @local, 0x6}}}, &(0x7f0000000140)=0x84) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffffffffffc0}}) 03:36:31 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x6}, &(0x7f00000001c0)=0x8) bind$inet(0xffffffffffffffff, &(0x7f0000942000)={0x2, 0x0, @multicast1}, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x4) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='cifs.spnego\x00', 0x0) close(r2) 03:36:31 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) sendfile(r0, r0, 0x0, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) keyctl$session_to_parent(0x12) clock_gettime(0x0, &(0x7f0000008dc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008b80)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000001240)=""/130, 0x82}, {&(0x7f0000001300)=""/104, 0x68}], 0x5, &(0x7f0000001400)=""/224, 0xe0}, 0xb2b}, {{&(0x7f0000001500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1, &(0x7f00000015c0)=""/152, 0x98, 0x9}, 0x7}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001700)=""/50, 0x32}, {&(0x7f0000001740)=""/191, 0xbf}], 0x2, &(0x7f0000001840)=""/171, 0xab, 0x6}, 0x6}, {{&(0x7f0000001900)=@vsock, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001980)}, {&(0x7f00000019c0)=""/59, 0x3b}, {&(0x7f0000001a00)=""/222, 0xde}, {&(0x7f0000001b00)=""/10, 0xa}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/9, 0x9}, {&(0x7f0000002b80)=""/126, 0x7e}, {&(0x7f0000002c00)=""/177, 0xb1}], 0x8, &(0x7f0000002d40)=""/179, 0xb3, 0x4}, 0xff}, {{&(0x7f0000002e00)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/235, 0xeb}], 0x1, 0x0, 0x0, 0x3}, 0x128}, {{&(0x7f0000002fc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/98, 0x62}, {&(0x7f00000040c0)=""/203, 0xcb}, {&(0x7f00000041c0)=""/166, 0xa6}, {&(0x7f0000004280)=""/87, 0x57}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/83, 0x53}], 0x8, &(0x7f0000005440)=""/255, 0xff, 0x9}, 0x3}, {{0x0, 0x0, &(0x7f00000065c0)=[{&(0x7f0000005540)=""/117, 0x75}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x2, &(0x7f0000006600)=""/4096, 0x1000, 0x400}, 0xe6}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f0000007600)}, {&(0x7f0000007640)=""/247, 0xf7}], 0x2, &(0x7f0000007780)=""/219, 0xdb, 0xbd8c}, 0xffffffffffffffdb}, {{&(0x7f0000007880)=@xdp, 0x80, &(0x7f0000008b00)=[{&(0x7f0000007900)=""/100, 0x64}, {&(0x7f0000007980)=""/4096, 0x1000}, {&(0x7f0000008980)=""/127, 0x7f}, {&(0x7f0000008a00)=""/188, 0xbc}, {&(0x7f0000008ac0)=""/38, 0x26}], 0x5, 0x0, 0x0, 0x8}, 0x2}], 0x9, 0x20, &(0x7f0000008e00)={r2, r3+30000000}) 03:36:31 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setown(r0, 0x8, r2) r3 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x1, 0x2000000000, 0x9, 0xffff, 0xfffffffffffffffc}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x870d, 0x7}, 0x8) 03:36:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\f', 0x0, 0x0) 03:36:31 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40086, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) [ 348.174204] binder: 21369:21374 got reply transaction with bad transaction stack, transaction 1093 has target 21369:0 [ 348.185177] binder: 21369:21374 transaction failed 29201/-71, size 0-0 line 2774 [ 348.205387] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x9}, 0x4) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r3, &(0x7f0000000140)=[{{}, 0x1, 0x51, 0x2}, {{0x77359400}}], 0x30) [ 348.223202] binder: 21369:21381 ioctl 40046207 0 returned -16 03:36:31 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x228, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) pipe2(&(0x7f0000000040), 0x3adc493d66221ddc) 03:36:31 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0x100000001}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) fcntl$getown(r0, 0x9) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000b80)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000400)) poll(&(0x7f0000000040)=[{r0, 0x421}, {r0, 0x40}, {r0, 0x400}, {r0, 0x20}], 0x4, 0x101) 03:36:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 348.258369] binder_alloc: 21369: binder_alloc_buf, no vma [ 348.264266] binder: 21369:21374 transaction failed 29189/-3, size 0-0 line 2967 [ 348.288351] binder: BINDER_SET_CONTEXT_MGR already set [ 348.292788] binder: 21369:21381 got reply transaction with no transaction stack [ 348.299124] binder: 21384:21386 ioctl 40046207 0 returned -16 [ 348.301287] binder: 21369:21381 transaction failed 29201/-71, size 0-0 line 2759 [ 348.303953] binder: release 21369:21374 transaction 1093 out, still active [ 348.322167] binder: undelivered TRANSACTION_COMPLETE [ 348.327345] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.334147] binder: send failed reply for transaction 1093, target dead [ 348.342198] binder: 21384:21386 BC_DEAD_BINDER_DONE 0e630c4000000000 not found [ 348.352808] binder: undelivered TRANSACTION_ERROR: 29189 03:36:31 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 348.358378] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.368491] binder: 21384:21386 unknown command 536872576 [ 348.396257] binder: 21384:21386 ioctl c0306201 20008fd0 returned -22 [ 348.430716] binder: 21384:21386 BC_DEAD_BINDER_DONE 0e630c4000000000 not found [ 348.463828] gfs2: gfs2 mount does not exist 03:36:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5, &(0x7f0000000040)="dbf5081572cbd91b76a8ab") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x100, 0x279d}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:36:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, [], {@llc={0x4, {@llc={0x0, 0x8e, 'w', "4433bb9fd39432538d9d0dc8a91256489918c1e1f374ce1aa930c56d133d2b57099822343b889322679cd6d1c0bd844427c6bc8191df2eb0923c5bbe72b63353d99f76c116f9ff8e99ac5cf50818207b50b18371b4c469e1bfd30087b2591b2f96"}}}}}, &(0x7f0000000100)) r1 = accept4(r0, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r0}) [ 348.483981] binder: 21404:21407 got reply transaction with bad transaction stack, transaction 1101 has target 21404:0 [ 348.495145] binder: 21404:21407 transaction failed 29201/-71, size 0-0 line 2774 03:36:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x8, 0x204902) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000fb0000000001000003000000000000000000000004000085d47ab25ee0125e923000ce2f7f000200000000000000040000000000000005000000f7ffffffc82df90f69d1cee1edd9668e9879e53dd2272e45c683bbfa8b8b67030a9a994abea8abb32e882c3499851125c9099302a2ab41d29b7d5ec4a667c56eb2feedb2d39ff5bb64b25bcd6f1afafee79bbf290696b8edac1ca5d9e405b1498f810b7104c65dada870ad6ac0f4fde574e48f555522193d406b7ae2887e217f00b2646f5ad6be59d9e00ec671e9eb0b7afc4ca0790f7acbeb67073832a8b836c05a6c2a584091695d9f93949f5ecd09ad850ee8f8dd6892"]) syncfs(r0) write(r0, &(0x7f0000000000)="220000002000070700be0000090007010a0700ff0000000000200000057c00000000", 0x22) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 03:36:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff6, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) [ 348.535342] binder: BINDER_SET_CONTEXT_MGR already set [ 348.554159] binder: 21404:21409 ioctl 40046207 0 returned -16 [ 348.563307] binder: 21404:21409 got reply transaction with no transaction stack [ 348.563435] binder_alloc: 21404: binder_alloc_buf, no vma [ 348.570940] binder: 21404:21409 transaction failed 29201/-71, size 0-0 line 2759 [ 348.584301] binder: 21404:21407 transaction failed 29189/-3, size 0-0 line 2967 [ 348.593292] binder: release 21404:21407 transaction 1101 out, still active [ 348.600460] binder: undelivered TRANSACTION_COMPLETE [ 348.605657] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.611645] binder: send failed reply for transaction 1101, target dead [ 348.621763] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.627376] binder: undelivered TRANSACTION_ERROR: 29201 03:36:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x78b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 348.724328] gfs2: gfs2 mount does not exist [ 348.742973] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. [ 348.769854] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. [ 348.811290] binder: 21429:21431 got reply transaction with bad transaction stack, transaction 1106 has target 21429:0 [ 348.822353] binder: 21429:21431 transaction failed 29201/-71, size 0-0 line 2774 [ 