)="29d7e1311f160577651070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000580)={@ipv4={[], [], @multicast1}}, &(0x7f0000000540)=0x14) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) 05:44:41 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 203.502260] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.508149] binder: undelivered TRANSACTION_ERROR: 29201 05:44:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x800e0000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 203.578167] binder: 19529:19530 got transaction to invalid handle [ 203.584494] binder: 19529:19530 transaction failed 29201/-22, size 24738-0 line 2852 [ 203.609856] gfs2: invalid mount option: me [ 203.614279] gfs2: can't parse mount arguments [ 203.619776] FAULT_INJECTION: forcing a failure. [ 203.619776] name failslab, interval 1, probability 0, space 0, times 0 [ 203.631127] CPU: 1 PID: 19537 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 203.639550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.648900] Call Trace: [ 203.651477] dump_stack+0x1c9/0x2b4 [ 203.655090] ? dump_stack_print_info.cold.2+0x52/0x52 [ 203.660277] ? zap_class+0x740/0x740 [ 203.663978] ? perf_trace_lock+0xde/0x920 [ 203.668118] should_fail.cold.4+0xa/0x11 [ 203.672168] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 203.677343] ? kernfs_activate+0x8e/0x2c0 [ 203.681484] ? ___ratelimit.cold.2+0x6b/0x6b [ 203.685880] ? kasan_check_write+0x14/0x20 [ 203.690113] ? kernfs_activate+0x21a/0x2c0 [ 203.694339] ? lock_downgrade+0x8f0/0x8f0 [ 203.698485] ? lock_acquire+0x1e4/0x540 [ 203.702470] ? fs_reclaim_acquire+0x20/0x20 [ 203.706777] ? lock_downgrade+0x8f0/0x8f0 [ 203.710923] ? check_same_owner+0x340/0x340 [ 203.715240] ? kasan_check_write+0x14/0x20 [ 203.719908] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 203.724830] ? rcu_note_context_switch+0x730/0x730 [ 203.729843] __should_failslab+0x124/0x180 [ 203.734067] should_failslab+0x9/0x14 [ 203.737865] kmem_cache_alloc+0x2af/0x760 [ 203.742001] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 203.746931] ? kasan_check_write+0x14/0x20 [ 203.751154] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 203.756166] __kernfs_new_node+0xef/0x5a0 [ 203.760312] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 203.765053] ? mutex_unlock+0xd/0x10 [ 203.768760] ? kernfs_activate+0x21a/0x2c0 [ 203.772990] ? kernfs_walk_and_get_ns+0x340/0x340 [ 203.777836] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 203.783359] ? kernfs_link_sibling+0x1d2/0x3b0 [ 203.787938] kernfs_new_node+0x80/0xf0 [ 203.791826] __kernfs_create_file+0x4d/0x330 [ 203.796231] sysfs_add_file_mode_ns+0x21a/0x560 [ 203.800900] internal_create_group+0x282/0x970 [ 203.805467] ? do_raw_spin_lock+0xc1/0x200 [ 203.809692] sysfs_create_group+0x1f/0x30 [ 203.813829] lo_ioctl+0x12bf/0x1d00 [ 203.817446] ? lo_rw_aio_complete+0x450/0x450 [ 203.821938] blkdev_ioctl+0x9cd/0x2030 [ 203.825827] ? lock_acquire+0x1e4/0x540 [ 203.829788] ? blkpg_ioctl+0xc40/0xc40 [ 203.833672] ? lock_release+0xa30/0xa30 [ 203.837646] ? save_stack+0xa9/0xd0 [ 203.841259] ? save_stack+0x43/0xd0 [ 203.844881] ? __fget+0x4d5/0x740 [ 203.848331] ? ksys_dup3+0x690/0x690 [ 203.852028] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 203.856619] ? kasan_check_write+0x14/0x20 [ 203.860836] ? do_raw_spin_lock+0xc1/0x200 [ 203.865145] block_ioctl+0xee/0x130 [ 203.868759] ? blkdev_fallocate+0x400/0x400 [ 203.873065] do_vfs_ioctl+0x1de/0x1720 [ 203.876948] ? ioctl_preallocate+0x300/0x300 [ 203.881350] ? __fget_light+0x2f7/0x440 [ 203.885323] ? fget_raw+0x20/0x20 [ 203.888771] ? trace_hardirqs_on+0xd/0x10 [ 203.892905] ? kmem_cache_free+0x22e/0x2d0 [ 203.897124] ? putname+0xf7/0x130 [ 203.900571] ? do_sys_open+0x3cb/0x720 [ 203.904447] ? security_file_ioctl+0x94/0xc0 [ 203.908843] ksys_ioctl+0xa9/0xd0 [ 203.912292] __x64_sys_ioctl+0x73/0xb0 [ 203.916172] do_syscall_64+0x1b9/0x820 [ 203.920044] ? finish_task_switch+0x1d3/0x870 [ 203.924536] ? syscall_return_slowpath+0x5e0/0x5e0 [ 203.929471] ? syscall_return_slowpath+0x31d/0x5e0 [ 203.934385] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 203.939398] ? prepare_exit_to_usermode+0x291/0x3b0 [ 203.944410] ? perf_trace_sys_enter+0xb10/0xb10 [ 203.949065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.953906] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.959090] RIP: 0033:0x455a17 05:44:42 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 203.962260] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 203.981456] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.989152] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 203.996405] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 204.003667] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 204.010922] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 204.018176] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000000a 05:44:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$update(0x2, r1, &(0x7f00000002c0)="45914efe949da38a1553773f0850f6daace925743c1f4c1d023db022cc905220f688e5e3a22ed8135ed85e78400c9443a06d748a124a1e91abf11263c82a96f234e29703ed2796a5aa7d9b39fa4b7da9020a744c362ba3f573eef3b99dd21281f304f9b81592", 0x66) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 204.034074] binder_alloc: binder_alloc_mmap_handler: 19529 20001000-20004000 already mapped failed -16 [ 204.061214] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 204.061214] [ 204.064033] binder: BINDER_SET_CONTEXT_MGR already set [ 204.078325] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x81000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 204.106919] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 204.144655] Process accounting resumed [ 204.154919] binder: 19529:19544 got transaction to invalid handle [ 204.161271] binder: 19529:19544 transaction failed 29201/-22, size 24738-0 line 2852 [ 204.182529] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 204.185396] binder: 19529:19530 ioctl 40046207 0 returned -16 [ 204.197116] Process accounting resumed 05:44:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="ad56b6ea54c721afbb1dc92232195e8e4247d7bf33e3000000000000000000000000000000", 0xfffffd39) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:42 executing program 3 (fault-call:2 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000580)={@ipv4={[], [], @multicast1}}, &(0x7f0000000540)=0x14) 05:44:42 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340401200000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:42 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667303", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x800, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000140)=""/78, &(0x7f0000000240)=0x4e) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) accept$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 204.235428] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.247799] binder: undelivered TRANSACTION_ERROR: 29201 05:44:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xffff0000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 204.310503] binder: 19588:19590 got transaction to invalid handle [ 204.316911] binder: 19588:19590 transaction failed 29201/-22, size 24738-0 line 2852 [ 204.330599] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 204.330599] [ 204.342101] Process accounting resumed 05:44:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xc80, 0x101) openat(r1, &(0x7f0000000180)='./file0\x00', 0x8000, 0x30) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$addseals(r0, 0x409, 0xb) r2 = socket$alg(0x26, 0x5, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x180) getsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f00000002c0)=""/143, &(0x7f0000000080)=0x8f) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r4 = accept4(r2, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54915d454c90c2000000000000", 0xb) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000380)={{0x5000, 0x2000, 0x10, 0x1, 0xb2, 0x3, 0x77454289, 0x1, 0x80000001, 0x7fffffff, 0x6, 0x8001}, {0xf000, 0x1, 0xe, 0x1, 0x2, 0x9, 0x1, 0x3, 0x5, 0x8, 0x0, 0x1000}, {0x2000, 0x0, 0x8, 0x71, 0x1, 0x1, 0x8, 0x1, 0x9, 0x0, 0x8080000000, 0x3}, {0x100000, 0x0, 0x1d, 0x3, 0x1, 0x4, 0x83, 0x6, 0xff, 0x8, 0xfffffffffffffeff, 0x2}, {0x5000, 0x5001, 0xa, 0x8, 0xfffffffffffffff9, 0x40, 0x758, 0x8000, 0x8, 0x3, 0x10000, 0xf3}, {0x1, 0x2, 0xc, 0x7, 0x88ab, 0x7, 0x8, 0x10000, 0x9, 0x7f, 0x8, 0x8}, {0x13000, 0x0, 0x1b, 0x5, 0xfaa3, 0x3, 0xa9, 0x7f, 0xc8, 0x6, 0x400, 0x8}, {0x10005, 0x4000, 0xb, 0x5, 0x7, 0x7f, 0x932, 0x1, 0x80000001, 0x2, 0x5, 0x4}, {0x1, 0x100000}, {0x6, 0xf000}, 0x10004, 0x0, 0x3004, 0x4, 0x0, 0x4000, 0x0, [0x9, 0x47b, 0xf1a, 0x3]}) renameat2(r3, &(0x7f00000001c0)='./file0/file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x4) write(r4, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000500)=""/107) 05:44:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xd], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 204.362800] FAULT_INJECTION: forcing a failure. [ 204.362800] name failslab, interval 1, probability 0, space 0, times 0 [ 204.374196] CPU: 0 PID: 19593 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 204.382607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.392050] Call Trace: [ 204.394651] dump_stack+0x1c9/0x2b4 [ 204.395297] binder_alloc: binder_alloc_mmap_handler: 19588 20001000-20004000 already mapped failed -16 [ 204.398285] ? dump_stack_print_info.cold.2+0x52/0x52 [ 204.398309] ? rcu_note_context_switch+0x730/0x730 [ 204.398329] should_fail.cold.4+0xa/0x11 [ 204.398350] ? kasan_check_write+0x14/0x20 [ 204.426222] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 204.431340] ? kernfs_activate+0x8e/0x2c0 [ 204.434875] binder: BINDER_SET_CONTEXT_MGR already set [ 204.435500] ? ___ratelimit.cold.2+0x6b/0x6b [ 204.435522] ? mutex_trylock+0x2b0/0x2b0 [ 204.441151] binder: 19588:19590 ioctl 40046207 0 returned -16 [ 204.445183] ? kasan_check_write+0x14/0x20 05:44:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000aa9000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 204.445200] ? __radix_tree_replace+0x188/0x2f0 [ 204.445213] ? kernfs_add_one+0x4f/0x4d0 [ 204.445227] ? kernfs_activate+0x21a/0x2c0 [ 204.445241] ? lock_downgrade+0x8f0/0x8f0 [ 204.445260] ? lock_acquire+0x1e4/0x540 [ 204.449544] binder: 19588:19614 got transaction to invalid handle [ 204.455197] ? fs_reclaim_acquire+0x20/0x20 [ 204.455212] ? lock_downgrade+0x8f0/0x8f0 [ 204.455231] ? check_same_owner+0x340/0x340 [ 204.455246] ? kasan_check_write+0x14/0x20 [ 204.455262] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 204.455275] ? rcu_note_context_switch+0x730/0x730 [ 204.455297] __should_failslab+0x124/0x180 [ 204.459532] binder: 19588:19614 transaction failed 29201/-22, size 24738-0 line 2852 [ 204.464178] should_failslab+0x9/0x14 [ 204.464192] kmem_cache_alloc+0x2af/0x760 [ 204.464211] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 204.481058] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.486785] ? kasan_check_write+0x14/0x20 [ 204.486804] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 204.486822] __kernfs_new_node+0xef/0x5a0 [ 204.486838] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 204.486855] ? mutex_unlock+0xd/0x10 [ 204.491536] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.495318] ? kernfs_activate+0x21a/0x2c0 [ 204.495332] ? kernfs_walk_and_get_ns+0x340/0x340 [ 204.495350] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 204.495362] ? kernfs_link_sibling+0x1d2/0x3b0 [ 204.495378] kernfs_new_node+0x80/0xf0 [ 204.495391] __kernfs_create_file+0x4d/0x330 [ 204.495407] sysfs_add_file_mode_ns+0x21a/0x560 [ 204.603235] internal_create_group+0x282/0x970 [ 204.607832] ? do_raw_spin_lock+0xc1/0x200 [ 204.612073] sysfs_create_group+0x1f/0x30 [ 204.616218] lo_ioctl+0x12bf/0x1d00 [ 204.619834] ? lo_rw_aio_complete+0x450/0x450 [ 204.624340] blkdev_ioctl+0x9cd/0x2030 [ 204.628220] ? lock_acquire+0x1e4/0x540 [ 204.632188] ? blkpg_ioctl+0xc40/0xc40 [ 204.636072] ? lock_release+0xa30/0xa30 [ 204.640050] ? save_stack+0xa9/0xd0 [ 204.643675] ? save_stack+0x43/0xd0 [ 204.647297] ? __fget+0x4d5/0x740 [ 204.650744] ? ksys_dup3+0x690/0x690 [ 204.654556] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 204.659138] ? kasan_check_write+0x14/0x20 [ 204.663357] ? do_raw_spin_lock+0xc1/0x200 [ 204.667578] block_ioctl+0xee/0x130 [ 204.671195] ? blkdev_fallocate+0x400/0x400 [ 204.675511] do_vfs_ioctl+0x1de/0x1720 [ 204.679391] ? ioctl_preallocate+0x300/0x300 [ 204.683784] ? __fget_light+0x2f7/0x440 [ 204.687749] ? fget_raw+0x20/0x20 [ 204.691195] ? trace_hardirqs_on+0xd/0x10 [ 204.695331] ? kmem_cache_free+0x22e/0x2d0 [ 204.699551] ? putname+0xf7/0x130 [ 204.702991] ? do_sys_open+0x3cb/0x720 [ 204.706885] ? security_file_ioctl+0x94/0xc0 [ 204.711302] ksys_ioctl+0xa9/0xd0 [ 204.714746] __x64_sys_ioctl+0x73/0xb0 [ 204.718621] do_syscall_64+0x1b9/0x820 [ 204.722506] ? finish_task_switch+0x1d3/0x870 [ 204.726997] ? syscall_return_slowpath+0x5e0/0x5e0 [ 204.731917] ? syscall_return_slowpath+0x31d/0x5e0 [ 204.737038] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 204.742058] ? prepare_exit_to_usermode+0x291/0x3b0 [ 204.747076] ? perf_trace_sys_enter+0xb10/0xb10 [ 204.751740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 204.756571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 204.761743] RIP: 0033:0x455a17 [ 204.764910] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.784070] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.791999] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 204.799285] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 204.806543] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 204.813809] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 204.821066] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000000b 05:44:43 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 204.866578] binder: 19627:19628 transaction failed 29201/-28, size 24738-0 line 2967 [ 204.888508] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000180)=0x6, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) readv(r1, &(0x7f00000000c0), 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x0, 0x800) ioctl$KVM_NMI(r3, 0xae9a) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x8000000) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 204.913862] Process accounting