348.833458] binder: BINDER_SET_CONTEXT_MGR already set [ 348.839262] binder: 21429:21432 ioctl 40046207 0 returned -16 [ 348.847264] binder_alloc: 21429: binder_alloc_buf, no vma [ 348.853148] binder: 21429:21431 transaction failed 29189/-3, size 0-0 line 2967 [ 348.862317] binder: 21429:21432 got reply transaction with no transaction stack [ 348.869943] binder: 21429:21432 transaction failed 29201/-71, size 0-0 line 2759 [ 348.879507] binder: release 21429:21431 transaction 1106 out, still active [ 348.886693] binder: undelivered TRANSACTION_COMPLETE [ 348.891908] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.898274] binder: send failed reply for transaction 1106, target dead [ 348.911170] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.916845] binder: undelivered TRANSACTION_ERROR: 29201 03:36:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/129) r2 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) dup2(r0, r2) 03:36:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:32 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x10402) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x80, 0x1ff}, {0x1, 0x1f}, 0x5, 0x2, 0x80000000}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000000000000001f00b10a4a065a07fb91140005ff907800000000450000000000000000010000ac1414aaac141400"], &(0x7f0000000040)) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x2, {0x69}}, 0x18) 03:36:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1fff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0xf674, 0x3, 0x81, 'queue1\x00', 0x2}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) writev(0xffffffffffffffff, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 03:36:32 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x400) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r2, 0x4, 0x6400) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18}, 0x18) r4 = dup2(r1, r3) write(r4, &(0x7f00000000c0)="df48e5fdf6b52064782e7d4270c08ec69ca92260cba4290409b6ca44c694cd30473a4ce75b3899be28b5543c18a7771586a060ca6952d4d024bff4925b33adaa0a4b7fb9048d52496da48cd3fa5165e9", 0x50) flock(r3, 0x8) 03:36:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="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", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x40001) fcntl$dupfd(r0, 0x0, r0) 03:36:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000040)={0x4200000000000, 0xffffffff, 0x2, 0x3b76}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x2, 0x0, [], 0x1ff}]}}) fcntl$setlease(r1, 0x400, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x980, 0x0) 03:36:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000f3ffffff018000007a0a00fffffffffd630108"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r3 = getgid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000580)={0x6b, 0x7d, 0x1, {{0x0, 0x4c, 0xffff, 0x1, {0x2, 0x2, 0x5}, 0x8800000, 0x8, 0xc2, 0xfff, 0xa, 'syzkaller\x00', 0x4, '(-,/', 0xa, 'syzkaller\x00', 0x1, '-'}, 0xa, 'syzkaller\x00', r2, r3, r4}}, 0x6b) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x84000001, 0x3342, &(0x7f0000000300)=""/187}, 0x48) [ 349.207161] gfs2: gfs2 mount does not exist [ 349.215011] binder: 21444:21453 got reply transaction with bad transaction stack, transaction 1111 has target 21444:0 [ 349.225996] binder: 21444:21453 transaction failed 29201/-71, size 0-0 line 2774 03:36:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8003, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="6f557f687ea318d7d6f54f29660251d0ab82e4c6b1264547a59d912c7b9f99a50ece4e29b6b023d54d0fda57c9b2ff101eefc9fdb4e2ab7d57cd6074c3b8716deca717f4667af01b7429e9c52b4a560041f0660c6d8a1dddde1d0fbe7a7bb20b945e54c1f047380a12cd3b57695a52cd69198b53d993ee191eb26249c758741d0b6f6a9dcde7669fc32f7d9853668d0a99ce968de36c83f9247656852a5a440549d6d2f988a35937b50d82f38828e3f1fc3738df878dfa8b8617c42af4dbafed", 0xc0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='/dev/rtc0\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r3, r4) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 03:36:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000461000)={0x10, 0x0, 0x2}, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2, 0xfffffffffffffffe}, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2800, 0x1a) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x4, @mcast1, 0x3fa}, @in={0x2, 0x4e24}], 0x2c) 03:36:32 executing program 3: r0 = socket(0x40000000015, 0x5, 0xfffffffffffffffe) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) r1 = dup2(r0, r0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000300)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001300)="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", 0x1000, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002300)="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", 0x1000, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='em0system\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r3, r4}, &(0x7f0000000200)=""/201, 0xc9, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="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", 0x481, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x10, 0x7, 0x7, 0x5, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0x100}]}, 0x28}}, 0x8080) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @broadcast}, &(0x7f0000000380)=0xc) bind$packet(r1, &(0x7f00000003c0)={0x11, 0xd, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000003880)}}], 0x1, 0x0, &(0x7f0000004540)={0x0, 0x989680}) [ 349.312122] binder: BINDER_SET_CONTEXT_MGR already set [ 349.322937] binder: 21444:21466 ioctl 40046207 0 returned -16 [ 349.333111] binder_alloc: 21444: binder_alloc_buf, no vma [ 349.338968] binder: 21444:21453 transaction failed 29189/-3, size 0-0 line 2967 [ 349.345267] binder: 21444:21466 got reply transaction with no transaction stack [ 349.354106] binder: 21444:21466 transaction failed 29201/-71, size 0-0 line 2759 03:36:32 executing program 7: syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="5eba905bb301aaaaaaaaaa0088f5e23ea56c3d49ff38f0aefbce9f158192eb617f4458622d796f67ba93955cbc1d01e3ff409ad354d0828fe01d5ac4943430f6bc8f9996596712f861663a68db4de40289a9f2be194abcf1d048cce2872cae3d8f13a3d6175358b361e9688e073eac2e56de6752ad27ecf1cb"], &(0x7f0000000240)) [ 349.362462] binder: release 21444:21453 transaction 1111 out, still active [ 349.369723] binder: undelivered TRANSACTION_COMPLETE [ 349.374891] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.384244] binder: send failed reply for transaction 1111, target dead 03:36:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 349.444771] binder: undelivered TRANSACTION_ERROR: 29189 [ 349.450597] binder: undelivered TRANSACTION_ERROR: 29201 03:36:33 executing program 5: r0 = socket$inet6(0xa, 0x80807, 0x200000007) ioctl(r0, 0x206, &(0x7f0000000040)="025cc33d6d345f8f762070") setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x2c) fsetxattr(r1, &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00000000c0)='\\eth1trustedGPLppp0\x00', 0x14, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x40007}, 0x1c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000c80)="83869c310df838d92624ec94e9815db950c35cf4b760f924cadf42ec7be41a75a9b6a787acf0744bf8aae292cf537fc1545e496cf46704a13f4ad24bdf66227fc5e37bfe73a2a9cb5cc73ffef85a048fd56c31cc61209d9063ea04b512d0f7f56726a2998846e98ece94fad94acfab57f9dc961129c1b4f468de14e0269af336ea0d3b701dab30592ca347402061ffe2266ee8e2a8d53532efb1bf38e56e84538ae9f05b25480fe8b5f96f556c6fbb58ce5068ab7f1403a3c4b838a261c95e83340a70807d9716277fec9fc131d935cd00eee1783b52a0bcee1e56e76a120a26f9ab0598c5678e8fc06a1a9b5dd73313b2833e026f324b0dd4c45c8f9e689c553331c0a9ab33e24e03a933467150efaedd2712f7b206173ecfbb3f0fe9c9607a448e33cbf59d52e95b77263ad9cbf51baffb65f02665db7cc7ecf13bd428f5847634f19917457a7d02fce9a63f395c0e3fdb8d6edb863f9edd10be9d1da7c90723431cbf346d4f26951df5d03362d4a894e7ff70a7d69ad32a271d944526571af7186f0db63e7197972727ae7d0f4f1c887f81748d4a8782596d253f7182e9a0c69ff2b86d8b67cf6d7b308072d7a74303859b963e98788271b0d5c2ca712be0eeedc127c01974a533e1a792a0c006010d3edd53eda2d1202845faf211ddef1d7870950d058893e9086f38ecf956bdbb7ca00ec6125aec1a07065e8169f009c8b07bcec3410165bc74098d8c843135dd22549e83ea161b4c30dd7c8a1d87362f3fe3b8a4739403cbbd2a5ba531f1a836f9219cf8565cb1c6ddddf0b5cb4679d92cdd515da956e1c9cdcf9d122bc595dc890091e9081bd66b4af777c1b30c5ae095dc0c9a66145f65c3caa4a81e7a601acb7f38d3202d921905d80a70b44dd87d5e3b6eac601c22937e0cbaede7c4e7ac7941846475bbe0b1e26a7307149f8f1500047df4163715e44a986c1d9a7512be0cf76b53d80b1bcbb97231435169cc0e69a61e24dd272647166c8a209275c825bc85ffeae8740ddd8347c2ce2d93f7f00f49affafe1dfbfdc470851b5310c0168b60523de23aba829bc7a81e5b7eaa47a56cfc340f2142a214765bcaf12549d81818264ed744a42a74adacef56e3b569e893d41c1a013d9b39cf9eae645354361d205cf4f61350f1e91412c5b73b17a2e2feb96260e4eb7131f7794e8dff592c5c6be0c08ff564b58d2a5e3c7bc71ac80d4aaa3d1cea69da157d3de911a3ba3707a7d3bfa17d532e2002da8d727ff5a5a9ff4b2d707317ee912b12e33baa698879c32b94123c98e9806f488e16dd495de16bda9caaef39e2aecb11b34070aecef08e72597a55d6f3f4083689c5647d350228b7a0c12731b0e8ae4364a5251161f56916c5fa78fb516e3401cf46e990c03d2c93b5295a0ca504abf63fde7db0806f90bd3c44869f556beab0f79e3cb086b67e19c0c84a0927fecb481af502c2adcd40033acc87a3b453ea39263c1c0537c6da3fe7674be9d80c1c3f4cb05ce5c2a8c5e6c1beec2266e134c1b08b5370cda7b22d617c89fc596122010b1c74f79442f0c5cbbc4dfff3788f79e23f97c709a82b2e22c2f5b1d8bf1bb7e36eb0a53d1daccd955438379ab792075a7047d2f91bc04b4653a44811597ba70b7e1ab6eec646f7a189223af4cc81e1dd29b5839665ca20d5eaf40565b91e827354abb9d35e7354e3b7815b83d9258cc4bf9b5043abfd28d86ed9ba99be98b05503267e48b43bfbd8ce54413789f21ef7b27da26f9c631676e21c0c795d2922e9942d960902c29008710a0bee0f78b30adf6d92b184ed84d4745a6ae9eed7084a6cb0fbbd7e22d1f2cbe315c39a300f9983c2112b54eb64e061f3ceba20dd0acb9b0541c2bdc5c4285b74296d1fceea6ce0a74df40b58bfe4debaeae7d6664f14c14c6afc2efaef0f9c360c982109415d8ac6bc9d003e24d4edffef1469d45a6a08886fe022cf790567671f25866b0a0dc7231a8dd0f1c9e89691d4706955406badc57ef01a77b44259a49632266b415f4796bc98ed7fa8588675946bec45d06edc83e2e001458ab0ca4eaa9390175bfe3b6e74c71d08b071cd215b7000170e9e687ad258eb7ebcca56c107db9c982622d4f8cc2848ff686c4be642d2639cd65aa21c051b33c8f729b37a058ce9a6b738c6dd8b7774dd5e3af8aaecb9ba202bf47b8d3c833ff746ff2a4b4e5ff22461cdaeeae5fee536c29319fd94fe72dd95b5be952306956ab15f585d443dee22ac51b52cc67fef507bee8368192e19160ec8e99128bd85c994046b7e1055d1865ded5172d3207a47bab859a65e0b63692436604c748ade0378f15c90b442fea3fa97860dc036ba62b6e051503f2b41c5b8bb69ace6c353b6b288d4b9f8b6a42a06cbbf1d9226a247d930cc56fef85527765ed43f2bff88b34b64a585680cfb65280f06a48c8a0b2f684da57b2769ae47fbc9aee1ac9174ea9d04aa05bb120308717fe63a74ed1836c5106e9fd3605744a4a43d8ae7926e3fa1f28e85db0f54447a001026b26be6549ee11db8e0beab6c1a0ce47fb0e9eac9c015bb532dc6df46e5ea8fcbd1e78168d0b4d8e5e50cf7a37a64f42d339939e00f91e75b341ef091d547336105c069abe1937b64d6a266100b407e4b35c8417f58ecf88f5729a6cc20ed357c42adaa0a9e095fd668fe2ddad1ca9d4c2f51424c39869c6f69f83c7303a8f97178c87542e4dae52b4bd520086e969cc8d07dfb7f8a12557bbe5ffa2c329963b7a1f21b139b9143bea0cf1cf43fc7172919c02092577567d9ee1f029684012491dc2b3dad8838649599d2e055d030987685af598435cfb4c5a1add5b954c2edc96f7d833dd234967f75246843741f44652a8e64cc791fb505d1f9cb99a3eb3bfa22d4121698276822f1c75425b35783f206b4b171056930c74c70d6066a557a5847cdf19a3b8e3717c42eddeee54e646124bc663e322676e0c182a51dc64e5dc0557b99a14d5a772a2e97bac7eb7763397d398960d4940d80f1c0481e49d11e09c2aaa59fba5096e449114ad1c09b7b720082a4f109c955ad355b238ea87fb5824a148805df5383306ddcd6d128c23d1c770d3327a13d372a683af7cc5a24c26247bfcd766d0e7a6fa9d87508f41c2a8b7426bcb0180710531472557ae19039ea499408da4bb11bc5e5528926cde54d981bba2fb59fe4c918d89875dbec573e58ac401110648720f4f1e3738d74be6fd48dc23435c6a6ed8e351a4f6e0f343dd78bcdd53efd4575b3fd262142f7772a66f9ab885d7b3dacd12fec2d7c34b9fb107d11e319beaae45731fab7d2d0193627eabbb88f9ee693f229c7374f6dcb88d84e3df32b4ea1c54a4119c649c204d94553c3bb3a94dbe0523982dc34c7fb9d16a4648d2742f24ded3f9c2d622a2d51cff3ac7465b576a4c4ab285830bb4f674d5981ea74a6e2ae3aba2dfe9df39cace81c83f59796c7aeb84e5e6dab195b2443dde0b915ba1da10ecccf4b020dd96ff82b883f2562659dd2994fa596f52a996d381f305aba77de7951424c27457edc683c8ce04160e72085be21c58ccec656c66190fd1490840f15edf8a1e471891f0ed5a7bf9c22ba02de54eb0fa626d77510c7a8d6d0c709658e5d520e8e36275d5698ab602cb3641e64d2ffbda5441c08079236581096e0d246a30f42fdaccd2f81bfd79519e87370860506b40c95bee3a5a46df98ac335650917920bab6eb130b366b30a6d4b04a696430db26935fefefb1a65da5361fcfed11a8da78f8b4aeea4ca56d5929073ba995e16a397b8a586999de447aff3ec8d68f389163d7e20b18c0ac0c01c9a1dc36fbc604bc5ec515d0163b62542f20ef1dc50092559237d94a17c66418eaac89e93ce15ee94d42be332a3d028fa76f94ae6e3e3206532719d99efdd1139230f2413d475d1f4a6fa01277dc591bf94e4178d6194f2ee4e0be3cdd395b89f51c7ae784fe4c5fb0834ec67cea31e2dab9d29acb7c9f304c25163ea368359eed7d85c7901b3cdf01f6f12a7eba085abdecf2a03b75c268a8b91b523c2c2ecf8f560f8abde19ea2e55ea25dbc1d1e7faa108686169799428ca04927068d8a3c031b1c39b2467011adfab89bb803cf207b3c1b7a4bd6450aae06065f8a7a2c356910ecd2dbe480adc49875a6bb5ae6f943d75cbeb9416e973b1efcc70545574e69687dfb7302ad9830907f800c9fdeb0fbe6067048883a90ec9c596b0c51ff1b91ed2602b5f2c3dec55c09339050a8e8480f8b6de2ffb7818c225fad6df1736de701abef60e3c14dcb599bef61bd951b81cd24adf41d312c49152e31eaa725d2787439d66ecce400b4a734fc1ae8dab73bcf3d67b479ae7d2d4782d17f00ec98193486fc2fb5c5fe92f5bbe9c0a66de1365b551aebc4eda136ffcd84e34cbe1e692fe54e8257de8f451e15816b4bfd67d7c0475e6a37ffe5cb874f9fb83816e0ab4a4e7bc4d791fba0040145a193ea86bc9974021ee33f637413d022167e169a56bd1258aa47a0a94c6e967f72f00b25a366355713d0045b6a978081a424bc85807adfcd0f248227e31949571de4ee0381bfc91f7493bd547353aba5eb4d36b371365f7aa123becde0cc8c0b0169f7253b61da47bb907bcc93743655e8fdb9c1ff73b9214f4d29330be48be97bb26c72acbfe83b17f257a93fc6725c8b6dbf6ecd5df42073f8d99ff16ee5446d4d0b54f367820ed6f11286388df14cb27ef1b553b5a86a591352ebbfdb7aad0e718083f7add2f53a61cc1925accf5ad791ca002238ac926238d43810e70235514c58b76cbaa8cb67d176b370034ae2bac6c5e28452b7dc4cb687b0790a4dcc89fa1af19a8de509e85407ee20c642b4add722c8043261141d5bb2315a753e5eec1ed8c477595d5dce6ca0595267b0d29ba1cf8a7ba2e0f338b282f9ba1cf54caec2a4669606f0f664a8671ed82c405fd49810e12e9df97b55e4b56b5f3bef63b9ba6da1ef8cb09b40f63e5cd3e71c06853d9f50361834b63c3c3e3055092ae1a0cff6fda95c226262bde4645208bb813ed2f0c5db1abb6b3db59a9839af467eec6a2eab54d3ce4cb8ae99b62c4ad9f1a65c589d42297a47f1aadfe7d241b181ad5b6749c4df238b6a1094ef0e1f88e89e81ef7795a38d43e8fbaf8772b19c31187cbd4bdd46e690bf93652d4d3f18ecec871ed12b968117885bd22b5aa4ff55db957df1b1b1ba6c45eb33b4f7fbebbccd66822426218a04cfae52aad3eca0036b1bb86913594d4cd8fb0cf92117fa219b9a2d41f45c97efb59cfbf56767e92c1e9919974ac2f15b2b38985e70f9bcad74c5a34fb0e482b5cdf6a41722e961e1e3bf2ecd8a9290086e8548298f3f6df5d1c044c46f01d56ae2f19f7abb6a669f06805342c67b6f58963097a8d7e59acf166d55777879293196f4e5c78dab5fc9762cd67285942a200efb1a0debd54531cc231dafe1a44e7f70677c8a72b845eb5b9d8183ff1c7125d86d77635c0897aa8f672d66bd7df072d89343a0c38a09049b0af48c277ddea54630a4df5de51e27aec7eb8a99c1776a998923568c32838639e7ec0238bda56818aad21ab94bf1a1d4cd5ad1b76a2c038fa8d6e39072a8ea3e5dfa89d20916b4768bc77847a3478795252beaa1bffbaf85ad231dd0235d5b6de44189fc9d280fc12c507bf8b25aa3e2e48badea02af4e11b2e91168beb646a79fb74dcd95fe6b19d5d4c4dd65ae1fc91687230feba6bd6420b6a29ebd8e4a14aa84bc1dcc6fa3d7934af1e27c4cf240c60adee5b76ea80b192a41c5cd223991bac", 0x1000, 0x0, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @random="50d2c924f9f6"}, 0x14) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a80)}}], 0x1, 0x0) [ 349.585467] gfs2: gfs2 mount does not exist 03:36:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) 03:36:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioprio_set$uid(0x3, r1, 0x2) 03:36:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) ftruncate(r0, 0xfff) fallocate(r0, 0x0, 0x0, 0x2) dup3(r0, r0, 0x80000) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 349.638561] binder: 21493:21496 got reply transaction with bad transaction stack, transaction 1116 has target 21493:0 [ 349.649718] binder: 21493:21496 transaction failed 29201/-71, size 0-0 line 2774 03:36:33 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x10}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xdc6, 0x40) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = creat(&(0x7f0000000000)='./file0\x00', 0x18) r4 = getuid() fstatfs(r1, &(0x7f0000000140)=""/51) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@remote, 0x4e20, 0xb800000000000000, 0x4e24, 0x8, 0x2, 0xa0, 0x20, 0x5e, 0x0, r4}, {0x5, 0x4, 0x800, 0x2, 0x8, 0x20, 0x4, 