resumed [ 204.930588] binder_alloc: binder_alloc_mmap_handler: 19627 20001000-20004000 already mapped failed -16 05:44:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 204.959348] binder: BINDER_SET_CONTEXT_MGR already set 05:44:43 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 204.982197] binder: 19627:19628 ioctl 40046207 0 returned -16 [ 205.003112] Process accounting resumed [ 205.011099] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 205.011099] 05:44:43 executing program 3 (fault-call:2 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback=0x7f000001}, 0x1, 0x4, 0x1, 0x3}}, 0x2e) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0xffffffffffffff3e) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:43 executing program 0: r0 = socket$inet6(0xa, 0x8000c, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') read(r0, &(0x7f0000000140)=""/117, 0x75) umount2(&(0x7f00000000c0)='./file0\x00', 0x10000000002) 05:44:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:43 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 205.055826] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 205.056617] Process accounting resumed [ 205.065965] binder_alloc: 19627: binder_alloc_buf, no vma [ 205.074436] binder: 19627:19673 transaction failed 29189/-3, size 24738-0 line 2967 05:44:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 205.130601] Process accounting resumed [ 205.171372] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 205.181806] FAULT_INJECTION: forcing a failure. [ 205.181806] name failslab, interval 1, probability 0, space 0, times 0 [ 205.193091] CPU: 0 PID: 19687 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 205.201506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.210886] Call Trace: [ 205.212706] binder: undelivered TRANSACTION_ERROR: 29189 05:44:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000400000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 205.213485] dump_stack+0x1c9/0x2b4 [ 205.213505] ? dump_stack_print_info.cold.2+0x52/0x52 [ 205.213524] ? rcu_note_context_switch+0x730/0x730 [ 205.219693] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.222582] should_fail.cold.4+0xa/0x11 [ 205.222601] ? kasan_check_write+0x14/0x20 [ 205.222616] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.222631] ? kernfs_activate+0x8e/0x2c0 [ 205.242056] binder: 19703:19704 got transaction to invalid handle [ 205.242213] ? ___ratelimit.cold.2+0x6b/0x6b [ 205.242234] ? mutex_trylock+0x2b0/0x2b0 [ 205.246502] binder: 19703:19704 transaction failed 29201/-22, size 24738-0 line 2852 [ 205.251542] ? kasan_check_write+0x14/0x20 [ 205.251559] ? __radix_tree_replace+0x188/0x2f0 [ 205.251575] ? kernfs_add_one+0x4f/0x4d0 [ 205.258846] binder_alloc: binder_alloc_mmap_handler: 19703 20001000-20004000 already mapped failed -16 [ 205.261921] ? kernfs_activate+0x21a/0x2c0 [ 205.261939] ? lock_downgrade+0x8f0/0x8f0 [ 205.261957] ? lock_acquire+0x1e4/0x540 [ 205.261970] ? fs_reclaim_acquire+0x20/0x20 [ 205.261983] ? lock_downgrade+0x8f0/0x8f0 05:44:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000300000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 205.262000] ? check_same_owner+0x340/0x340 [ 205.269371] binder: BINDER_SET_CONTEXT_MGR already set [ 205.270462] ? kasan_check_write+0x14/0x20 [ 205.270481] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 205.270497] ? rcu_note_context_switch+0x730/0x730 [ 205.270511] __should_failslab+0x124/0x180 [ 205.270531] should_failslab+0x9/0x14 [ 205.283867] binder: 19703:19705 got transaction to invalid handle [ 205.287359] kmem_cache_alloc+0x2af/0x760 [ 205.287378] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 205.287391] ? kasan_check_write+0x14/0x20 [ 205.287412] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 205.291483] binder: 19703:19705 transaction failed 29201/-22, size 24738-0 line 2852 [ 205.300919] __kernfs_new_node+0xef/0x5a0 [ 205.300936] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 205.300952] ? mutex_unlock+0xd/0x10 [ 205.300968] ? kernfs_activate+0x21a/0x2c0 [ 205.308162] binder: 19703:19704 ioctl 40046207 0 returned -16 [ 205.309315] ? kernfs_walk_and_get_ns+0x340/0x340 [ 205.309334] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 205.309346] ? kernfs_link_sibling+0x1d2/0x3b0 [ 205.309361] kernfs_new_node+0x80/0xf0 [ 205.309378] __kernfs_create_file+0x4d/0x330 [ 205.325728] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.326103] sysfs_add_file_mode_ns+0x21a/0x560 [ 205.326120] internal_create_group+0x282/0x970 [ 205.331773] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.335617] ? do_raw_spin_lock+0xc1/0x200 [ 205.335636] sysfs_create_group+0x1f/0x30 [ 205.335652] lo_ioctl+0x12bf/0x1d00 [ 205.335671] ? lo_rw_aio_complete+0x450/0x450 [ 205.335684] blkdev_ioctl+0x9cd/0x2030 [ 205.335696] ? lock_acquire+0x1e4/0x540 [ 205.335706] ? blkpg_ioctl+0xc40/0xc40 [ 205.335719] ? lock_release+0xa30/0xa30 [ 205.335738] ? save_stack+0xa9/0xd0 [ 205.487714] ? save_stack+0x43/0xd0 [ 205.491328] ? __fget+0x4d5/0x740 [ 205.494769] ? ksys_dup3+0x690/0x690 [ 205.498480] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 205.503058] ? kasan_check_write+0x14/0x20 [ 205.507303] ? do_raw_spin_lock+0xc1/0x200 [ 205.511524] block_ioctl+0xee/0x130 [ 205.515146] ? blkdev_fallocate+0x400/0x400 [ 205.519455] do_vfs_ioctl+0x1de/0x1720 [ 205.523329] ? retint_kernel+0x10/0x10 [ 205.527239] ? ioctl_preallocate+0x300/0x300 [ 205.531641] ? __fget_light+0x2f7/0x440 [ 205.535600] ? fget_raw+0x20/0x20 [ 205.539039] ? kmem_cache_free+0x22e/0x2d0 [ 205.543269] ? putname+0xf7/0x130 [ 205.546882] ? do_sys_open+0x3cb/0x720 [ 205.550759] ? security_file_ioctl+0x94/0xc0 [ 205.555155] ksys_ioctl+0xa9/0xd0 [ 205.558595] __x64_sys_ioctl+0x73/0xb0 [ 205.562566] do_syscall_64+0x1b9/0x820 [ 205.566448] ? finish_task_switch+0x1d3/0x870 [ 205.570927] ? syscall_return_slowpath+0x5e0/0x5e0 [ 205.575843] ? syscall_return_slowpath+0x31d/0x5e0 [ 205.580760] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 205.585775] ? prepare_exit_to_usermode+0x291/0x3b0 [ 205.590886] ? perf_trace_sys_enter+0xb10/0xb10 [ 205.595550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.600380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.605552] RIP: 0033:0x455a17 05:44:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x80350000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 205.608721] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.627902] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.635680] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 205.642933] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 205.650196] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 205.657459] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 205.664722] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000000c 05:44:43 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x1ff, 0x4) ioctl$TCSBRKP(r2, 0x5425, 0x400) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x3, 0xb9e1, 0x1734}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0) write(r1, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 205.683076] Process accounting resumed 05:44:43 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:43 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0d') [ 205.709134] binder: 19712:19713 got transaction to invalid handle [ 205.715480] binder: 19712:19713 transaction failed 29201/-22, size 24738-0 line 2852 [ 205.723499] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 205.723499] 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8864], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$alg(0x26, 0x5, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:44 executing program 1: r0 = socket$inet6(0xa, 0x1000020000005, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 205.790187] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 205.811975] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x0, 0x5}) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0xe201, 0x9}, 'port0\x00', 0x4, 0x2, 0x1f, 0x8000, 0x6, 0x2, 0x6, 0x0, 0x4, 0x1}) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 205.845843] binder_alloc: binder_alloc_mmap_handler: 19712 20001000-20004000 already mapped failed -16 [ 205.855565] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 205.894763] binder: BINDER_SET_CONTEXT_MGR already set [ 205.908421] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 205.908421] [ 205.917077] binder: 19712:19713 ioctl 40046207 0 returned -16 [ 205.929303] binder: 19712:19747 got transaction to invalid handle [ 205.935627] binder: 19712:19747 transaction failed 29201/-22, size 24738-0 line 2852 [ 205.950167] Process accounting resumed 05:44:44 executing program 3 (fault-call:2 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xf000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:44 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)="2e2f66696c6530f6") 05:44:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000180)={@multicast1, @dev}, &(0x7f00000001c0)=0xc) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="2812ee83f41d2f0cf1f3759dbc6ec79eaeb0f207d7f08a2d65ca4bb2c4b4f6396081db1bb82ae855e379a3b897f3493d0058750d1de060245b413fdc287a68ee3978b31ccbb68fb0eaf79f3a3cd7301016f91959f66fef2973722a0e8bf156a9e0ec68a27c813cc1460705bb9248bc6654caeae67e9be731c4ed24019c7aba9a75e252b583e4a4cddc9bf19a", 0x8c, 0x263}, {&(0x7f0000000400)="c481545a36b89a84f9e7d01ad84c53b3e54660b315bf10ad750e5c8701ded84a8d5f4592928a7c48e407624820f57707399fd6424d4c80dfbb215309ffd3cc36858ec94c09425e5ac3c03c706c9f95a8f7e615e6cd8ec22ecebc1e51266e1b34729341c8d1edda8b178300b2d233091f37cda3d9e0d58589b1196df25aec43a7256a272251d1ede9826622ac04202bf57f70393d6c91929a247fca66ef01c885691d8d7b4018ade42d88b2534fe42dac5600a595f58285015e983c6ff5a56ae0afa0f8f1a3af66d2362d9ac9e0f510a95260211389f54d48840412a515eda7279bb44f7de917537925af741c", 0xec, 0xfffffffffffffbff}, {&(0x7f0000000500)="99045516ba6fb82744ed5d36cb517870171999667e9a69f2ddc88306e6be573eeba19161a2a607ed9b76226cbc4852cf3ea8ee45c7565b54fb90a06d4fbcc40938f6e9879bbe56e27f6861c0f0b53726a33e3b3fbc5720003ee79d2ac6599c20f85a05f73b085a86eabca83fa12c80e14065750a9d5960f8066e03c462b40173fd4379e65a1b5955a8b686ce", 0x8c, 0x6}], 0x1, &(0x7f0000000640)={[{@usrjquota='usrjquota=', 0x2c}]}) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000080)={0x9, 0x5c5, 0x6, 0x7ff, 0x6, 0x9}) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:44 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 206.030908] Process accounting resumed [ 206.041855] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 206.048987] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 206.084282] FAULT_INJECTION: forcing a failure. [ 206.084282] name failslab, interval 1, probability 0, space 0, times 0 [ 206.084382] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.095650] CPU: 1 PID: 19793 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 206.106711] Process accounting resumed [ 206.109497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.109502] Call Trace: [ 206.109527] dump_stack+0x1c9/0x2b4 [ 206.109548] ? dump_stack_print_info.cold.2+0x52/0x52 [ 206.114650] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.122776] ? rcu_note_context_switch+0x730/0x730 [ 206.122799] should_fail.cold.4+0xa/0x11 [ 206.122815] ? kasan_check_write+0x14/0x20 [ 206.122833] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 206.141022] Process accounting resumed [ 206.144544] ? kernfs_activate+0x8e/0x2c0 [ 206.144563] ? ___ratelimit.cold.2+0x6b/0x6b [ 206.144585] ? mutex_trylock+0x2b0/0x2b0 [ 206.174456] ? kasan_check_write+0x14/0x20 [ 206.178760] ? __radix_tree_replace+0x188/0x2f0 [ 206.183441] ? kernfs_add_one+0x4f/0x4d0 [ 206.187526] ? kernfs_activate+0x21a/0x2c0 [ 206.190178] binder: 19812:19813 got transaction to invalid handle [ 206.191774] ? lock_downgrade+0x8f0/0x8f0 [ 206.191792] ? lock_acquire+0x1e4/0x540 [ 206.191811] ? fs_reclaim_acquire+0x20/0x20 [ 206.198085] binder: 19812:19813 transaction failed 29201/-22, size 24738-0 line 2852 [ 206.202206] ? lock_downgrade+0x8f0/0x8f0 [ 206.202227] ? check_same_owner+0x340/0x340 [ 206.226818] ? kasan_check_write+0x14/0x20 05:44:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000a00000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8100], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f00000002c0)="58024b65ed759aef0053c7cc37dd6f9362ba25d20060aea48df3cbd64440b695fc5c701b77fbba24a8fde777ff438b082c2213daac5643b797c3d6cb5bf3676ace85e56ff2319fb308494f7875f7777543011df8eca2088c48f872a529cf4a9fac4744124ff916f1f5eeec7a7b4b2ca48bf1de55ac1435e80cb6abde177e2520a439b08143ab0acaf44087e2462f33b0c5fe7cf4b435162930f4af2030649e210bc60ea146af0831d5cee6bf2ee4da924f0b8306571d36f03e86e0804aeca279c73c9c3058a99e9b3e73dde34d0a06e3c09cf5aa1dcd5621c874307196e81d5003052b743b0e091434cc409e589ba4b54aeba1c5b8523b06") acct(&(0x7f0000000200)='./file0\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080), 0x4) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x4788], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x6], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 206.231082] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 206.236024] ? rcu_note_context_switch+0x730/0x730 [ 206.240966] __should_failslab+0x124/0x180 [ 206.244084] binder_alloc: binder_alloc_mmap_handler: 19812 20001000-20004000 already mapped failed -16 [ 206.245214] should_failslab+0x9/0x14 [ 206.245232] kmem_cache_alloc+0x2af/0x760 [ 206.245249] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 206.245262] ? kasan_check_write+0x14/0x20 [ 206.245277] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 206.245296] __kernfs_new_node+0xef/0x5a0 [ 206.273600] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 206.273600] [ 206.276799] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 206.276819] ? mutex_unlock+0xd/0x10 [ 206.282957] binder: BINDER_SET_CONTEXT_MGR already set [ 206.291779] ? kernfs_activate+0x21a/0x2c0 [ 206.291793] ? kernfs_walk_and_get_ns+0x340/0x340 [ 206.291811] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 206.291822] ? kernfs_link_sibling+0x1d2/0x3b0 [ 206.291837] kernfs_new_node+0x80/0xf0 [ 206.291850] __kernfs_create_file+0x4d/0x330 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x88640000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 206.291867] sysfs_add_file_mode_ns+0x21a/0x560 [ 206.308604] binder: 