0x101}, {0x0, 0x2, 0x2287, 0x2}, 0x4, 0x6e6bbc, 0x3, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d6, 0x3b}, 0x0, @in6=@local, 0x3505, 0x3, 0x3, 0x3f, 0x100000000, 0x8, 0x20}}, 0xe8) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) io_submit(r5, 0x0, &(0x7f0000001840)) io_submit(r5, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0xfe}]) signalfd(r2, &(0x7f00000000c0)={0x1000}, 0x8) [ 349.705229] binder: BINDER_SET_CONTEXT_MGR already set [ 349.711447] binder: 21493:21497 ioctl 40046207 0 returned -16 [ 349.720110] binder_alloc: 21493: binder_alloc_buf, no vma [ 349.725999] binder: 21493:21496 transaction failed 29189/-3, size 0-0 line 2967 [ 349.734241] binder: 21493:21497 got reply transaction with no transaction stack [ 349.742022] binder: 21493:21497 transaction failed 29201/-71, size 0-0 line 2759 [ 349.750881] binder: release 21493:21496 transaction 1116 out, still active [ 349.758120] binder: undelivered TRANSACTION_COMPLETE [ 349.763299] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.769827] binder: send failed reply for transaction 1116, target dead [ 349.783203] binder: undelivered TRANSACTION_ERROR: 29189 [ 349.788792] binder: undelivered TRANSACTION_ERROR: 29201 03:36:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x5410020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:33 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x680401) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x811, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x444}]}, 0x30}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @u32=0xd202}]}]}, 0x20}}, 0x0) 03:36:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00') setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="320404020620761400000000000000000000020000000000ff020000000000000000000400000001"], 0x28) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"6c6f3a0500", {0x2, 0x0, @broadcast}}) 03:36:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") listen(r0, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) listen(r0, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) sendto$inet6(r2, &(0x7f0000000280)='\x00', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='\r', 0x1, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000300)=0x8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) close(r2) r5 = accept4(r0, 0x0, &(0x7f0000000340)=0xfdce, 0x0) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7300ff01"], 0x4) 03:36:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init() r2 = epoll_create1(0x0) flock(r2, 0xfffffffffffffffd) r3 = epoll_create(0x102050204) ppoll(&(0x7f0000000000)=[{r1, 0x431}, {r3, 0x1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0xe5}, 0x8) flock(r3, 0x2) dup2(r3, r1) 03:36:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x480) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x4, 0xee, 0x7, 0x8, 0x0, 0x5, 0x6405, 0x4, 0x1ff, 0x2b5, 0x10, 0xffffffff, 0x9, 0x2cd, 0x9, 0x2, 0x4, 0x2, 0x32bf, 0xffff, 0x8, 0x3ff, 0x97bc, 0xffffffff, 0x2, 0x4, 0x2, 0x6, 0x100, 0x3, 0x8, 0x1f, 0x8000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x8, 0x5, 0xff0000000, 0x2, 0xf35, 0xffffffffffffff43, 0x8001}, r2, 0x7, r3, 0x3) r4 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x80000001}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0xc1b, 0x0, 0x100, 0x4}, 0x10) 03:36:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="4d9f"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000580), 0x10000000) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$poke(0x5, r1, &(0x7f0000000040), 0x60) [ 350.122945] binder: 21540:21546 got reply transaction with bad transaction stack, transaction 1121 has target 21540:0 [ 350.134232] binder: 21540:21546 transaction failed 29201/-71, size 0-0 line 2774 [ 350.179195] gfs2: gfs2 mount does not exist [ 350.182671] binder: BINDER_SET_CONTEXT_MGR already set 03:36:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd5', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)=""/162, 0xffffffffffffffe5) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) [ 350.221548] binder: 21540:21554 ioctl 40046207 0 returned -16 [ 350.260506] binder_alloc: 21540: binder_alloc_buf, no vma 03:36:33 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x7) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0x3, 0x3, 0xffff, 0x3, 0xfff}, 0x800000000000000, 0x1, 0x4}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x80}) [ 350.266562] binder: 21540:21546 transaction failed 29189/-3, size 0-0 line 2967 03:36:33 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0x7ff, 0x900000000000, 0x53, 0x2, 0x3, 0x3e, 0x101, 0x33c, 0x38, 0x224, 0x2, 0x6, 0x20, 0x2, 0x2, 0x8001, 0xaa}, [{0x70000007, 0x2c, 0x3, 0xe4, 0x3ff, 0xe28, 0xfffffffffffffffb, 0x81}, {0x60000000, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0xff}], "a6e6c32b676e01e12fd294c74f80dc4774dd3697eeee19e446c4868929651d105a46d98326736d16a631d751b04667330f8f15d9831440315b33798506df1847108a62dd9a09e534a232c21086efdb00657837c5450c6c651bf93b8d2cbb0396ce431c1ee1c1d5636d96d7cbe44e353e43976e1b2117e93a833818eb06e0e2e4841206649eb1c5b9831c58482ea554dc955345df9161a228e7e098e2bf1336d8e5d8e44e6d2e0c21d291ac3434af2b34bb5674f312bbb62782a7b97dd110bd5c4c41ee0de472fa139fdb7b21757f737c783f48f831dc83decc7b832b3fedc6ff7d05cad2f5fa56d51277109311"}, 0x165) r1 = socket$inet6(0xa, 0x3, 0x2f) r2 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x20) write$P9_RFLUSH(r2, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x300}, 0xc) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000200)={0x31, 0x4, 0x0, {0x3, 0x4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) ioctl$sock_SIOCGPGRP(r1, 0x8940, &(0x7f0000000000)) fcntl$getflags(r1, 0x401) 03:36:33 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0xfffffffffffffffd, &(0x7f0000000080)=0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 03:36:33 executing program 5: socketpair(0x1f, 0x4, 0x27e, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@int=0x81, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) delete_module(&(0x7f0000000200)="81656d31265c766d6e65743100", 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@ipx, &(0x7f00000000c0)=0x80) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1000002) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000040)={@local, r5}, 0x14) 03:36:33 executing program 7: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r0 = socket$inet6(0xa, 0xa, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0047fc2f07d832") syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10a, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x18000, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x280401) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000001) [ 350.298489] binder: 21540:21554 got reply transaction with no transaction stack [ 350.306206] binder: 21540:21554 transaction failed 29201/-71, size 0-0 line 2759 [ 350.321345] binder: send failed reply for transaction 1121 to 21540:21546 [ 350.329552] binder: undelivered TRANSACTION_COMPLETE [ 350.335234] binder: undelivered TRANSACTION_ERROR: 29201 [ 350.340823] binder: undelivered TRANSACTION_ERROR: 29189 03:36:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 350.346584] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.352193] binder: undelivered TRANSACTION_ERROR: 29201 [ 350.471745] gfs2: gfs2 mount does not exist 03:36:34 executing program 2: msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/33}, 0x29, 0x0, 0x0) r0 = msgget(0x0, 0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x40, 0x280000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x8, 0x5, 0x3, 0xdd4, '\x00', 0x4}) fstatfs(r1, &(0x7f0000000180)=""/255) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x800) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x0, 0x65, 0x8, 0x7034, 0x1, 0x80, 0x80000000, 0x8, 0xfffffffffffffffc, 0x2, 0x1, 0x2, 0x8001}, {0x3, 0x86f, 0x3, 0x8000, 0x55d8a47d, 0x8, 0x9, 0x80, 0x6, 0x7f, 0x8, 0x1ff, 0x1}, {0xffffffff, 0x6, 0x1, 0x1, 0x9, 0x1, 0x8000, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x2, 0xffff, 0x2, 0x8}], 0x1ff}) 03:36:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000200)=0xff, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0x1, &(0x7f0000000100)={0x3}, 0x8) semget$private(0x0, 0x6, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) 03:36:34 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x2) r4 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x80000) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='9p\x00', 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}, {@cache_fscache='cache=fscache'}, {@aname={'aname', 0x3d, '\x00'}}, {@noextend='noextend'}, {@cache_loose='cache=loose'}, {@access_any='access=any'}, {@cache_loose='cache=loose'}, {@access_any='access=any'}]}}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000080)='./file1\x00', r5, &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2cf766516e6f3d", @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000100000001,cachetag=trans=fd,,\x00']) [ 350.531370] binder: 21583:21591 got reply transaction with bad transaction stack, transaction 1126 has target 21583:0 [ 350.542554] binder: 21583:21591 transaction failed 29201/-71, size 0-0 line 2774 03:36:34 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x324, @loopback}, 0x1c) listen(r0, 0x7a44) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x86, "4e171fba92b10f25a12fb50378cf7766babd3969e8287d1026d449f6393608423c080443a3584c0d8d3252b0f6d4d5cd0adab7e87600603de5451ebe8ae022f410a0451e297eb3ddf7e69b6879db84a46a3100fddea909eaa30ec017f742f2fea2b34419cfcf85db7becc44ad57f32e65c11ed38f801f70fd5c2dbe40d91d3de07b81fab0481"}, &(0x7f00000001c0)=0x8e) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r3, 0x774, 0x1, [0x5]}, 0xa) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="671f7579bd66a74cb9a209e5696d23deab"], 0x34000) r4 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) r5 = dup3(r4, r0, 0x80000) ioctl$KDMKTONE(r5, 0x4b30, 0x200) recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/239, 0xef}], 0x1, &(0x7f0000000480)=""/142, 0x8e}, 0x0) close(r4) 03:36:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 350.595425] binder: BINDER_SET_CONTEXT_MGR already set [ 350.604123] binder: 21583:21594 ioctl 40046207 0 returned -16 [ 350.613758] binder_alloc: 21583: binder_alloc_buf, no vma [ 350.618335] binder: 21583:21594 got reply transaction with no transaction stack [ 350.619658] binder: 21583:21591 transaction failed 29189/-3, size 0-0 line 2967 [ 350.627173] binder: 21583:21594 transaction failed 29201/-71, size 0-0 line 2759 03:36:34 executing program 7: pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0)={0x3, 0x4, 0x10040000000081, 0xffffffffffffb281, 0x9}, 0xffffffffffffff5d) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) recvfrom(r1, &(0x7f0000000200)=""/206, 0xe6, 0x3f, &(0x7f0000000440)=@rc={0x1f, {0x80, 0x2, 0xffffffff, 0x1000, 0x2, 0x1}, 0x4}, 0x80) write$P9_RLOPEN(r1, &(0x7f0000000300)={0x18, 0xd, 0x2, {{0x2, 0x2, 0x2}, 0x9}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0x6, 0x4}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@ipv4={[], [], @rand_addr=0x4}, 0xe, r2}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 03:36:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 350.644765] binder: release 21583:21591 transaction 1126 out, still active [ 350.652059] binder: undelivered TRANSACTION_COMPLETE [ 350.657227] binder: undelivered TRANSACTION_ERROR: 29201 [ 350.664194] binder: send failed reply for transaction 1126, target dead [ 350.674829] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.680452] binder: undelivered TRANSACTION_ERROR: 29201 03:36:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000280)=0xffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000850000000000000000000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x3e}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 03:36:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x3f, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffff85bdc8bf03e884845a800240000000000009078e0000002000000200000000004019078005adc980077d4374ae0e5673d0f2d81774eeb4b3cff7f0000f7d54d4ace79e9775cdb207e7419fc76426843aacd8ce148a5bfebcf4155d062ab2c4ada14dce2967c55b6f0c1de64260a9ecfe0c04933054f5713f480b8327efdd1aca98e2fa34764156b2d07f5a31ce9efe2ac5e5bd5b2dbe0"], 0x0) [ 350.811657] 9pnet: Insufficient options for proto=fd [ 350.811905] gfs2: gfs2 mount does not exist [ 350.840350] 9pnet: Insufficient options for proto=fd 03:36:34 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x40000) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="e2", 0x1}], 0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) read(r2, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x87, 0xffffffff, 0x20, 0x5, 0x2, 0xbfa9, 0x1fbe, {0x0, @in6={{0xa, 0x4e21, 0x5, @remote, 0x5}}, 0x4, 0x9, 0x1e, 0x2dfd, 0x2}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x1008) 03:36:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,~ser_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='@\x00']) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x189c02, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f00000001c0)=0x80, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="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", 0xfe) 03:36:34 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x739) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xffff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={r3, 0x80, 0x30, 0x7, 0x7}, &(0x7f0000000280)=0x18) 03:36:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 350.904600] binder: 21621:21624 got reply transaction with bad transaction stack, transaction 1131 has target 21621:0 [ 350.915592] binder: 21621:21624 transaction failed 29201/-71, size 0-0 line 2774 [ 350.957747] binder: BINDER_SET_CONTEXT_MGR already set [ 350.963995] binder: 21621:21628 ioctl 40046207 0 returned -16 [ 350.972906] binder_alloc: 21621: binder_alloc_buf, no vma [ 350.978757] binder: 21621:21624 transaction failed 29189/-3, size 0-0 line 2967 [ 350.987863] binder: 21621:21628 got reply transaction with no transaction stack [ 350.995486] binder: 21621:21628 transaction failed 29201/-71, size 0-0 line 2759 [ 351.005572] binder: release 21621:21624 transaction 1131 out, still active [ 351.012782] binder: undelivered TRANSACTION_COMPLETE [ 351.018090] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.025472] binder: send failed reply for transaction 1131, target dead [ 351.045987] binder: undelivered TRANSACTION_ERROR: 29189 [ 351.051616] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.168986] gfs2: gfs2 mount does not exist 03:36:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0203003d6d345f8f762070") syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000019c0)="600084e02d9a198b900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x3ff}, 0x8) dup3(r2, r0, 0x0) 03:36:35 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x40, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x80, 0x4) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x458, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, &(0x7f0000000140), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'syzkaller0\x00', 'ipddp0\x00', 'veth1_to_team\x00', @empty, [], @link_local, [], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', 'team_slave_1\x00', 'erspan0\x00', @remote, [], @remote, [], 0xc0, 0xc0, 0x108, [@helper={'helper\x00', 0x28, {{0x0, 'RAS\x00'}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'ip6gretap0\x00', 'bridge0\x00', 'veth0\x00', @broadcast, [], @remote, [], 0x70, 0xc0, 0x110}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ifb0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'bridge0\x00', @link_local, [], @remote, [], 0xa8, 0xa8, 0xd8, [@realm={'realm\x00', 0x10}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x4d0) 03:36:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="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", 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000200)={{0x1, 0x0, 0x8, 0x3, 0xffffffffffff5072}, 0x4, 0x3f}) r2 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x40001) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4, 0x8000}, &(0x7f0000000180)=0x8) 03:36:35 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) socket$rds(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x90) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x33, &(0x7f0000000440)={0x1, {}, {{0xa, 0x0, 