19812:19818 got transaction to invalid handle [ 206.309816] internal_create_group+0x282/0x970 [ 206.309832] ? do_raw_spin_lock+0xc1/0x200 [ 206.309850] sysfs_create_group+0x1f/0x30 [ 206.309867] lo_ioctl+0x12bf/0x1d00 [ 206.309885] ? lo_rw_aio_complete+0x450/0x450 [ 206.314733] binder: 19812:19818 transaction failed 29201/-22, size 24738-0 line 2852 [ 206.320244] blkdev_ioctl+0x9cd/0x2030 [ 206.320258] ? lock_acquire+0x1e4/0x540 [ 206.320274] ? blkpg_ioctl+0xc40/0xc40 05:44:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000006c00000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 206.335488] binder: 19812:19813 ioctl 40046207 0 returned -16 [ 206.337808] ? lock_release+0xa30/0xa30 [ 206.337829] ? save_stack+0xa9/0xd0 [ 206.337843] ? save_stack+0x43/0xd0 [ 206.337858] ? __fget+0x4d5/0x740 [ 206.337872] ? ksys_dup3+0x690/0x690 [ 206.337889] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 206.387453] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.390676] ? kasan_check_write+0x14/0x20 [ 206.390692] ? do_raw_spin_lock+0xc1/0x200 [ 206.390709] block_ioctl+0xee/0x130 [ 206.390720] ? blkdev_fallocate+0x400/0x400 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x88caffff], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 206.390757] do_vfs_ioctl+0x1de/0x1720 [ 206.399802] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.401959] ? ioctl_preallocate+0x300/0x300 [ 206.401974] ? __fget_light+0x2f7/0x440 [ 206.401987] ? fget_raw+0x20/0x20 [ 206.402004] ? trace_hardirqs_on+0xd/0x10 [ 206.402021] ? kmem_cache_free+0x22e/0x2d0 [ 206.423649] binder: 19831:19832 got transaction to invalid handle [ 206.427651] ? putname+0xf7/0x130 [ 206.427666] ? do_sys_open+0x3cb/0x720 [ 206.427686] ? security_file_ioctl+0x94/0xc0 [ 206.431317] binder: 19831:19832 transaction failed 29201/-22, size 24738-0 line 2852 [ 206.435617] ksys_ioctl+0xa9/0xd0 [ 206.435637] __x64_sys_ioctl+0x73/0xb0 [ 206.457879] binder_alloc: binder_alloc_mmap_handler: 19831 20001000-20004000 already mapped failed -16 [ 206.460920] do_syscall_64+0x1b9/0x820 [ 206.460936] ? finish_task_switch+0x1d3/0x870 [ 206.460952] ? syscall_return_slowpath+0x5e0/0x5e0 [ 206.460968] ? syscall_return_slowpath+0x31d/0x5e0 [ 206.460979] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 206.460996] ? prepare_exit_to_usermode+0x291/0x3b0 [ 206.474918] binder: BINDER_SET_CONTEXT_MGR already set [ 206.478782] ? perf_trace_sys_enter+0xb10/0xb10 [ 206.478799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.478818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.478829] RIP: 0033:0x455a17 [ 206.478832] Code: 48 [ 206.485385] binder: 19831:19834 got transaction to invalid handle [ 206.491105] 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.491294] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.491307] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 206.491313] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 206.491319] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 206.491326] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 206.491333] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000000d [ 206.520583] binder: 19831:19832 ioctl 40046207 0 returned -16 [ 206.521744] binder: 19831:19834 transaction failed 29201/-22, size 24738-0 line 2852 [ 206.534412] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 206.598974] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.603839] Process accounting resumed [ 206.630068] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.640937] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 206.645223] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 206.702243] Process accounting resumed 05:44:44 executing program 3 (fault-call:2 fault-nth:14): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x89060000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:44 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400aa8000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:44 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r0, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ff00060001000000000000000000", 0xfffffffffffffe18) 05:44:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:44 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8035], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 206.776546] binder: 19864:19865 got transaction to invalid handle [ 206.782890] binder: 19864:19865 transaction failed 29201/-22, size 24738-0 line 2852 [ 206.799471] Process accounting resumed [ 206.815094] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 206.815094] 05:44:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1000, 0x1, 0x5, 0xc90, 0x6}, 0xc) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 206.836684] binder_alloc: binder_alloc_mmap_handler: 19864 20001000-20004000 already mapped failed -16 [ 206.855108] Process accounting resumed [ 206.865842] FAULT_INJECTION: forcing a failure. [ 206.865842] name failslab, interval 1, probability 0, space 0, times 0 [ 206.877241] CPU: 1 PID: 19889 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 05:44:45 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0xffffff7c) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0xfffffffffffffe2c) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000080)=0x4) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000140)) [ 206.885650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.895008] Call Trace: [ 206.897608] dump_stack+0x1c9/0x2b4 [ 206.901249] ? dump_stack_print_info.cold.2+0x52/0x52 [ 206.906456] ? rcu_note_context_switch+0x730/0x730 [ 206.911404] should_fail.cold.4+0xa/0x11 [ 206.915481] ? kasan_check_write+0x14/0x20 [ 206.919732] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 206.924842] ? kernfs_activate+0x8e/0x2c0 [ 206.929000] ? ___ratelimit.cold.2+0x6b/0x6b [ 206.933420] ? mutex_trylock+0x2b0/0x2b0 05:44:45 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r1, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 206.937491] ? kasan_check_write+0x14/0x20 [ 206.941765] ? __radix_tree_replace+0x188/0x2f0 [ 206.946442] ? kernfs_add_one+0x4f/0x4d0 [ 206.950537] ? kernfs_activate+0x21a/0x2c0 [ 206.953456] binder: 19864:19890 got transaction to invalid handle [ 206.954788] ? lock_downgrade+0x8f0/0x8f0 [ 206.954808] ? lock_acquire+0x1e4/0x540 [ 206.954823] ? fs_reclaim_acquire+0x20/0x20 [ 206.954836] ? lock_downgrade+0x8f0/0x8f0 [ 206.954854] ? check_same_owner+0x340/0x340 [ 206.954869] ? kasan_check_write+0x14/0x20 05:44:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0xb6f8bc2ddb2d4ec0) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="ad56b6ea54c721f26c5e7cef915d564c90c20000210000000000000050fc620af4468cf045288049a23c4ecdb0f026a47032cb22a436c5346c11f3", 0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'gretap0\x00', 0x4}, 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 206.954882] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 206.954900] ? rcu_note_context_switch+0x730/0x730 [ 206.961154] binder: 19864:19890 transaction failed 29201/-22, size 24738-0 line 2852 [ 206.965264] __should_failslab+0x124/0x180 [ 206.965288] should_failslab+0x9/0x14 [ 206.998059] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 206.998059] [ 207.004464] kmem_cache_alloc+0x2af/0x760 [ 207.004482] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 207.004496] ? kasan_check_write+0x14/0x20 05:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 207.004514] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 207.004529] __kernfs_new_node+0xef/0x5a0 [ 207.004549] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 207.034356] binder: BINDER_SET_CONTEXT_MGR already set [ 207.036797] ? mutex_unlock+0xd/0x10 [ 207.036815] ? kernfs_activate+0x21a/0x2c0 [ 207.042445] binder: 19864:19865 ioctl 40046207 0 returned -16 [ 207.045952] ? kernfs_walk_and_get_ns+0x340/0x340 [ 207.045971] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 207.045983] ? kernfs_link_sibling+0x1d2/0x3b0 05:44:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400700000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 207.045999] kernfs_new_node+0x80/0xf0 [ 207.046014] __kernfs_create_file+0x4d/0x330 [ 207.046032] sysfs_add_file_mode_ns+0x21a/0x560 [ 207.085687] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.088760] internal_create_group+0x282/0x970 [ 207.088776] ? do_raw_spin_lock+0xc1/0x200 [ 207.088791] sysfs_create_group+0x1f/0x30 [ 207.088809] lo_ioctl+0x12bf/0x1d00 [ 207.094353] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.098410] ? lo_rw_aio_complete+0x450/0x450 [ 207.098425] blkdev_ioctl+0x9cd/0x2030 [ 207.098439] ? lock_acquire+0x1e4/0x540 [ 207.098455] ? blkpg_ioctl+0xc40/0xc40 [ 207.142107] ? lock_release+0xa30/0xa30 [ 207.146090] ? save_stack+0xa9/0xd0 [ 207.149734] ? save_stack+0x43/0xd0 [ 207.153354] ? __fget+0x4d5/0x740 [ 207.156803] ? ksys_dup3+0x690/0x690 [ 207.160529] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 207.165108] ? kasan_check_write+0x14/0x20 [ 207.169339] ? do_raw_spin_lock+0xc1/0x200 [ 207.173579] block_ioctl+0xee/0x130 [ 207.177203] ? blkdev_fallocate+0x400/0x400 [ 207.181506] do_vfs_ioctl+0x1de/0x1720 [ 207.185378] ? ioctl_preallocate+0x300/0x300 [ 207.189775] ? __fget_light+0x2f7/0x440 [ 207.193733] ? fget_raw+0x20/0x20 [ 207.197186] ? trace_hardirqs_on+0xd/0x10 [ 207.201318] ? kmem_cache_free+0x22e/0x2d0 [ 207.205544] ? putname+0xf7/0x130 [ 207.208989] ? do_sys_open+0x3cb/0x720 [ 207.212867] ? security_file_ioctl+0x94/0xc0 [ 207.217266] ksys_ioctl+0xa9/0xd0 [ 207.220722] __x64_sys_ioctl+0x73/0xb0 [ 207.224606] do_syscall_64+0x1b9/0x820 [ 207.228649] ? finish_task_switch+0x1d3/0x870 [ 207.233141] ? syscall_return_slowpath+0x5e0/0x5e0 [ 207.238164] ? syscall_return_slowpath+0x31d/0x5e0 [ 207.243086] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 207.248106] ? prepare_exit_to_usermode+0x291/0x3b0 [ 207.253105] ? perf_trace_sys_enter+0xb10/0xb10 [ 207.257769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.262605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.267787] RIP: 0033:0x455a17 [ 207.270956] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.290130] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.297842] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 207.305112] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 207.312383] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 207.319646] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 207.326910] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000000e [ 207.378570] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 207.379975] binder: 19925:19937 got transaction to invalid handle [ 207.394365] binder: 19925:19937 transaction failed 29201/-22, size 24738-0 line 2852 05:44:45 executing program 3 (fault-call:2 fault-nth:15): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/236, 0xec, 0x1, 0x0, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="6f70656e70726f6d66730058c89565fce906e8c44cb7402a6a4e251bc92d5e0ed1fbf7519203e1f4058bc07a774b606c60b189f189b1936b9092dbaef8d9bd3a1729b4a5e831844958d1bd24f12aa300aff4a01b1ef5cf90695c0310cdc17c78f762488b917cff8ca7d4ef30e5cc80d8df0ed96802c08164b28f06cec967b71313888669ddc58d43df1564df58813732f7f4f790b674db51f14a6f0eb41b36b1e2cb6694f7307343c4809bdc58bf864b783d4bc76159dc13ddad94d2cdcd34645810cc2f67f1fd750e7d1914fddce9ce404de5a083e6709af4d68c671d49bf", 0x101000, &(0x7f00000002c0)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) open_by_handle_at(r0, &(0x7f0000000400)={0x9f, 0x101, "9bce9a4053501e26efa8111517829f3db6319583cbd1aa3cd40e8b72e45d8e0be065c1fa5c600550bdc18e02fff34c0081f8396bdfa41c7f7b2d713bde542d2d4069255e2558f188921d395b98967e16eb7a17c0308e261f56ec6f67f7755ad4a0d7fe1f8be75728e078b7f9d9f59023c7b60abf9f5c80f90f0795d8e28b5da9f2a77a4d23ece3e30a32bf08f57d3c4d6460306b9aee81"}, 0x20000) 05:44:45 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:45 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667302", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:45 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x14000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:45 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r1, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) recvfrom$inet6(r1, &(0x7f00000002c0)=""/220, 0xdc, 0x2041, 0x0, 0x0) [ 207.477972] Process accounting resumed [ 207.492907] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 207.492907] [ 207.505946] FAULT_INJECTION: forcing a failure. [ 207.505946] name failslab, interval 1, probability 0, space 0, times 0 [ 207.517389] CPU: 0 PID: 19963 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 207.525832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.535190] Call Trace: [ 207.537797] dump_stack+0x1c9/0x2b4 [ 207.541440] ? dump_stack_print_info.cold.2+0x52/0x52 [ 207.546667] ? rcu_note_context_switch+0x730/0x730 [ 207.546815] binder_alloc: binder_alloc_mmap_handler: 19925 20001000-20004000 already mapped failed -16 [ 207.551606] should_fail.cold.4+0xa/0x11 [ 207.551628] ? kasan_check_write+0x14/0x20 [ 207.551644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 207.551656] ? kernfs_activate+0x8e/0x2c0 05:44:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @loopback=0x7f000001}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, {0x2, 0x4e23, @rand_addr=0xfffffffffffffffc}, 'veth0_to_bridge\x00'}) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @rand_addr=0x5}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0x4, 0x7}, &(0x7f00000001c0)=0xc) 05:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x3580], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 207.551677] ? ___ratelimit.cold.2+0x6b/0x6b [ 207.583044] ? mutex_trylock+0x2b0/0x2b0 [ 207.587137] ? kasan_check_write+0x14/0x20 [ 207.591390] ? __radix_tree_replace+0x188/0x2f0 [ 207.596071] ? kernfs_add_one+0x4f/0x4d0 [ 207.600147] ? kernfs_activate+0x21a/0x2c0 [ 207.604389] ? lock_downgrade+0x8f0/0x8f0 [ 207.608547] ? lock_acquire+0x1e4/0x540 [ 207.612526] ? fs_reclaim_acquire+0x20/0x20 [ 207.616857] ? lock_downgrade+0x8f0/0x8f0 [ 207.621043] ? check_same_owner+0x340/0x340 [ 207.624580] binder: BINDER_SET_CONTEXT_MGR already set [ 207.625368] ? kasan_check_write+0x14/0x20 [ 207.625385] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 207.625404] ? rcu_note_context_switch+0x730/0x730 [ 207.644748] __should_failslab+0x124/0x180 [ 207.648995] should_failslab+0x9/0x14 [ 207.652812] kmem_cache_alloc+0x2af/0x760 [ 207.657005] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 207.660678] binder: 19925:19971 got transaction to invalid handle [ 207.661949] ? kasan_check_write+0x14/0x20 [ 207.661968] ? __sanitizer_cov_trace_cmp8+0x18/0x20 05:44:45 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x18], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 207.661987] __kernfs_new_node+0xef/0x5a0 [ 207.662004] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 207.662020] ? mutex_unlock+0xd/0x10 [ 207.662030] ? kernfs_activate+0x21a/0x2c0 [ 207.662047] ? kernfs_walk_and_get_ns+0x340/0x340 [ 207.668398] binder: 19925:19971 transaction failed 29201/-22, size 24738-0 line 2852 [ 207.672586] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 207.672598] ? kernfs_link_sibling+0x1d2/0x3b0 [ 207.672610] kernfs_new_node+0x80/0xf0 [ 207.672622] __kernfs_create_file+0x4d/0x330 [ 207.672634] sysfs_add_file_mode_ns+0x21a/0x560 [ 207.672652] internal_create_group+0x282/0x970 [ 207.735031] ? do_raw_spin_lock+0xc1/0x200 [ 207.739284] sysfs_create_group+0x1f/0x30 [ 207.743483] lo_ioctl+0x12bf/0x1d00 [ 207.747121] ? lo_rw_aio_complete+0x450/0x450 [ 207.751647] blkdev_ioctl+0x9cd/0x2030 [ 207.755538] ? lock_acquire+0x1e4/0x540 [ 207.759538] ? blkpg_ioctl+0xc40/0xc40 [ 207.763432] ? lock_release+0xa30/0xa30 [ 207.767589] ? save_stack+0xa9/0xd0 [ 207.771229] ? save_stack+0x43/0xd0 [ 207.774868] ? __fget+0x4d5/0x740 05:44:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0xffffffffffffffa4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x20000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) write$cgroup_pid(r2, &(0x7f0000000200)={[0x35, 0x30, 0x35, 0x35, 0x35, 0x30, 0x30, 0x31, 0x34, 0x32]}, 0xa) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 207.775047] binder: 19925:19937 ioctl 40046207 0 returned -16 [ 207.778410] ? ksys_dup3+0x690/0x690 [ 207.778426] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 207.778443] ? kasan_check_write+0x14/0x20 [ 207.778455] ? do_raw_spin_lock+0xc1/0x200 [ 207.778469] block_ioctl+0xee/0x130 [ 207.778485] ? blkdev_fallocate+0x400/0x400 [ 207.809090] do_vfs_ioctl+0x1de/0x1720 [ 207.812987] ? ioctl_preallocate+0x300/0x300 [ 207.817399] ? __fget_light+0x2f7/0x440 [ 207.821376] ? fget_raw+0x20/0x20 [ 207.824833] ? trace_hardirqs_on+0xd/0x10 [ 207.828988] ? kmem_cache_free+0x22e/0x2d0 [ 207.833236] ? putname+0xf7/0x130 [ 207.836698] ? do_sys_open+0x3cb/0x720 [ 207.840588] ? security_file_ioctl+0x94/0xc0 [ 207.845001] ksys_ioctl+0xa9/0xd0 [ 207.848636] __x64_sys_ioctl+0x73/0xb0 [ 207.852527] do_syscall_64+0x1b9/0x820 [ 207.856418] ? finish_task_switch+0x1d3/0x870 [ 207.860917] ? syscall_return_slowpath+0x5e0/0x5e0 [ 207.865940] ? syscall_return_slowpath+0x31d/0x5e0 [ 207.870884] ? prepare_exit_to_usermode+0x3b0/0x3b0 05:44:46 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340406c00000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 207.875910] ? prepare_exit_to_usermode+0x291/0x3b0 [ 207.880945] ? perf_trace_sys_enter+0xb10/0xb10 [ 207.885615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.890581] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.894452] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.895783] RIP: 0033:0x455a17 [ 207.895787] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.907289] binder: undelivered TRANSACTION_ERROR: 29201 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 207.923672] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.923685] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 207.923692] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 207.923700] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 207.923708] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 207.923716] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000000f [ 207.933143] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 207.938248] Process accounting resumed [ 207.980960] binder: BINDER_SET_CONTEXT_MGR already set 05:44:46 executing program 3 (fault-call:2 fault-nth:16): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 208.056332] binder: 20019:20020 ioctl 40046207 0 returned -16 [ 208.069099] binder: 20019:20020 got transaction to invalid handle [ 208.075471] binder: 20019:20020 transaction failed 29201/-22, size 24738-0 line 2852 [ 208.101834] binder_alloc: binder_alloc_mmap_handler: 20019 20001000-20004000 already mapped failed -16 [ 208.106657] FAULT_INJECTION: forcing a failure. [ 208.106657] name failslab, interval 1, probability 0, space 0, times 0 [ 208.123056] CPU: 0 PID: 20041 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 208.131467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.140270] binder: 20019:20042 got transaction to invalid handle [ 208.140821] Call Trace: 05:44:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x800000000) 05:44:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x4, 0xa, 0x80000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0x5}, &(0x7f00000001c0)=0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef935d564c90c2000000000000", 0xfffffffffffffe45) write(r4, &(0x7f0000000100)="040000001a0025f00485bc04fef4001c0a0b49ffed000000800008000800030001", 0x21) 05:44:46 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:46 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 208.147104] binder: 20019:20042 transaction failed 29201/-22, size 24738-0 line 2852 [ 208.149641] dump_stack+0x1c9/0x2b4 [ 208.149663] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.166329] ? rcu_note_context_switch+0x730/0x730 [ 208.171271] should_fail.cold.4+0xa/0x11 [ 208.175340] ? kasan_check_write+0x14/0x20 [ 208.179582] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.184691] ? kernfs_activate+0x8e/0x2c0 [ 208.188851] ? ___ratelimit.cold.2+0x6b/0x6b [ 208.193279] ? mutex_trylock+0x2b0/0x2b0 [ 208.197347] ? kasan_check_write+0x14/0x20 [ 208.201589] ? __radix_tree_replace+0x188/0x2f0 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:46 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 208.206259] ? kernfs_add_one+0x4f/0x4d0 [ 208.210327] ? kernfs_activate+0x21a/0x2c0 [ 208.214570] ? lock_downgrade+0x8f0/0x8f0 [ 208.218728] ? lock_acquire+0x1e4/0x540 [ 208.222706] ? fs_reclaim_acquire+0x20/0x20 [ 208.227033] ? lock_downgrade+0x8f0/0x8f0 [ 208.231199] ? check_same_owner+0x340/0x340 [ 208.235535] ? kasan_check_write+0x14/0x20 [ 208.239864] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 208.245420] ? rcu_note_context_switch+0x730/0x730 [ 208.250353] __should_failslab+0x124/0x180 [ 208.254599] should_failslab+0x9/0x14 [ 208.254694] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 208.254694] [ 208.258400] kmem_cache_alloc+0x2af/0x760 [ 208.258418] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 208.258433] ? kasan_check_write+0x14/0x20 [ 208.258450] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 208.258477] __kernfs_new_node+0xef/0x5a0 [ 208.277111] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 208.278295] ? kernfs_dop_revalidate+0x3c0/0x3c0 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xf0], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) accept4(r1, 0x0, &(0x7f0000000040), 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r1, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b690300010000000000000000000000", 0x21) [ 208.278313] ? mutex_unlock+0xd/0x10 [ 208.278324] ? kernfs_activate+0x21a/0x2c0 [ 208.278341] ? kernfs_walk_and_get_ns+0x340/0x340 [ 208.318106] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 208.323651] ? kernfs_link_sibling+0x1d2/0x3b0 [ 208.328264] kernfs_new_node+0x80/0xf0 [ 208.332161] __kernfs_create_file+0x4d/0x330 [ 208.336602] sysfs_add_file_mode_ns+0x21a/0x560 [ 208.341317] internal_create_group+0x282/0x970 [ 208.345903] ? do_raw_spin_lock+0xc1/0x200 [ 208.350149] sysfs_create_group+0x1f/0x30 [ 208.354416] lo_ioctl+0x12bf/0x1d00 [ 208.358052] ? lo_rw_aio_complete+0x450/0x450 [ 208.362549] blkdev_ioctl+0x9cd/0x2030 [ 208.366443] ? lock_acquire+0x1e4/0x540 [ 208.370418] ? blkpg_ioctl+0xc40/0xc40 [ 208.374311] ? lock_release+0xa30/0xa30 [ 208.378303] ? save_stack+0xa9/0xd0 [ 208.381942] ? save_stack+0x43/0xd0 [ 208.385583] ? __fget+0x4d5/0x740 [ 208.389053] ? ksys_dup3+0x690/0x690 [ 208.392780] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 208.397457] ? kasan_check_write+0x14/0x20 [ 208.401694] ? do_raw_spin_lock+0xc1/0x200 05:44:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000003000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x600], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = pkey_alloc(0x0, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200481, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$alg(0x26, 0x5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r4, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) close(r0) [ 208.405935] block_ioctl+0xee/0x130 [ 208.409594] ? blkdev_fallocate+0x400/0x400 [ 208.413916] do_vfs_ioctl+0x1de/0x1720 [ 208.417811] ? ioctl_preallocate+0x300/0x300 [ 208.418315] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.422220] ? __fget_light+0x2f7/0x440 [ 208.422234] ? fget_raw+0x20/0x20 [ 208.422251] ? trace_hardirqs_on+0xd/0x10 [ 208.422267] ? kmem_cache_free+0x22e/0x2d0 [ 208.422281] ? putname+0xf7/0x130 [ 208.422296] ? do_sys_open+0x3cb/0x720 [ 208.442819] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.443564] ? security_file_ioctl+0x94/0xc0 [ 208.443584] ksys_ioctl+0xa9/0xd0 [ 208.464207] __x64_sys_ioctl+0x73/0xb0 [ 208.468109] do_syscall_64+0x1b9/0x820 [ 208.472004] ? finish_task_switch+0x1d3/0x870 [ 208.476509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 208.481448] ? syscall_return_slowpath+0x31d/0x5e0 [ 208.486477] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 208.491506] ? prepare_exit_to_usermode+0x291/0x3b0 [ 208.496535] ? perf_trace_sys_enter+0xb10/0xb10 [ 208.501213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.506066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.511256] RIP: 0033:0x455a17 [ 208.514440] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 208.533705] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.538769] binder: 20095:20098 transaction failed 29201/-28, size 24738-0 line 2967 [ 208.541429] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 05:44:46 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) r2 = fcntl$getown(r0, 0x9) r3 = getpgrp(0xffffffffffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101081, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000080)={r4, r0, 0x7}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r6, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 208.541438] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 208.541446] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 208.541454] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 208.541462] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000010 [ 208.586212] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 208.600077] Process accounting resumed 05:44:46 executing program 3 (fault-call:2 fault-nth:17): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 208.623357] binder_alloc: binder_alloc_mmap_handler: 20095 20001000-20004000 already mapped failed -16 [ 208.653055] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:46 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x3a) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:46 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xd000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:46 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r1, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 208.680924] binder: BINDER_SET_CONTEXT_MGR already set [ 208.687254] binder: 20095:20098 ioctl 40046207 0 returned -16 [ 208.687719] Process accounting resumed [ 208.693272] binder_alloc: 20095: binder_alloc_buf, no vma [ 208.702805] binder: 20095:20104 transaction failed 29189/-3, size 24738-0 line 2967 [ 208.726328] FAULT_INJECTION: forcing a failure. [ 208.726328] name failslab, interval 1, probability 0, space 0, times 0 [ 208.737684] CPU: 0 PID: 20123 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 208.746097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.749184] binder: undelivered TRANSACTION_ERROR: 29189 [ 208.755537] Call Trace: [ 208.755560] dump_stack+0x1c9/0x2b4 [ 208.755582] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.761253] binder: undelivered TRANSACTION_ERROR: 29201 05:44:47 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000007a000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 208.763607] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 208.763620] ? radix_tree_iter_replace+0x49/0x60 [ 208.763641] should_fail.cold.4+0xa/0x11 [ 208.791830] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.796949] ? kasan_check_write+0x14/0x20 [ 208.801207] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 208.806159] ? lock_downgrade+0x8f0/0x8f0 [ 208.810354] ? wait_for_completion+0x8d0/0x8d0 [ 208.814955] ? kasan_check_read+0x11/0x20 [ 208.819119] ? do_raw_spin_unlock+0xa7/0x2f0 [ 208.819338] binder: 20139:20143 transaction failed 29201/-28, size 24738-0 line 2967 05:44:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x200, 0x2000) ioctl$RTC_VL_CLR(r3, 0x7014) 05:44:47 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\'') [ 208.823550] ? kasan_check_write+0x14/0x20 [ 208.823569] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 208.823580] ? kasan_check_write+0x14/0x20 [ 208.823595] ? wait_for_completion+0x8d0/0x8d0 [ 208.823613] ? kasan_check_write+0x14/0x20 [ 208.853696] ? __kernfs_new_node+0x426/0x5a0 [ 208.858129] ? lock_acquire+0x1e4/0x540 [ 208.862123] ? fs_reclaim_acquire+0x20/0x20 [ 208.866546] ? lock_downgrade+0x8f0/0x8f0 [ 208.870791] ? kernfs_walk_and_get_ns+0x340/0x340 [ 208.875642] ? check_same_owner+0x340/0x340 [ 208.879976] ? rcu_note_context_switch+0x730/0x730 [ 208.884919] __should_failslab+0x124/0x180 [ 208.889174] should_failslab+0x9/0x14 [ 208.892994] kmem_cache_alloc_trace+0x2cb/0x780 [ 208.897684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 208.903226] ? sysfs_add_file_mode_ns+0x22c/0x560 [ 208.907565] binder_alloc: binder_alloc_mmap_handler: 20139 20001000-20004000 already mapped failed -16 [ 208.908202] ? sysfs_add_file_mode_ns+0x23c/0x560 [ 208.922475] ? device_create_file+0x1e0/0x1e0 [ 208.926979] kobject_uevent_env+0x20f/0x1110 