0x0, @local}}}, 0x108) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20}, 0x1c) 03:36:35 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x9a3, 0xfdf8) r2 = dup(r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000040)={0x1, {r3, r4+30000000}, 0x4, 0x5}) 03:36:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2f2ac457588f57aa2fbb38c932701e5b543ed0bf06ea5d4b5dbf70bfbf7da8e8b565b237ba1c25772083b82134050cfd7286f63f933741593429d5532e440e7cb69bb8c36bf6a0b757bc478533c3daa1872a31ec58361078c7dee388fecc2c259f2bc99f7143c5d3d5bc63f50c6b26a8ac52bc2c80d4a3ae4b256c875b73c8fd35af175b48e047e8b210d7ed5e2bce70a51ecb6eccaa1107cf8a5edd21a7bc4b1a7390ab3e3889d11cc1315e53c11aefdaac79727e1054375dc376d2b2eac3058f960af409da9bb234f98e75bdbd32b61d6d9c3a2fc56caf10100894c50797ceac8fc464467ebc7365e59c4aac214d585864c0aa3f22fc58c95b574220470155ea11a75152fa"], 0x4) [ 351.558379] gfs2: gfs2 mount does not exist [ 351.570604] binder: 21663:21671 got reply transaction with bad transaction stack, transaction 1136 has target 21663:0 [ 351.581566] binder: 21663:21671 transaction failed 29201/-71, size 0-0 line 2774 03:36:35 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030a0000000000000000000000780d06000000000002000000e0000001000000000000000002000100000000000000000000000000030005000000000002000000e00000010000000000000000d502a3accec3f5565180a02909e7f43b8ca1349577150312ec0f9ceb"], 0x50}}, 0x0) 03:36:35 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000056ff8)='./file0\x00', 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x7530}}) 03:36:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 351.615952] xt_helper: cannot load conntrack support for proto=7 [ 351.670441] binder: BINDER_SET_CONTEXT_MGR already set [ 351.681595] binder: 21663:21687 ioctl 40046207 0 returned -16 [ 351.681669] MINIX-fs: bad superblock or unable to read bitmaps [ 351.689238] binder_alloc: 21663: binder_alloc_buf, no vma [ 351.699971] binder: 21663:21671 transaction failed 29189/-3, size 0-0 line 2967 [ 351.708593] xt_helper: cannot load conntrack support for proto=7 [ 351.718191] binder: 21663:21687 got reply transaction with no transaction stack [ 351.726017] binder: 21663:21687 transaction failed 29201/-71, size 0-0 line 2759 [ 351.735505] binder: send failed reply for transaction 1136 to 21663:21671 03:36:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x410000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000002740)=0x9) [ 351.761619] binder: undelivered TRANSACTION_ERROR: 29189 [ 351.767218] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.786745] binder: undelivered TRANSACTION_COMPLETE [ 351.792077] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.797599] binder: undelivered TRANSACTION_ERROR: 29189 [ 351.808415] MINIX-fs: bad superblock or unable to read bitmaps [ 351.882808] FAT-fs (loop1): bogus number of reserved sectors [ 351.888763] FAT-fs (loop1): Can't find a valid FAT filesystem [ 351.908180] gfs2: gfs2 mount does not exist 03:36:35 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d32000)=0xfffffffffffffffc, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x94, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @loopback, 0x4}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @remote}, 0x2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x7fff, @ipv4={[], [], @multicast2}, 0x100000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0x1b, "6034b277779ee8172f1dc8f1e8121c7d1ebdf5194d65b4b23d8615"}, &(0x7f00000001c0)=0x23) 03:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={@ipv4={[], [], @broadcast}, @empty, @mcast2, 0x7, 0x1, 0xf64, 0x500, 0x1, 0x51857fc7353ede36, r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r2, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="6b0618d7c26fa8341b1cd7ede40e7b56550d823592244c236ced9b446faeea2e83fe265b868eff0465bf3f7abaaa668ae50175dae287ea149446e51dc91804d16f78"], 0x1, 0x0) r4 = gettid() setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x20001, 0x4) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) msgrcv(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009b0c0d603a405d319d6c02cfe8603411c4d082f720858ab4d7ceb3429c22dadd34ee2842"], 0x8, 0x0, 0x0) prctl$getname(0x10, &(0x7f0000000000)=""/26) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x100000000001d) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000001c0)={0x3, 0x7fff}) 03:36:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa4200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$addseals(r0, 0x409, 0x7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x1}}, {@common=@access_client='access=client'}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x4}}]}}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x58, 0x0, &(0x7f00000002c0)=[@acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000380)}) 03:36:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000016c0)={0x50, 0x0, 0x6}, 0x50) acct(&(0x7f0000000040)='./file0/file0\x00') 03:36:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(r2, r0, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x80, 0x4, 0x3}}, 0x14) shutdown(r1, 0x1) 03:36:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 352.021599] binder: 21717:21720 got reply transaction with bad transaction stack, transaction 1141 has target 21717:0 [ 352.022926] FAT-fs (loop1): bogus number of reserved sectors [ 352.032672] binder: 21717:21720 transaction failed 29201/-71, size 0-0 line 2774 [ 352.038406] FAT-fs (loop1): Can't find a valid FAT filesystem [ 352.066378] binder: BINDER_SET_CONTEXT_MGR already set 03:36:35 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x6) fallocate(r0, 0x8, 0x0, 0x100000001) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x200) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8000, 0x100, 0x100000001, 0x8, 0x7fffffff}) 03:36:35 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x100) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffb, 0x9) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c03, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x8a) dup3(r1, r1, 0x80000) [ 352.089123] binder: 21717:21727 ioctl 40046207 0 returned -16 [ 352.098418] binder_alloc: 21717: binder_alloc_buf, no vma [ 352.103365] binder: 21717:21727 got reply transaction with no transaction stack [ 352.104216] binder: 21717:21720 transaction failed 29189/-3, size 0-0 line 2967 [ 352.111581] binder: 21717:21727 transaction failed 29201/-71, size 0-0 line 2759 [ 352.127626] binder: release 21717:21720 transaction 1141 out, still active [ 352.134789] binder: undelivered TRANSACTION_COMPLETE [ 352.140097] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.145812] binder: send failed reply for transaction 1141, target dead [ 352.173349] binder: undelivered TRANSACTION_ERROR: 29189 [ 352.179057] binder: undelivered TRANSACTION_ERROR: 29201 03:36:35 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 352.210964] binder: 21730:21739 BC_ACQUIRE_DONE node 1145 has no pending acquire request [ 352.219793] binder: 21730:21739 got reply transaction with no transaction stack [ 352.227329] binder: 21730:21739 transaction failed 29201/-71, size 0-0 line 2759 03:36:35 executing program 6: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x400a00) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x200, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="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"], 0x18}, 0x0) close(r1) close(r0) 03:36:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) 03:36:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0xa000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000280)={0x4, 0x2000}) ioctl(r0, 0x8913, &(0x7f0000000080)="025cca3d6d0044e4f92986") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) mkdir(&(0x7f00000002c0)='./file0/file1\x00', 0xffffffffffffffff) open(&(0x7f0000000000)="2e2f66696c65302f662e6c6530f0", 0x40003ffd, 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x100000213) [ 352.272910] binder: BINDER_SET_CONTEXT_MGR already set [ 352.288751] gfs2: gfs2 mount does not exist [ 352.310936] binder: 21730:21747 ioctl 40046207 0 returned -16 [ 352.317165] binder: undelivered TRANSACTION_ERROR: 29201 03:36:35 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x96) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x7, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)='^', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0xe130, 0x6, 0x4, 0x100000001, 0xfffffffffffffffc}) write(r1, &(0x7f0000000700)="56ed65bbbc9fb2f5c64a585fafa17baba4f06d0720372edbc3c6ba3ef6f0a067a9f8e3f43f34aa9fc7783384aa64976f15c0d2f58e265828fcae983e5164416206be6b49b7282f28804d9aa30feab3b5e39244f497e582436fc6e0c98050ecdef56598d1df5a4234f97538427c9010e7aa6c13afa088658ba5a3cbfd9ffd7be52f815016833a92de0640410249404c55991e4e74d489f7c5bc16869f911d88789a932e1f8d3e130dc2f3e946e5c06888d38e72c72de90c1b213f3e0cbcc13efa8e4b55610a58b1d884d81d8bf05cab9e683fcba1cafa5ad8ffe90db8216f8d3cbfd30dc82db7fe60dbad802a1dd186a8ceb0a4d49d947794992f4a5509ec36cfe88de12485e8f46d7b45b820ebddfc57aa73b11633f7f93477fe8e6ef7729a59d2d643b00500fdfe10653718b35a7d5de7583a199d4f28f4d076c627281160e70f93013915bda7ce6633df24fd9091b93af65780ecdcc35dff01000000000000316c7f416981393306ed6c2b1b98179fd9000000000000cc9c015551f1bb7dfd117ed0628eee3988af31e2040408a632fb55b4f73fec4457b80a806d962a6342553fc028d68b7989", 0x65) lseek(r0, 0x0, 0x7) 03:36:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 352.378672] binder: 21756:21759 got reply transaction with bad transaction stack, transaction 1148 has target 21756:0 [ 352.389834] binder: 21756:21759 transaction failed 29201/-71, size 0-0 line 2774 [ 352.402287] binder: BINDER_SET_CONTEXT_MGR already set [ 352.407808] binder: 21756:21760 ioctl 40046207 0 returned -16 [ 352.415323] binder_alloc: 21756: binder_alloc_buf, no vma [ 352.418153] binder: 21756:21760 got reply transaction with no transaction stack 03:36:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x9, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bcsh0\x00', 0x6}) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000530407031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r1, 0x20}, {r1, 0x2}, {r1, 0x8}], 0x4, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000240)={0x62c7}, 0x8) [ 352.421439] binder: 21756:21759 transaction failed 29189/-3, size 0-0 line 2967 [ 352.428499] binder: 21756:21760 transaction failed 29201/-71, size 0-0 line 2759 [ 352.444580] binder: release 21756:21759 transaction 1148 out, still active [ 352.451830] binder: undelivered TRANSACTION_COMPLETE [ 352.456989] binder: undelivered TRANSACTION_ERROR: 29201 03:36:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc4c85512, &(0x7f0000000200)=0x7) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x10842) setsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000040)="ce9cc70d69cabbbe4a6e86fbeb9581b24be48042d655b03e3e68193df11aaf4e00d7bc26a5ce5d2ef8ca4ea550a3fdb1c0ee5f6ffdbd58703120b8fe99ec3848f14bacfd5ae13e32670420a05fce7488d826efb1c4f2cb890f0821a36240a6a2ff6adef6fe67b8dce084748a5dc8f89c16", 0x71) [ 352.499898] binder: undelivered TRANSACTION_ERROR: 29189 [ 352.505603] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.513228] binder: send failed reply for transaction 1148, target dead [ 352.630115] gfs2: gfs2 mount does not exist [ 352.638811] binder: 21779:21784 got reply transaction with bad transaction stack, transaction 1153 has target 21779:0 [ 352.649865] binder: 21779:21784 transaction failed 29201/-71, size 0-0 line 2774 [ 352.726261] audit: type=1107 audit(2000000196.296:208): pid=21778 uid=0 auid=4294967295 ses=4294967295 msg=' [ 352.726261] ' [ 352.739239] binder: BINDER_SET_CONTEXT_MGR already set [ 352.745522] binder: 21779:21794 ioctl 40046207 0 returned -16 [ 352.791278] binder_alloc: 21779: binder_alloc_buf, no vma [ 352.797169] binder: 21779:21784 transaction failed 29189/-3, size 0-0 line 2967 [ 352.818178] audit: type=1107 audit(2000000196.326:209): pid=21778 uid=0 auid=4294967295 ses=4294967295 msg=' [ 352.818178] ' [ 352.846080] binder: 21779:21794 got reply transaction with no transaction stack [ 352.853765] binder: 21779:21794 transaction failed 29201/-71, size 0-0 line 2759 [ 352.878494] binder: release 21779:21784 transaction 1153 out, still active [ 352.885784] binder: undelivered TRANSACTION_COMPLETE [ 352.890995] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.899467] binder: send failed reply for transaction 1153, target dead [ 352.908896] binder: undelivered TRANSACTION_ERROR: 29189 [ 352.914558] binder: undelivered TRANSACTION_ERROR: 29201 03:36:36 executing program 3: unshare(0x20000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="753b5847037e1f4f9d9fafe04845435f58f60d3858010554aa40c50ee112befad49feb619a30de028887d90371489201fbdc25ad602d8fc8095c9a7720febb28f60221ebcbc8068d1427e7fd21a3a06fde98303598457483d2b1f853461e045c3d7f7eb5a4e6503e6b89ffc85c78f586e610a5f8b3529a855b62242958404007c2ae953cd5583550b6bc8d3e0aea59bc79cb81790b7669aa1421daf72dfda57eb917a9", 0xa3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000000000)={"74756e6c3000fdfdffff000ce000", @ifru_names='tunl0\x00'}) 03:36:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe66, &(0x7f0000000840), 0x0, &(0x7f0000001580)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000140)) pipe(&(0x7f0000000080)) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 03:36:36 executing program 7: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 03:36:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="676673326d657461ff", 0x0, 0x0) 03:36:36 executing program 2: r0 = memfd_create(&(0x7f0000000240)="3fbeaeec9b3af1bdd4c9adf22cb5234ab98cecf21f709d7c7e9c410369f3932b2f52008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877fc79a4ebe7616cdad8bdea2d4d31484a6ad", 0x3) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) write$P9_RVERSION(r0, &(0x7f0000000040)={0xff56, 0x65, 0xffff, 0x81, 0x8, '9P2000.u'}, 0x15) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000), 0xfffffffffffffdfb}], 0x1, 0x0) fcntl$addseals(r0, 0x409, 0x8) 03:36:36 executing program 1: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000440)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000080)=0xffffffff) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000cd8ff4)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) getpid() ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2d}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r2) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:36:36 executing program 5: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972757374e36375736772565f233a4465", 0x0) 03:36:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:36 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0xc29b589d0200c266) r2 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) syncfs(r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380)=0x6) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000000c0)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000740)=""/4096, 0x1000) 03:36:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5437, &(0x7f0000981ffe)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x6, 0x1, 0x1000000, 0xffffffff, 0x8}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r0, 0x5441, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) [ 353.167514] binder: 21816:21826 got reply transaction with bad transaction stack, transaction 1158 has target 21816:0 [ 353.178513] binder: 21816:21826 transaction failed 29201/-71, size 0-0 line 2774 [ 353.209868] binder: BINDER_SET_CONTEXT_MGR already set 03:36:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:36:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) 03:36:36 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0xffffffffffffffff, r1) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) socket(0xa, 0x80004, 0x5) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4014}) prctl$setmm(0x23, 0x3, &(0x7f0000002000/0x2000)=nil) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xf) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 03:36:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000080)={0x344, 0x5, 0x7}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x4c, 0x3, 0x0, 0x0, @irqchip={0x2, 0x200}}, {0x9, 0x0, 0x0, 0x0, @adapter={0x8, 0xf0400000, 0x80, 0x81, 0x101}}]}) sendto$inet6(r0, &(0x7f0000000240)="0404000000c000ddb8460900fff05b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b500350f0f118d0000f55d8a7924b81d000000000000001b0800000000000000000000aeb4", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @remote}, 