05:44:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)="025cb9762070") r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) [ 208.931398] ? internal_create_group+0x347/0x970 [ 208.936168] ? do_raw_spin_lock+0xc1/0x200 [ 208.940415] kobject_uevent+0x1f/0x30 [ 208.944223] lo_ioctl+0x133d/0x1d00 [ 208.947860] ? lo_rw_aio_complete+0x450/0x450 [ 208.952364] blkdev_ioctl+0x9cd/0x2030 [ 208.956262] ? lock_acquire+0x1e4/0x540 [ 208.960244] ? blkpg_ioctl+0xc40/0xc40 [ 208.964150] ? lock_release+0xa30/0xa30 [ 208.965375] binder: BINDER_SET_CONTEXT_MGR already set [ 208.968139] ? save_stack+0xa9/0xd0 [ 208.968162] ? save_stack+0x43/0xd0 [ 208.968176] ? __fget+0x4d5/0x740 [ 208.968197] ? ksys_dup3+0x690/0x690 [ 208.987890] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 208.992509] ? kasan_check_write+0x14/0x20 [ 208.996757] ? do_raw_spin_lock+0xc1/0x200 [ 209.001000] block_ioctl+0xee/0x130 [ 209.004630] ? blkdev_fallocate+0x400/0x400 [ 209.007942] binder_alloc: 20139: binder_alloc_buf, no vma [ 209.008957] do_vfs_ioctl+0x1de/0x1720 [ 209.008974] ? ioctl_preallocate+0x300/0x300 [ 209.008987] ? __fget_light+0x2f7/0x440 [ 209.009000] ? fget_raw+0x20/0x20 05:44:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)="930b110f882e3f8c1089bb1bf418ea2c22d5507ad320bcfb62be371a040d06415d46067396a4b1f635bc786d41c274a95e08af392e1cf6c834613ab854d5839e9a814c29e263124898cdc56f8d6ee2", 0x4f, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)="d9af19e55beb4991e815842f8f1f907659005de4dc7ade4555d0bef2ca4624b2d16c6595bae890bd60d88db3c69b4e0823e7456b947a473090aa1b34d959eaae317d520f270bbf3b4bf2120db10bba36f040dc584177ad1b5434375ae167d566d6393ce6bc34720d4164b5c586108b009056d93de116eec0b01752e7aaf094cc4284122acc83527c4f88255153814b297d122fbfdce7d34ff9866fde465a0618b7f824d64cf0faafbbae1a341faf2d37a65236e0ef803793a19248152d296e9cbd1111c6be3b96cc5b95a44ef07b3d5b44b3d676", 0xd4, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000700)=0x80000000, 0x8) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x100000000, 0x39f6}, 0x2) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="483168f7587059ac1933069914e962b938cef7e8e458e68a132213585e5fa33c38cb2aac69bc5a7823d5e478f93464733c674fb0066a596f33924fdd423ab1ed4f62acc188af7ea8757ff245100757bf701bf4a59fdb8c38cc7f6d19724755ee9dab04e18c4dfcbbf2eae32f421794b1ad41009b9bfc51afa0d83b4170eaec3856e35f92638e38da949ff51cad9da8ea5e54442052cc54baf984cc58891d28fe6914e738b86aaf18a4591ecfe94ddaa527692bc52fc062b944ce7874017e03312f5d62366cae7bd52d579a38c0feee7da64b367046a923e6ac9fc148f014fa19a71ebbccdbd03e53e9067f", 0xeb) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000580)=0x410000, &(0x7f0000000740)=0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000680)={{0xfff, 0x5}, {0x400, 0x6}, 0x81, 0x2, 0x8}) r5 = accept4(r3, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0), 0x111, 0x8}}, 0x20) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800001000800030001", 0x21) [ 209.009018] ? trace_hardirqs_on+0xd/0x10 [ 209.009031] ? kmem_cache_free+0x22e/0x2d0 [ 209.009049] ? putname+0xf7/0x130 [ 209.014624] binder: 20139:20151 transaction failed 29189/-3, size 24738-0 line 2967 [ 209.018449] ? do_sys_open+0x3cb/0x720 [ 209.018466] ? security_file_ioctl+0x94/0xc0 [ 209.018483] ksys_ioctl+0xa9/0xd0 [ 209.061600] __x64_sys_ioctl+0x73/0xb0 [ 209.065520] do_syscall_64+0x1b9/0x820 [ 209.069419] ? syscall_slow_exit_work+0x500/0x500 [ 209.073271] binder: 20139:20143 ioctl 40046207 0 returned -16 05:44:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 209.074274] ? syscall_return_slowpath+0x5e0/0x5e0 [ 209.074290] ? syscall_return_slowpath+0x31d/0x5e0 [ 209.074308] ? prepare_exit_to_usermode+0x291/0x3b0 [ 209.074322] ? perf_trace_sys_enter+0xb10/0xb10 [ 209.074340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.089636] QAT: Invalid ioctl [ 209.090078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.090093] RIP: 0033:0x455a17 [ 209.116135] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 05:44:47 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\f') [ 209.116250] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 209.121349] QAT: Invalid ioctl [ 209.124900] 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.149133] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.156854] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 209.164124] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 209.164474] binder: undelivered TRANSACTION_ERROR: 29189 05:44:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000028d5c00000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 209.171398] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 209.171406] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 209.171414] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000011 [ 209.198966] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 209.198966] [ 209.216117] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.220633] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 209.240637] binder: BINDER_SET_CONTEXT_MGR already set [ 209.270480] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 209.301325] binder: 20187:20189 ioctl 40046207 0 returned -16 05:44:47 executing program 3 (fault-call:2 fault-nth:18): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 209.327870] binder: 20187:20189 got transaction to invalid handle [ 209.334704] binder: 20187:20189 transaction failed 29201/-22, size 24738-0 line 2852 [ 209.346132] Process accounting resumed [ 209.346373] binder_alloc: binder_alloc_mmap_handler: 20187 20001000-20004000 already mapped failed -16 [ 209.377339] FAULT_INJECTION: forcing a failure. [ 209.377339] name failslab, interval 1, probability 0, space 0, times 0 [ 209.388705] CPU: 0 PID: 20215 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 209.391118] binder: 20187:20208 got transaction to invalid handle [ 209.397111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.397117] Call Trace: [ 209.397143] dump_stack+0x1c9/0x2b4 [ 209.397167] ? dump_stack_print_info.cold.2+0x52/0x52 [ 209.397187] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 209.403479] binder: 20187:20208 transaction failed 29201/-22, size 24738-0 line 2852 [ 209.412812] ? radix_tree_iter_replace+0x49/0x60 [ 209.412834] should_fail.cold.4+0xa/0x11 [ 209.412850] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.412869] ? kasan_check_write+0x14/0x20 [ 209.443435] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.445966] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 209.445983] ? lock_downgrade+0x8f0/0x8f0 [ 209.446003] ? wait_for_completion+0x8d0/0x8d0 [ 209.451455] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.455344] ? kasan_check_read+0x11/0x20 [ 209.455360] ? do_raw_spin_unlock+0xa7/0x2f0 [ 209.455375] ? kasan_check_write+0x14/0x20 [ 209.455391] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 209.455407] ? kasan_check_write+0x14/0x20 [ 209.479712] Process accounting resumed [ 209.479939] ? wait_for_completion+0x8d0/0x8d0 [ 209.510584] ? kasan_check_write+0x14/0x20 [ 209.514819] ? __kernfs_new_node+0x426/0x5a0 [ 209.519233] ? lock_acquire+0x1e4/0x540 [ 209.523195] ? fs_reclaim_acquire+0x20/0x20 [ 209.531523] ? lock_downgrade+0x8f0/0x8f0 [ 209.535673] ? kernfs_walk_and_get_ns+0x340/0x340 [ 209.540513] ? check_same_owner+0x340/0x340 [ 209.544829] ? rcu_note_context_switch+0x730/0x730 [ 209.549749] __should_failslab+0x124/0x180 [ 209.553979] should_failslab+0x9/0x14 [ 209.557779] kmem_cache_alloc_trace+0x2cb/0x780 [ 209.562787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 209.568323] ? sysfs_add_file_mode_ns+0x22c/0x560 [ 209.573161] ? sysfs_add_file_mode_ns+0x23c/0x560 [ 209.578000] ? device_create_file+0x1e0/0x1e0 [ 209.582501] kobject_uevent_env+0x20f/0x1110 [ 209.586919] ? internal_create_group+0x347/0x970 [ 209.591679] ? do_raw_spin_lock+0xc1/0x200 [ 209.595916] kobject_uevent+0x1f/0x30 [ 209.599717] lo_ioctl+0x133d/0x1d00 [ 209.603341] ? lo_rw_aio_complete+0x450/0x450 [ 209.607831] blkdev_ioctl+0x9cd/0x2030 [ 209.611722] ? lock_acquire+0x1e4/0x540 [ 209.615700] ? blkpg_ioctl+0xc40/0xc40 [ 209.619672] ? lock_release+0xa30/0xa30 [ 209.623638] ? save_stack+0xa9/0xd0 [ 209.627354] ? save_stack+0x43/0xd0 [ 209.630965] ? __fget+0x4d5/0x740 [ 209.634418] ? ksys_dup3+0x690/0x690 [ 209.638117] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 209.642694] ? kasan_check_write+0x14/0x20 [ 209.646948] ? do_raw_spin_lock+0xc1/0x200 [ 209.651188] block_ioctl+0xee/0x130 [ 209.654801] ? blkdev_fallocate+0x400/0x400 [ 209.659117] do_vfs_ioctl+0x1de/0x1720 [ 209.663002] ? ioctl_preallocate+0x300/0x300 [ 209.667403] ? __fget_light+0x2f7/0x440 [ 209.671369] ? fget_raw+0x20/0x20 [ 209.674818] ? trace_hardirqs_on+0xd/0x10 [ 209.678960] ? kmem_cache_free+0x22e/0x2d0 [ 209.683283] ? putname+0xf7/0x130 [ 209.686737] ? do_sys_open+0x3cb/0x720 [ 209.690612] ? security_file_ioctl+0x94/0xc0 [ 209.695035] ksys_ioctl+0xa9/0xd0 [ 209.698492] __x64_sys_ioctl+0x73/0xb0 [ 209.702375] do_syscall_64+0x1b9/0x820 [ 209.706248] ? finish_task_switch+0x1d3/0x870 [ 209.710738] ? syscall_return_slowpath+0x5e0/0x5e0 [ 209.715662] ? syscall_return_slowpath+0x31d/0x5e0 [ 209.720586] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 209.725586] ? prepare_exit_to_usermode+0x291/0x3b0 [ 209.730595] ? perf_trace_sys_enter+0xb10/0xb10 [ 209.735271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.740115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.745306] RIP: 0033:0x455a17 [ 209.748487] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.767621] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:44:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x80200, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000300)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00') acct(&(0x7f0000000180)='./file0\x00') bind$nfc_llcp(r2, &(0x7f0000000200)={0x27, 0x1, 0x1, 0x3, 0x282c, 0xd91, "de52a6f8516456d55b841dfa8d8d675fed307578b09b969fc7b723bbacf6c2a5650f640e1d3d40d248a3a9beb147434a89e9bb27e0b82238e074f3b7f0d120", 0x24}, 0x60) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 05:44:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4f40}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x12}, 0x7}}}, 0x84) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:48 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:48 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000a000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:48 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 209.775328] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 209.782594] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 209.789855] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 209.797122] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 209.804393] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000012 [ 209.814409] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x80002) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 209.856465] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 209.856465] [ 209.868595] binder: 20229:20242 got transaction to invalid handle [ 209.874968] binder: 20229:20242 transaction failed 29201/-22, size 24738-0 line 2852 [ 209.888204] Process accounting resumed 05:44:48 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:48 executing program 3 (fault-call:2 fault-nth:19): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 209.900126] binder_alloc: binder_alloc_mmap_handler: 20229 20001000-20004000 already mapped failed -16 [ 209.905616] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 209.929174] Process accounting resumed [ 209.951198] binder: BINDER_SET_CONTEXT_MGR already set 05:44:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') mount$9p_xen(&(0x7f0000000080)='openpromfs\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x110002, &(0x7f00000002c0)={'trans=', 'xen', 0x2c, {'port', 0x3d, [0x30]}, 0x2c, {'rfdno', 0x3d, [0x37, 0x30]}, 0x2c, {'wfdno', 0x3d, [0x31, 0x3f, 0x30, 0x31, 0x36, 0x38]}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, [0x0, 0x31, 0x36, 0x37]}, 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@timeout={'timeout', 0x3d, [0x33, 0x78, 0x7f, 0x36, 0x34, 0x3f, 0x3d]}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@rq={'rq', 0x3d, [0x30]}, 0x2c}, {@noextend='noextend', 0x2c}, {@fscache='fscache', 0x2c}, {@noextend='noextend', 0x2c}, {@debug={'fs_opt_dec', 0x3d, [0x36, 0x7b, 0x0, 0x36]}, 0x2c}]}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:48 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 209.992227] binder: 20229:20242 ioctl 40046207 0 returned -16 [ 210.013934] binder: 20229:20248 got transaction to invalid handle [ 210.020331] binder: 20229:20248 transaction failed 29201/-22, size 24738-0 line 2852 [ 210.045440] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 210.059772] FAULT_INJECTION: forcing a failure. [ 210.059772] name failslab, interval 1, probability 0, space 0, times 0 [ 210.071203] CPU: 0 PID: 20272 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 210.079620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.088979] Call Trace: [ 210.091594] dump_stack+0x1c9/0x2b4 05:44:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xd0000, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r3 = accept4(r0, 0x0, &(0x7f0000000180), 0xbec833ddd5edafbd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r3, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xd00], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 210.095242] ? dump_stack_print_info.cold.2+0x52/0x52 [ 210.100451] ? lock_acquire+0x1e4/0x540 [ 210.104459] ? is_bpf_text_address+0xae/0x170 [ 210.108995] should_fail.cold.4+0xa/0x11 [ 210.113067] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 210.118207] ? rcu_is_watching+0x8c/0x150 [ 210.122367] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 210.127046] ? is_bpf_text_address+0xd7/0x170 [ 210.131555] ? kernel_text_address+0x79/0xf0 [ 210.135980] ? __kernel_text_address+0xd/0x40 [ 210.140487] ? unwind_get_return_address+0x61/0xa0 05:44:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000007400000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 210.145454] ? __save_stack_trace+0x8d/0xf0 [ 210.149791] ? lock_acquire+0x1e4/0x540 [ 210.151159] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.153798] ? fs_reclaim_acquire+0x20/0x20 [ 210.153817] ? lock_downgrade+0x8f0/0x8f0 [ 210.153833] ? save_stack+0xa9/0xd0 [ 210.153850] ? __kmalloc_reserve.isra.41+0x3a/0xe0 [ 210.153870] ? check_same_owner+0x340/0x340 [ 210.168937] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.171404] ? blkdev_ioctl+0x9cd/0x2030 [ 210.171419] ? block_ioctl+0xee/0x130 05:44:48 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f00000002c0)=""/198, &(0x7f0000000040)=0xc6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x11f) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x700], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 210.171433] ? do_vfs_ioctl+0x1de/0x1720 [ 210.171451] ? rcu_note_context_switch+0x730/0x730 [ 210.171463] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.171480] __should_failslab+0x124/0x180 [ 210.212593] should_failslab+0x9/0x14 [ 210.216411] kmem_cache_alloc+0x2af/0x760 [ 210.219310] binder: BINDER_SET_CONTEXT_MGR already set [ 210.220595] ? lock_acquire+0x1e4/0x540 [ 210.220614] skb_clone+0x1f5/0x500 [ 210.220628] ? refcount_add_not_zero+0x250/0x330 [ 210.220640] ? skb_split+0x11f0/0x11f0 [ 210.220660] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.248103] ? netlink_trim+0x1ba/0x380 [ 210.252101] ? netlink_skb_destructor+0x210/0x210 [ 210.255601] binder: 20302:20303 ioctl 40046207 0 returned -16 [ 210.256966] netlink_broadcast_filtered+0x10b7/0x1620 [ 210.256984] ? __netlink_sendskb+0xd0/0xd0 [ 210.257004] ? pointer+0x990/0x990 [ 210.257018] ? device_get_devnode+0x2e0/0x2e0 [ 210.257038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.285912] ? refcount_inc_not_zero+0x1e5/0x2f0 [ 210.288273] binder: 20302:20303 got transaction to invalid handle [ 210.290677] ? refcount_add_not_zero+0x330/0x330 [ 210.290695] ? netlink_has_listeners+0x2cf/0x4a0 [ 210.290710] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.290725] netlink_broadcast+0x3a/0x50 [ 210.290743] kobject_uevent_env+0x829/0x1110 [ 210.297004] binder: 20302:20303 transaction failed 29201/-22, size 24738-0 line 2852 [ 210.301915] ? internal_create_group+0x347/0x970 [ 210.301928] ? do_raw_spin_lock+0xc1/0x200 [ 210.301947] kobject_uevent+0x1f/0x30 [ 210.341174] lo_ioctl+0x133d/0x1d00 [ 210.344849] ? lo_rw_aio_complete+0x450/0x450 [ 210.349382] blkdev_ioctl+0x9cd/0x2030 [ 210.353440] ? lock_acquire+0x1e4/0x540 [ 210.356818] binder_alloc: binder_alloc_mmap_handler: 20302 20001000-20004000 already mapped failed -16 [ 210.357441] ? blkpg_ioctl+0xc40/0xc40 [ 210.357461] ? lock_release+0xa30/0xa30 [ 210.372116] binder: 20302:20318 got transaction to invalid handle [ 210.374771] ? save_stack+0xa9/0xd0 [ 210.374786] ? save_stack+0x43/0xd0 [ 210.374800] ? __fget+0x4d5/0x740 [ 210.374821] ? ksys_dup3+0x690/0x690 [ 210.381095] binder: 20302:20318 transaction failed 29201/-22, size 24738-0 line 2852 [ 210.384689] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 210.384705] ? kasan_check_write+0x14/0x20 [ 210.384715] ? do_raw_spin_lock+0xc1/0x200 [ 210.384734] block_ioctl+0xee/0x130 [ 210.401215] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.403440] ? blkdev_fallocate+0x400/0x400 [ 210.403456] do_vfs_ioctl+0x1de/0x1720 [ 210.403471] ? ioctl_preallocate+0x300/0x300 [ 210.403486] ? __fget_light+0x2f7/0x440 [ 210.408401] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.412278] ? fget_raw+0x20/0x20 [ 210.412296] ? trace_hardirqs_on+0xd/0x10 [ 210.412312] ? kmem_cache_free+0x22e/0x2d0 [ 210.412327] ? putname+0xf7/0x130 [ 210.412339] ? do_sys_open+0x3cb/0x720 [ 210.412358] ? security_file_ioctl+0x94/0xc0 [ 210.471071] ksys_ioctl+0xa9/0xd0 [ 210.474533] __x64_sys_ioctl+0x73/0xb0 [ 210.478438] do_syscall_64+0x1b9/0x820 [ 210.482317] ? finish_task_switch+0x1d3/0x870 [ 210.486804] ? syscall_return_slowpath+0x5e0/0x5e0 [ 210.491761] ? syscall_return_slowpath+0x31d/0x5e0 [ 210.496705] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 210.501721] ? prepare_exit_to_usermode+0x291/0x3b0 [ 210.506746] ? perf_trace_sys_enter+0xb10/0xb10 [ 210.511431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 210.516275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.521459] RIP: 0033:0x455a17 [ 210.524743] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.544025] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.551727] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 210.558985] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 210.566259] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 210.573520] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 210.580797] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000013 05:44:48 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x4], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) accept4(r1, &(0x7f00000002c0)=@hci, &(0x7f00000000c0)=0x80, 0x80000) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) socketpair$inet(0x2, 0x7, 0x0, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:48 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340405c8d020000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 210.591415] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 210.591415] [ 210.601220] Process accounting resumed [ 210.602742] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:48 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:48 executing program 3 (fault-call:2 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 210.638523] binder: 20323:20325 got transaction to invalid handle [ 210.644850] binder: 20323:20325 transaction failed 29201/-22, size 24738-0 line 2852 [ 210.646067] Process accounting resumed [ 210.692638] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 210.712734] binder_alloc: binder_alloc_mmap_handler: 20323 20001000-20004000 already mapped failed -16 05:44:48 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x4000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000200)) sendto(r0, &(0x7f0000000680)="fcfd5950a01d65a48bdac1f8012d2d72349a3f8cb5d5eb89583ec0f1932e95ab720ee3aca81d7817d2175cc74f365980", 0x30, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80007, 0x180000003) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0xef6, 0x4, &(0x7f0000000600)=[{&(0x7f00000002c0)="b25580fcccfb353c077e816cb85c8fb56ff251636832dfec688cdc47bcef0a0a5c5e9849c4dcd812edd778c2c528c54057c7d201244eaa8708b40c292e23d43b00c9e57867451cafc9119ef63bd01bd728f6f2228ab807c0f1281f63ea2ec9cb09fc8a2d52ee1e488ca682768bcf4fd0aca7bd565a6af840f64644cc7b4aaf5790ac2adb2dee74b036671dc604a1dd7a247bda6f3bd9c71c3aeb4b87a917fa78add783", 0xa3}, {&(0x7f0000000380)="933e06b1efb57a7df21dc1498c959c3e3792ed7bd768dc11ac57de54c6dd2714daa32c9262cbc1944a74d1b3a5434f0d8cd02a355a35a67aa07b5aa1bfd0894ffc3b21adee6c2c5df253d6636908362c61187276bbd0afab11eac8c021e98b0141602037", 0x64, 0xed}, {&(0x7f0000000400)="5ec7fd6441f5986ab98d87cd25eb9d894e640fdaa1b96085f1625e185e4870fe839de8b8d91b9cfc60988f1b08cbd3451e887c71beab6839ef5b162e8afb8a4150b4fb175755b1e6016a8c955f52e962acaf1d24ba4ff79adf99462274e4325469e2581861f52754d380446273c84f6a441f16217c4e1edfd5335647d88f6ad3c189dda5cdf2c1eef23e200018a73f0ca9c94a66b26e98d99a06a7b04fa997961fce152cefd7727cbc35ee70098f157dba6a4a6eeed47722a8dd730898c6fc38f93d1e55698f6e189be767ac23d58dee8d1eafd8a953", 0xd6, 0x1}, {&(0x7f0000000500)="360c7947359c99ee6c83ab891238e3cdc80fb12b5554f703bdf7367bd0977121387d507f9f3a5bb654056d31930acf80c98b34eea4a88397ad7baf0d3ace9760bf50c8323ae93ac9c55fd705ac7bd71b52f282365de20e47305b09ea79bf0f5bd09392fdee104f586a557ceb18930d6cae87c886778dbb7999c30e0e76b6d97fe6c3ba1c419818aa00010ce7a4eaf6a5bbbda80e2d7ccf2f9123ba4f1a13d80c3575ed9e15cb27ca2da67c41b31133202c51f6aff07153ee44c42e9109c96617f23a32f8136abb72851658c6a3660fa33a7cfc85b5685abbaf656241cc8de2962d", 0xe1, 0x5}], 0x34a0, &(0x7f0000000180)={[{@dos1xfloppy='dos1xfloppy', 0x2c}, {@time_offset={'time_offset', 0x3d, [0x34]}, 0x2c}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000740)=[0x68, 0x40]}, 0xa5d}}], 0x84, 0x0, &(0x7f0000000800)="ff6b844c09805172b9646186fd49030254ed2cbc2cac1534a94b2d201be7aa2fe0d708ba0b26913de67696e06c9cca40be1cb7924663eb88aa43f6ab2ffb965fc669dc9ddea7318e75c27db0385fe98884886cd166670e80bbb0d6ba35c211f0555e7dca2e9f8c1cdddfd19a25f4284647af9c48b47489504179341e864e1616248ac59f"}) acct(&(0x7f0000000700)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)="2e2f66696c65307f") [ 210.741449] binder: BINDER_SET_CONTEXT_MGR already set [ 210.760149] binder: 20323:20325 ioctl 40046207 0 returned -16 [ 210.774734] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:49 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfsH', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 210.803928] binder: 20323:20351 got transaction to invalid handle [ 210.810342] binder: 20323:20351 transaction failed 29201/-22, size 24738-0 line 2852 [ 210.828178] FAULT_INJECTION: forcing a failure. [ 210.828178] name failslab, interval 1, probability 0, space 0, times 0 [ 210.839482] CPU: 0 PID: 20360 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 05:44:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000048000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 210.847893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.857178] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.857795] Call Trace: [ 210.857820] dump_stack+0x1c9/0x2b4 [ 210.857842] ? dump_stack_print_info.cold.2+0x52/0x52 [ 210.863663] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.865907] should_fail.cold.4+0xa/0x11 [ 210.865927] ? __kernel_text_address+0xd/0x40 [ 210.865942] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 210.865960] ? __save_stack_trace+0x8d/0xf0 [ 210.881735] binder: 20367:20368 transaction failed 29201/-28, size 24738-0 line 2967 [ 210.884376] ? save_stack+0xa9/0xd0 [ 210.884394] ? save_stack+0x43/0xd0 [ 210.884408] ? kasan_kmalloc+0xc4/0xe0 [ 210.884423] ? kasan_slab_alloc+0x12/0x20 [ 210.898229] binder_alloc: binder_alloc_mmap_handler: 20367 20001000-20004000 already mapped failed -16 [ 210.898478] ? kmem_cache_alloc_node+0x144/0x780 [ 210.923759] binder: BINDER_SET_CONTEXT_MGR already set [ 210.931068] ? __alloc_skb+0x119/0x790 [ 210.931083] ? alloc_uevent_skb+0x89/0x220 [ 210.931095] ? kobject_uevent_env+0x866/0x1110 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x2000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 210.931116] ? kobject_uevent+0x1f/0x30 [ 210.931131] ? lo_ioctl+0x133d/0x1d00 [ 210.931144] ? blkdev_ioctl+0x9cd/0x2030 [ 210.931160] ? block_ioctl+0xee/0x130 [ 210.936958] binder_alloc: 20367: binder_alloc_buf, no vma [ 210.941175] ? do_vfs_ioctl+0x1de/0x1720 [ 210.941185] ? ksys_ioctl+0xa9/0xd0 [ 210.941196] ? __x64_sys_ioctl+0x73/0xb0 [ 210.941213] ? lock_acquire+0x1e4/0x540 [ 210.941228] ? fs_reclaim_acquire+0x20/0x20 [ 210.941241] ? lock_downgrade+0x8f0/0x8f0 [ 210.941258] ? check_same_owner+0x340/0x340 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x18000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000200000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 210.941270] ? lock_downgrade+0x8f0/0x8f0 [ 210.941290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.945222] binder: 20367:20370 transaction failed 29189/-3, size 24738-0 line 2967 [ 210.949397] ? rcu_note_context_switch+0x730/0x730 [ 210.949413] __should_failslab+0x124/0x180 [ 210.949428] should_failslab+0x9/0x14 [ 210.949448] kmem_cache_alloc_node_trace+0x26f/0x770 [ 210.966971] binder: 20367:20368 ioctl 40046207 0 returned -16 [ 210.969656] ? kasan_kmalloc+0xc4/0xe0 [ 210.969676] __kmalloc_node_track_caller+0x33/0x70 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x1400], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 210.969694] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 210.969709] __alloc_skb+0x155/0x790 [ 210.969724] ? skb_scrub_packet+0x490/0x490 [ 210.969743] ? lock_release+0xa30/0xa30 [ 211.023673] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.026151] ? pointer+0x990/0x990 [ 211.026167] ? device_get_devnode+0x2e0/0x2e0 [ 211.026184] ? kasan_unpoison_shadow+0x35/0x50 [ 211.026201] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 211.026219] ? netlink_has_listeners+0x2cf/0x4a0 [ 211.034852] binder: undelivered TRANSACTION_ERROR: 29201 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8906], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 211.039366] ? netlink_tap_init_net+0x3e0/0x3e0 [ 211.039383] alloc_uevent_skb+0x89/0x220 [ 211.039398] kobject_uevent_env+0x866/0x1110 [ 211.039414] ? internal_create_group+0x347/0x970 [ 211.039426] ? do_raw_spin_lock+0xc1/0x200 [ 211.039441] kobject_uevent+0x1f/0x30 [ 211.076668] binder: 20383:20384 got transaction to invalid handle [ 211.079867] lo_ioctl+0x133d/0x1d00 [ 211.079888] ? lo_rw_aio_complete+0x450/0x450 [ 211.079903] blkdev_ioctl+0x9cd/0x2030 [ 211.079918] ? lock_acquire+0x1e4/0x540 [ 211.079935] ? blkpg_ioctl+0xc40/0xc40 [ 211.084456] binder: 20383:20384 transaction failed 29201/-22, size 24738-0 line 2852 [ 211.089023] ? lock_release+0xa30/0xa30 [ 211.089042] ? save_stack+0xa9/0xd0 [ 211.089060] ? save_stack+0x43/0xd0 [ 211.119773] binder_alloc: binder_alloc_mmap_handler: 20383 20001000-20004000 already mapped failed -16 [ 211.122175] ? __fget+0x4d5/0x740 [ 211.122192] ? ksys_dup3+0x690/0x690 [ 211.122208] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 211.122226] ? kasan_check_write+0x14/0x20 [ 211.122242] ? do_raw_spin_lock+0xc1/0x200 [ 211.146896] binder: BINDER_SET_CONTEXT_MGR already set [ 211.148608] block_ioctl+0xee/0x130 [ 211.148623] ? blkdev_fallocate+0x400/0x400 [ 211.148637] do_vfs_ioctl+0x1de/0x1720 [ 211.148653] ? ioctl_preallocate+0x300/0x300 [ 211.148670] ? __fget_light+0x2f7/0x440 [ 211.167175] binder: 20383:20384 ioctl 40046207 0 returned -16 [ 211.168457] ? fget_raw+0x20/0x20 [ 211.168475] ? trace_hardirqs_on+0xd/0x10 [ 211.168491] ? kmem_cache_free+0x22e/0x2d0 [ 211.168507] ? putname+0xf7/0x130 [ 211.168525] ? do_sys_open+0x3cb/0x720 [ 211.178654] binder: 20383:20389 got transaction to invalid handle [ 211.185350] ? security_file_ioctl+0x94/0xc0 [ 211.185365] ksys_ioctl+0xa9/0xd0 [ 211.185379] __x64_sys_ioctl+0x73/0xb0 [ 211.185396] do_syscall_64+0x1b9/0x820 [ 211.185409] ? finish_task_switch+0x1d3/0x870 [ 211.185423] ? syscall_return_slowpath+0x5e0/0x5e0 [ 211.185442] ? syscall_return_slowpath+0x31d/0x5e0 [ 211.188904] binder: 20383:20389 transaction failed 29201/-22, size 24738-0 line 2852 [ 211.192578] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 211.192593] ? prepare_exit_to_usermode+0x291/0x3b0 [ 211.192606] ? perf_trace_sys_enter+0xb10/0xb10 [ 211.192625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 