0x1c) [ 353.259255] binder: 21816:21833 ioctl 40046207 0 returned -16 [ 353.275998] binder_alloc: 21816: binder_alloc_buf, no vma [ 353.281961] binder: 21816:21826 transaction failed 29189/-3, size 0-0 line 2967 [ 353.293166] binder: 21816:21836 got reply transaction with no transaction stack [ 353.300958] binder: 21816:21836 transaction failed 29201/-71, size 0-0 line 2759 [ 353.310995] binder: release 21816:21826 transaction 1158 out, still active [ 353.318163] binder: undelivered TRANSACTION_COMPLETE [ 353.323467] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.365264] binder: undelivered TRANSACTION_ERROR: 29189 [ 353.370974] binder: undelivered TRANSACTION_ERROR: 29201 03:36:37 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:36:37 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x8) [ 353.433820] pts pts0: tty_release: tty->count(3) != (#fd's(2) + #kopen's(0)) [ 353.462381] loop: Write error at byte offset 0, length 4096. [ 353.467069] binder: send failed reply for transaction 1158, target dead [ 353.468297] print_req_error: I/O error, dev loop0, sector 0 03:36:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, 0x0) [ 353.495053] gfs2: gfs2 mount does not exist [ 353.508763] loop: Write error at byte offset 0, length 4096. [ 353.514973] print_req_error: I/O error, dev loop0, sector 0 [ 353.552724] ================================================================== [ 353.560465] BUG: KASAN: user-memory-access in n_tty_set_termios+0x106/0xe80 [ 353.567563] Write of size 512 at addr 0000000000001060 by task syz-executor2/21845 [ 353.575267] [ 353.576899] CPU: 0 PID: 21845 Comm: syz-executor2 Not tainted 4.18.0-rc6+ #160 [ 353.584246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.593592] Call Trace: [ 353.596208] dump_stack+0x1c9/0x2b4 [ 353.599830] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.605017] ? kasan_check_write+0x14/0x20 [ 353.609277] ? do_raw_spin_lock+0xc1/0x200 [ 353.613506] ? vprintk_func+0x81/0xe7 [ 353.617389] ? n_tty_set_termios+0x106/0xe80 [ 353.621789] kasan_report.cold.7+0x6d/0x2fe [ 353.626118] check_memory_region+0x13e/0x1b0 [ 353.630527] memset+0x23/0x40 [ 353.633627] n_tty_set_termios+0x106/0xe80 [ 353.637858] ? n_tty_poll+0xab0/0xab0 [ 353.641653] tty_set_termios+0x7a0/0xac0 [ 353.645709] ? tty_wait_until_sent+0x5d0/0x5d0 [ 353.650286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.655832] set_termios+0x41e/0x7d0 [ 353.659656] ? tty_perform_flush+0x80/0x80 [ 353.663893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.669429] tty_mode_ioctl+0x855/0xb50 [ 353.673664] ? set_termios+0x7d0/0x7d0 [ 353.677548] ? check_same_owner+0x340/0x340 [ 353.681892] n_tty_ioctl_helper+0x54/0x3b0 [ 353.686122] n_tty_ioctl+0x54/0x360 [ 353.689743] ? ldsem_down_read+0x37/0x40 [ 353.693795] ? ldsem_down_read+0x37/0x40 [ 353.697855] tty_ioctl+0x5e1/0x1870 [ 353.701473] ? commit_echoes+0x1c0/0x1c0 [ 353.705526] ? tty_vhangup+0x30/0x30 [ 353.709229] ? rcu_is_watching+0x8c/0x150 [ 353.713383] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 353.717792] ? __fget+0x414/0x670 [ 353.721239] ? expand_files.part.8+0x9c0/0x9c0 [ 353.725813] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 353.730905] ? tty_vhangup+0x30/0x30 [ 353.734615] do_vfs_ioctl+0x1de/0x1720 [ 353.738507] ? ioctl_preallocate+0x300/0x300 [ 353.742919] ? __fget_light+0x2f7/0x440 [ 353.746884] ? __schedule+0x1ed0/0x1ed0 [ 353.750866] ? fget_raw+0x20/0x20 [ 353.754488] ? kmem_cache_free+0x25c/0x2d0 [ 353.758723] ? __x64_sys_futex+0x47f/0x6a0 [ 353.762952] ? exit_to_usermode_loop+0x8c/0x370 [ 353.767630] ? do_futex+0x27d0/0x27d0 [ 353.771429] ? security_file_ioctl+0x94/0xc0 [ 353.775829] ksys_ioctl+0xa9/0xd0 [ 353.779273] __x64_sys_ioctl+0x73/0xb0 [ 353.783155] do_syscall_64+0x1b9/0x820 [ 353.787043] ? finish_task_switch+0x1d3/0x870 [ 353.791528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.796467] ? syscall_return_slowpath+0x31d/0x5e0 [ 353.801394] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 353.806761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.811613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.816801] RIP: 0033:0x455ab9 [ 353.819973] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.839269] RSP: 002b:00007f27fd2dbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.846980] RAX: ffffffffffffffda RBX: 00007f27fd2dc6d4 RCX: 0000000000455ab9 [ 353.854259] RDX: 00000000200000c0 RSI: 0000000000005402 RDI: 0000000000000015 [ 353.861611] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 353.868885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.876149] R13: 00000000004be91b R14: 00000000004cdc78 R15: 0000000000000000 [ 353.883419] ================================================================== [ 353.890763] Disabling lock debugging due to kernel taint [ 353.896536] Kernel panic - not syncing: panic_on_warn set ... [ 353.896536] [ 353.903919] CPU: 0 PID: 21845 Comm: syz-executor2 Tainted: G B 4.18.0-rc6+ #160 [ 353.912664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.922007] Call Trace: [ 353.924591] dump_stack+0x1c9/0x2b4 [ 353.928220] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.933400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 353.938151] panic+0x238/0x4e7 [ 353.941334] ? add_taint.cold.5+0x16/0x16 [ 353.945471] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.949880] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.954293] ? n_tty_set_termios+0x106/0xe80 [ 353.958691] kasan_end_report+0x47/0x4f [ 353.963002] kasan_report.cold.7+0x76/0x2fe [ 353.967321] check_memory_region+0x13e/0x1b0 [ 353.971732] memset+0x23/0x40 [ 353.975024] n_tty_set_termios+0x106/0xe80 [ 353.979251] ? n_tty_poll+0xab0/0xab0 [ 353.983042] tty_set_termios+0x7a0/0xac0 [ 353.987095] ? tty_wait_until_sent+0x5d0/0x5d0 [ 353.991694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.997311] set_termios+0x41e/0x7d0 [ 354.001020] ? tty_perform_flush+0x80/0x80 [ 354.005368] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.010916] tty_mode_ioctl+0x855/0xb50 [ 354.014885] ? set_termios+0x7d0/0x7d0 [ 354.018779] ? check_same_owner+0x340/0x340 [ 354.023093] n_tty_ioctl_helper+0x54/0x3b0 [ 354.027316] n_tty_ioctl+0x54/0x360 [ 354.030930] ? ldsem_down_read+0x37/0x40 [ 354.034974] ? ldsem_down_read+0x37/0x40 [ 354.039039] tty_ioctl+0x5e1/0x1870 [ 354.043350] ? commit_echoes+0x1c0/0x1c0 [ 354.047401] ? tty_vhangup+0x30/0x30 [ 354.051101] ? rcu_is_watching+0x8c/0x150 [ 354.055235] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 354.059646] ? __fget+0x414/0x670 [ 354.063088] ? expand_files.part.8+0x9c0/0x9c0 [ 354.067662] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 354.072767] ? tty_vhangup+0x30/0x30 [ 354.076472] do_vfs_ioctl+0x1de/0x1720 [ 354.080350] ? ioctl_preallocate+0x300/0x300 [ 354.084747] ? __fget_light+0x2f7/0x440 [ 354.088712] ? __schedule+0x1ed0/0x1ed0 [ 354.092676] ? fget_raw+0x20/0x20 [ 354.096124] ? kmem_cache_free+0x25c/0x2d0 [ 354.100352] ? __x64_sys_futex+0x47f/0x6a0 [ 354.104579] ? exit_to_usermode_loop+0x8c/0x370 [ 354.109243] ? do_futex+0x27d0/0x27d0 [ 354.113041] ? security_file_ioctl+0x94/0xc0 [ 354.117454] ksys_ioctl+0xa9/0xd0 [ 354.120895] __x64_sys_ioctl+0x73/0xb0 [ 354.124787] do_syscall_64+0x1b9/0x820 [ 354.128674] ? finish_task_switch+0x1d3/0x870 [ 354.133161] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.138256] ? syscall_return_slowpath+0x31d/0x5e0 [ 354.143179] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.148536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.153377] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.158643] RIP: 0033:0x455ab9 [ 354.161830] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.181042] RSP: 002b:00007f27fd2dbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.188739] RAX: ffffffffffffffda RBX: 00007f27fd2dc6d4 RCX: 0000000000455ab9 [ 354.195995] RDX: 00000000200000c0 RSI: 0000000000005402 RDI: 0000000000000015 [ 354.203254] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 354.210513] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 354.217771] R13: 00000000004be91b R14: 00000000004cdc78 R15: 0000000000000000 [ 354.225703] Dumping ftrace buffer: [ 354.229239] (ftrace buffer empty) [ 354.232940] Kernel Offset: disabled [ 354.236550] Rebooting in 86400 seconds..