211.225407] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.227258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.227270] RIP: 0033:0x455a17 [ 211.227274] Code: 48 83 c4 08 48 [ 211.231598] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.237129] 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.359616] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.367321] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000455a17 [ 211.374588] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 211.381855] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 211.389120] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 211.396385] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000014 05:44:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:49 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 211.403971] Process accounting resumed [ 211.415698] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 211.415698] [ 211.432198] Process accounting resumed [ 211.439106] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:49 executing program 3 (fault-call:2 fault-nth:21): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:49 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x5, 0x200000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newtclass={0x2c, 0x28, 0x404, 0x70bd28, 0x25dfdbfd, {0x0, r3, {0x3, 0xfff2}, {0x0, 0xffff}, {0xfff9, 0x6}}, [@TCA_RATE={0x8, 0x5, {0x8f, 0x2b7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000006000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfsz', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) 05:44:49 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 211.530097] binder: 20420:20421 got transaction to invalid handle [ 211.536518] binder: 20420:20421 transaction failed 29201/-22, size 24738-0 line 2852 [ 211.558523] FAULT_INJECTION: forcing a failure. [ 211.558523] name failslab, interval 1, probability 0, space 0, times 0 [ 211.558677] Process accounting resumed 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8060000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x6000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 211.569965] CPU: 0 PID: 20430 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 211.569973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.569978] Call Trace: [ 211.570000] dump_stack+0x1c9/0x2b4 [ 211.570025] ? dump_stack_print_info.cold.2+0x52/0x52 [ 211.603149] ? lo_ioctl+0xe8/0x1d00 [ 211.606794] should_fail.cold.4+0xa/0x11 [ 211.610874] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 211.615992] ? blkpg_ioctl+0xc40/0xc40 [ 211.619913] ? save_stack+0xa9/0xd0 [ 211.623579] ? save_stack+0x43/0xd0 [ 211.627218] ? __fget+0x4d5/0x740 [ 211.630689] ? lock_acquire+0x1e4/0x540 [ 211.634680] ? fs_reclaim_acquire+0x20/0x20 [ 211.639156] ? lock_downgrade+0x8f0/0x8f0 [ 211.643322] ? check_same_owner+0x340/0x340 [ 211.647654] ? block_ioctl+0xee/0x130 [ 211.651469] ? rcu_note_context_switch+0x730/0x730 [ 211.656414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.661989] __should_failslab+0x124/0x180 [ 211.662546] binder_alloc: binder_alloc_mmap_handler: 20420 20001000-20004000 already mapped failed -16 [ 211.666231] should_failslab+0x9/0x14 05:44:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x8847], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:49 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x9) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="9bf57defcae81a782578fa470789377d735ded0e997bbbc5a64b", 0x1a}, {&(0x7f0000000300)="503e95e477042d1962d0b12a952daec99abca0200b84fc1990a516dd41d8c8c811edc5c70a948479e4e8e57b1a89448dc07052682e575b4cbe1b64ad028fde1c23e5c6479ee1c9cb0d0ef356360e7586f32d90f8b86471cf012eaf41ece3e50507ee04a22203de970e550032d246440405a70baaca91a0dbd5cc6a4a72527b34c4ee6359f88f487ef9591f6b068185a119ad391ecd09541d611f96705b45b4273d98195709e22922018ec0af9044f169d3a70a91a33989a48b0d6cb17d69785bf4d6f6e56435e9273249301cf112cd8328f61f9cbcb0558346e022942faf1d9494b19a1e81166675710682bb2d4fa24268e00c2087da1a", 0xf7}, {&(0x7f00000000c0)="ae594384186c757697a3588099509712483fccf368ca93d9531c2c4560712ab240a42ddcbb0264f7c7df7d0ea039d939cc630cddcce08e8d7ac684ff6f31ec5879fdc704bf43b97e297f463189d12b5beffff44d3b7594b081b1c2b37c3087215dd2076d832b8a0b12da930235691361f59c", 0x72}, {&(0x7f0000000400)="3449d39d1b4fb81f50d2dded974b535a80c35237ea7b24b160cefd5bd1d26ba1597046675d51c259a76819712bd796d36133c623b764b55dd75541aa4293775e107a5a135565b444ac28834cb362b98f5084f0f914f527dddcb8117a1a8a2cbc5955916b502ff14af91a18844be9fa91ed04e60efa856681c2f417520b3ecc06c596097a89c89f26abe1d3946bac510ce2de044870b848dbdde174cc325998b2548b98448620934617cb9545dd6aa55f53113dfc6a14a6859a833fe50f0a69631022f320f53db13a90333eef054b", 0xce}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f00000001c0)="be884b26c56258dfd9633a6f867431", 0xf}], 0x6, 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x200) [ 211.666250] kmem_cache_alloc+0x2af/0x760 [ 211.666265] ? fget_raw+0x20/0x20 [ 211.666283] getname_flags+0xd0/0x5a0 [ 211.666302] do_mkdirat+0xc5/0x310 [ 211.694670] ? __ia32_sys_mknod+0xb0/0xb0 [ 211.698853] ? fput+0x130/0x1a0 [ 211.702141] ? ksys_ioctl+0x81/0xd0 [ 211.705775] __x64_sys_mkdir+0x5c/0x80 [ 211.708616] Process accounting resumed [ 211.709671] do_syscall_64+0x1b9/0x820 [ 211.709685] ? finish_task_switch+0x1d3/0x870 [ 211.709701] ? syscall_return_slowpath+0x5e0/0x5e0 05:44:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)={0x303, 0x33}, 0x4) ioctl$RTC_WIE_ON(r1, 0x700f) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 211.709718] ? syscall_return_slowpath+0x31d/0x5e0 [ 211.731328] binder: BINDER_SET_CONTEXT_MGR already set [ 211.731836] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 211.742116] ? prepare_exit_to_usermode+0x291/0x3b0 [ 211.747142] ? perf_trace_sys_enter+0xb10/0xb10 [ 211.751821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 211.756700] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.761893] RIP: 0033:0x454fe7 [ 211.765082] Code: [ 211.765093] binder: 20420:20421 ioctl 40046207 0 returned -16 [ 211.765142] binder: 20420:20453 got transaction to invalid handle 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x1800], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 211.767230] 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 [ 211.773216] binder: 20420:20453 transaction failed 29201/-22, size 24738-0 line 2852 [ 211.779406] 2e 0f 1f 84 00 00 00 00 00 66 90 b8 [ 211.789310] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 211.789310] [ 211.795203] 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.819870] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xfeffffff], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 211.827609] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 [ 211.834902] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 211.842177] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 211.849459] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 211.856733] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000015 [ 211.874163] binder: undelivered TRANSACTION_ERROR: 29201 05:44:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 211.879879] binder: undelivered TRANSACTION_ERROR: 29201 05:44:50 executing program 3 (fault-call:2 fault-nth:22): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040fffffdfd00000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 211.916186] Process accounting resumed 05:44:50 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:50 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = getuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r2, r3) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@empty, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', r4}) [ 211.943499] binder: 20484:20485 got transaction to invalid handle [ 211.949889] binder: 20484:20485 transaction failed 29201/-22, size 24738-0 line 2852 [ 211.971173] Process accounting resumed [ 211.986191] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 211.986191] [ 212.003660] FAULT_INJECTION: forcing a failure. [ 212.003660] name failslab, interval 1, probability 0, space 0, times 0 [ 212.014940] CPU: 0 PID: 20489 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 212.023346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.026438] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x88470000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.032701] Call Trace: [ 212.032728] dump_stack+0x1c9/0x2b4 [ 212.032746] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.032762] ? trace_hardirqs_on+0x10/0x10 [ 212.032785] ? save_stack+0xa9/0xd0 [ 212.061031] should_fail.cold.4+0xa/0x11 [ 212.065110] ? block_ioctl+0xee/0x130 [ 212.068946] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.074059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.079618] ? walk_component+0x3fe/0x2630 [ 212.083379] binder_alloc: binder_alloc_mmap_handler: 20484 20001000-20004000 already mapped failed -16 05:44:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet(0x2, 0xa, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x1, 0x7ff, 0x0, 0x4, 0x80}, 0x98) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r4, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xffffff80], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.083875] ? lock_downgrade+0x8f0/0x8f0 [ 212.097449] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 212.102095] ? kasan_check_write+0x14/0x20 [ 212.106340] ? trace_hardirqs_on+0x10/0x10 [ 212.110586] ? path_parentat.isra.43+0x20/0x160 [ 212.115278] ? lock_downgrade+0x8f0/0x8f0 [ 212.119457] ? lock_acquire+0x1e4/0x540 [ 212.123459] ? fs_reclaim_acquire+0x20/0x20 [ 212.127788] ? lock_downgrade+0x8f0/0x8f0 [ 212.131945] ? check_same_owner+0x340/0x340 [ 212.136274] ? rcu_note_context_switch+0x730/0x730 05:44:50 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 212.141210] __should_failslab+0x124/0x180 [ 212.145451] should_failslab+0x9/0x14 [ 212.146873] binder: BINDER_SET_CONTEXT_MGR already set [ 212.149255] kmem_cache_alloc+0x2af/0x760 [ 212.149272] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 212.149291] __d_alloc+0xc8/0xd50 [ 212.149303] ? shrink_dcache_sb+0x350/0x350 [ 212.149321] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 212.176110] ? d_alloc_parallel+0x1ea0/0x1ea0 [ 212.180615] ? mntput+0x74/0xa0 [ 212.183904] ? lock_release+0xa30/0xa30 [ 212.184313] binder: 20484:20508 got transaction to invalid handle 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x6488], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.187889] ? lock_acquire+0x1e4/0x540 [ 212.187906] ? filename_create+0x1b2/0x5b0 [ 212.187920] ? mnt_want_write+0x3f/0xc0 [ 212.187939] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.187953] d_alloc+0x96/0x380 [ 212.187970] ? __d_lookup+0x9e0/0x9e0 [ 212.194226] binder: 20484:20508 transaction failed 29201/-22, size 24738-0 line 2852 [ 212.198170] ? __d_alloc+0xd50/0xd50 [ 212.198188] __lookup_hash+0xd9/0x190 [ 212.198207] filename_create+0x1e5/0x5b0 [ 212.239185] ? kern_path_mountpoint+0x40/0x40 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x2], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.243719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.250095] ? getname_flags+0x26e/0x5a0 [ 212.254169] do_mkdirat+0xda/0x310 [ 212.257718] ? __ia32_sys_mknod+0xb0/0xb0 [ 212.261873] ? ksys_ioctl+0x81/0xd0 [ 212.265507] __x64_sys_mkdir+0x5c/0x80 [ 212.266772] binder: 20484:20485 ioctl 40046207 0 returned -16 [ 212.269406] do_syscall_64+0x1b9/0x820 [ 212.269422] ? syscall_slow_exit_work+0x500/0x500 [ 212.269438] ? syscall_return_slowpath+0x5e0/0x5e0 [ 212.269453] ? syscall_return_slowpath+0x31d/0x5e0 05:44:50 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x3ff, 0x10, [0x400, 0x7, 0x8, 0x2]}) dup3(r1, r0, 0x80000) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 212.269470] ? prepare_exit_to_usermode+0x291/0x3b0 [ 212.269488] ? perf_trace_sys_enter+0xb10/0xb10 [ 212.303646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.308496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.313683] RIP: 0033:0x454fe7 [ 212.316865] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.336232] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 05:44:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400006000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.343948] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 [ 212.351319] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 212.358686] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 212.359689] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.365952] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 212.365960] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000016 [ 212.387195] Process accounting resumed 05:44:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 212.394548] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.414200] Process accounting resumed [ 212.430116] binder: 20539:20540 got transaction to invalid handle [ 212.436503] binder: 20539:20540 transaction failed 29201/-22, size 24738-0 line 2852 05:44:50 executing program 3 (fault-call:2 fault-nth:23): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x1f, &(0x7f0000000240)=0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x6, &(0x7f0000000140)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.450569] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 212.450657] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 212.450657] [ 212.474747] binder_alloc: binder_alloc_mmap_handler: 20539 20001000-20004000 already mapped failed -16 [ 212.486364] binder: BINDER_SET_CONTEXT_MGR already set 05:44:50 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 212.504527] Process accounting resumed [ 212.519731] FAULT_INJECTION: forcing a failure. [ 212.519731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.531576] CPU: 0 PID: 20556 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 212.534469] binder: 20539:20540 ioctl 40046207 0 returned -16 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffff000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 212.539970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.539976] Call Trace: [ 212.539999] dump_stack+0x1c9/0x2b4 [ 212.540018] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.540040] ? trace_hardirqs_off+0xd/0x10 [ 212.570895] should_fail.cold.4+0xa/0x11 [ 212.574969] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.580088] ? trace_hardirqs_off+0xd/0x10 [ 212.584333] ? wait_for_completion+0x8d0/0x8d0 [ 212.588928] ? __kasan_slab_free+0x131/0x170 [ 212.593346] ? trace_hardirqs_on+0x10/0x10 [ 212.597589] ? kobject_uevent_env+0x288/0x1110 [ 212.602189] ? internal_create_group+0x347/0x970 [ 212.604695] binder: 20539:20548 got transaction to invalid handle [ 212.606963] ? do_raw_spin_lock+0xc1/0x200 [ 212.606986] ? mutex_unlock+0xd/0x10 [ 212.607007] ? lo_ioctl+0xe8/0x1d00 [ 212.613264] binder: 20539:20548 transaction failed 29201/-22, size 24738-0 line 2852 [ 212.617451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.617464] ? should_fail+0x246/0xd86 [ 212.617481] ? fault_create_debugfs_attr+0x1f0/0x1f0 05:44:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x26a6, 0x2300) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000180)) acct(&(0x7f0000000300)='./file0\x00') recvfrom(r1, &(0x7f0000000200)=""/125, 0x7d, 0x101, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x3, 0x0, 0x3}}, 0x80) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x806], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.623008] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 212.624781] ? blkpg_ioctl+0xc40/0xc40 [ 212.624800] __alloc_pages_nodemask+0x36e/0xdb0 [ 212.624819] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 212.633772] Process accounting resumed [ 212.638293] ? save_stack+0xa9/0xd0 [ 212.638308] ? save_stack+0x43/0xd0 [ 212.638320] ? __fget+0x4d5/0x740 [ 212.638339] ? lock_acquire+0x1e4/0x540 [ 212.663265] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 212.663265] [ 212.664729] ? fs_reclaim_acquire+0x20/0x20 05:44:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400a00000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xb00], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.664745] ? lock_downgrade+0x8f0/0x8f0 [ 212.664764] ? lock_release+0xa30/0xa30 [ 212.711430] ? check_same_owner+0x340/0x340 [ 212.715763] cache_grow_begin+0x91/0x710 [ 212.719840] kmem_cache_alloc+0x689/0x760 [ 212.723469] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.723984] ? fget_raw+0x20/0x20 [ 212.729755] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.732855] getname_flags+0xd0/0x5a0 [ 212.732873] do_mkdirat+0xc5/0x310 [ 212.732890] ? __ia32_sys_mknod+0xb0/0xb0 [ 212.732902] ? fput+0x130/0x1a0 [ 212.732916] ? ksys_ioctl+0x81/0xd0 [ 212.756863] __x64_sys_mkdir+0x5c/0x80 [ 212.760759] do_syscall_64+0x1b9/0x820 [ 212.764654] ? finish_task_switch+0x1d3/0x870 [ 212.769190] ? syscall_return_slowpath+0x5e0/0x5e0 [ 212.771969] binder: 20579:20581 got transaction to invalid handle [ 212.774133] ? syscall_return_slowpath+0x31d/0x5e0 [ 212.774150] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 212.774164] ? prepare_exit_to_usermode+0x291/0x3b0 [ 212.774182] ? perf_trace_sys_enter+0xb10/0xb10 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x14], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 212.780435] binder: 20579:20581 transaction failed 29201/-22, size 24738-0 line 2852 [ 212.785323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.785342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.785352] RIP: 0033:0x454fe7 [ 212.785361] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.840480] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 212.841598] binder_alloc: binder_alloc_mmap_handler: 20579 20001000-20004000 already mapped failed -16 [ 212.848193] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 [ 212.848200] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 212.848207] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 212.848214] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 212.848221] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000017 05:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2400, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000180)=""/123, &(0x7f0000001300)=""/216, &(0x7f0000001400)=""/220, 0x110000}) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096}) r4 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r4, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x4000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:51 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000280)=0x3) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa14b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb7f4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x24e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) [ 212.899595] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 212.918143] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:51 executing program 3 (fault-call:2 fault-nth:24): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:51 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 212.949209] Process accounting resumed [ 212.967464] binder: BINDER_SET_CONTEXT_MGR already set [ 212.967471] binder: 20579:20587 got transaction to invalid handle [ 212.967492] binder: 20579:20587 transaction failed 29201/-22, size 24738-0 line 2852 [ 212.987855] Unknown ioctl 21381 [ 212.991250] binder: 20579:20581 ioctl 40046207 0 returned -16 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x5800], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 213.007171] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 213.007171] [ 213.010694] FAULT_INJECTION: forcing a failure. [ 213.010694] name failslab, interval 1, probability 0, space 0, times 0 [ 213.018168] Unknown ioctl 21381 [ 213.029273] CPU: 1 PID: 20605 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 213.029288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.043168] Process accounting resumed [ 213.050434] Call Trace: 05:44:51 executing program 0: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x33, @multicast2=0xe0000002, 0x4e22, 0x0, 'wrr\x00', 0x1, 0xb357, 0x31}, 0x2c) r1 = socket$inet6(0xa, 0x8080f, 0x4) ioctl(r1, 0x8917, &(0x7f0000000140)="0000c1bd00008c01000000") r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 213.050460] dump_stack+0x1c9/0x2b4 [ 213.050483] ? dump_stack_print_info.cold.2+0x52/0x52 [ 213.065743] ? trace_hardirqs_on+0x10/0x10 [ 213.069987] ? save_stack+0xa9/0xd0 [ 213.073625] should_fail.cold.4+0xa/0x11 [ 213.077687] ? block_ioctl+0xee/0x130 [ 213.078946] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 213.081495] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 213.081513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.081529] ? walk_component+0x3fe/0x2630 05:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3ec53b4a, 0x400) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x15c8) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040a80a000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x543], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 213.081549] ? lock_downgrade+0x8f0/0x8f0 [ 213.081567] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 213.114045] ? kasan_check_write+0x14/0x20 [ 213.118288] ? trace_hardirqs_on+0x10/0x10 [ 213.122543] ? path_parentat.isra.43+0x20/0x160 [ 213.127213] ? lock_downgrade+0x8f0/0x8f0 [ 213.131369] ? lock_acquire+0x1e4/0x540 [ 213.133833] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.135343] ? fs_reclaim_acquire+0x20/0x20 [ 213.135361] ? lock_downgrade+0x8f0/0x8f0 [ 213.135378] ? check_same_owner+0x340/0x340 [ 213.135395] ? rcu_note_context_switch+0x730/0x730 [ 213.149545] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.153601] __should_failslab+0x124/0x180 [ 213.153620] should_failslab+0x9/0x14 [ 213.153638] kmem_cache_alloc+0x2af/0x760 [ 213.176146] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 213.180744] __d_alloc+0xc8/0xd50 [ 213.184207] ? shrink_dcache_sb+0x350/0x350 [ 213.188545] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 213.193577] ? d_alloc_parallel+0x1ea0/0x1ea0 [ 213.198072] ? mntput+0x74/0xa0 [ 213.201356] ? lock_release+0xa30/0xa30 05:44:51 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') semget$private(0x0, 0x4, 0x1) 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xffffca88], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 213.205338] ? lock_acquire+0x1e4/0x540 [ 213.207566] binder: BINDER_SET_CONTEXT_MGR already set [ 213.209326] ? filename_create+0x1b2/0x5b0 [ 213.209342] ? mnt_want_write+0x3f/0xc0 [ 213.209359] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 213.209378] d_alloc+0x96/0x380 [ 213.231090] ? __d_lookup+0x9e0/0x9e0 [ 213.234899] ? __d_alloc+0xd50/0xd50 [ 213.238623] __lookup_hash+0xd9/0x190 [ 213.242435] filename_create+0x1e5/0x5b0 [ 213.245576] binder: 20622:20624 ioctl 40046207 0 returned -16 [ 213.246496] ? kern_path_mountpoint+0x40/0x40 [ 213.246510] ? fget_raw+0x20/0x20 [ 213.246526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.246546] ? getname_flags+0x26e/0x5a0 [ 213.270054] do_mkdirat+0xda/0x310 [ 213.273701] ? __ia32_sys_mknod+0xb0/0xb0 [ 213.277851] ? ksys_ioctl+0x81/0xd0 [ 213.281492] __x64_sys_mkdir+0x5c/0x80 [ 213.283011] binder: 20622:20624 got transaction to invalid handle [ 213.285381] do_syscall_64+0x1b9/0x820 [ 213.285396] ? syscall_slow_exit_work+0x500/0x500 [ 213.285411] ? syscall_return_slowpath+0x5e0/0x5e0 05:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) lseek(r1, 0x0, 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r3, 0x10, 0x70bd2d, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 213.285429] ? syscall_return_slowpath+0x31d/0x5e0 [ 213.291660] binder: 20622:20624 transaction failed 29201/-22, size 24738-0 line 2852 [ 213.295517] ? prepare_exit_to_usermode+0x291/0x3b0 [ 213.295529] ? perf_trace_sys_enter+0xb10/0xb10 [ 213.295547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.332563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.337763] RIP: 0033:0x454fe7 05:44:51 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x10001, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x9, 0x26, "0f088cb0e77f9ac75a6382ece4cc341d76aea6ca7c7c9b9fdaa9d087e5d3c5f1cbc590e33913"}, 0x2e) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 213.340948] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.360568] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 213.368288] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 [ 213.375565] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 213.382840] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 213.389680] binder_alloc: binder_alloc_mmap_handler: 20622 20001000-20004000 already mapped failed -16 [ 213.390110] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 05:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) uselib(&(0x7f00000000c0)='./file0\x00') 05:44:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:51 executing program 3 (fault-call:2 fault-nth:25): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 213.390119] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000018 [ 213.447269] Process accounting resumed 05:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 213.455943] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 213.470384] Process accounting resumed [ 213.487848] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 213.487848] 05:44:51 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x308, 0x2, 0x5, 0x5, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) [ 213.504614] binder: 20622:20645 got transaction to invalid handle [ 213.510915] binder: 20622:20645 transaction failed 29201/-22, size 24738-0 line 2852 [ 213.521783] FAULT_INJECTION: forcing a failure. [ 213.521783] name failslab, interval 1, probability 0, space 0, times 0 [ 213.533173] CPU: 1 PID: 20665 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 213.541600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.550953] Call Trace: [ 213.553578] dump_stack+0x1c9/0x2b4 [ 213.557218] ? dump_stack_print_info.cold.2+0x52/0x52 [ 213.557754] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.562406] ? rcu_note_context_switch+0x730/0x730 [ 213.562430] should_fail.cold.4+0xa/0x11 [ 213.572277] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.572805] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 213.587361] ? kasan_check_write+0x14/0x20 [ 213.591595] ? ext4_mark_iloc_dirty+0x1b6d/0x30b0 [ 213.596441] ? ext4_chunk_trans_blocks+0x30/0x30 [ 213.601193] ? lock_release+0xa30/0xa30 [ 213.605164] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 213.610185] ? __ext4_get_inode_loc+0x45a/0x13d0 [ 213.614941] ? jbd2_write_access_granted.part.9+0x274/0x430 [ 213.620652] ? check_same_owner+0x340/0x340 [ 213.625028] ? rcu_note_context_switch+0x730/0x730 [ 213.629956] __should_failslab+0x124/0x180 [ 213.634212] should_failslab+0x9/0x14 [ 213.638014] __kmalloc+0x2c8/0x760 [ 213.641561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.647094] ? ext4_reserve_inode_write+0x146/0x260 [ 213.652105] ? ext4_find_extent+0x775/0xa10 [ 213.656422] ext4_find_extent+0x775/0xa10 [ 213.660751] ? ext4_expand_extra_isize+0x5b0/0x5b0 [ 213.665682] ext4_ext_map_blocks+0x293/0x62f0 [ 213.670183] ? unregister_lsm_notifier+0x20/0x20 [ 213.674939] ? ext4_init_acl+0x1d6/0x300 [ 213.679006] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 213.684019] ? block_commit_write+0x30/0x30 [ 213.688340] ? __ext4_new_inode+0xb0d/0x6620 [ 213.692747] ? lock_acquire+0x1e4/0x540 [ 213.696713] ? ext4_es_lookup_extent+0x42c/0xde0 [ 213.701462] ? lock_downgrade+0x8f0/0x8f0 [ 213.705605] ? lock_release+0xa30/0xa30 [ 213.709577] ? lock_acquire+0x1e4/0x540 [ 213.713552] ? ext4_map_blocks+0x480/0x1b60 [ 213.717873] ? lock_release+0xa30/0xa30 [ 213.721840] ? check_same_owner+0x340/0x340 [ 213.726159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.731693] ? ext4_es_lookup_extent+0x465/0xde0 [ 213.736535] ? rcu_note_context_switch+0x730/0x730 [ 213.741465] ? down_read+0xb5/0x1d0 [ 213.745087] ? ext4_map_blocks+0x480/0x1b60 [ 213.749405] ? __down_interruptible+0x700/0x700 [ 213.754074] ? kernel_text_address+0x79/0xf0 [ 213.758480] ext4_map_blocks+0xe31/0x1b60 [ 213.762622] ? __save_stack_trace+0x8d/0xf0 [ 213.766945] ? ext4_issue_zeroout+0x190/0x190 [ 213.771443] ? save_stack+0x43/0xd0 [ 213.775079] ? __kasan_slab_free+0x11a/0x170 [ 213.779479] ? kasan_slab_free+0xe/0x10 [ 213.783448] ? kmem_cache_free+0x86/0x2d0 [ 213.787593] ext4_getblk+0x10e/0x630 [ 213.791306] ? ext4_iomap_begin+0x1350/0x1350 [ 213.795800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.801330] ? __dquot_initialize+0x61d/0xde0 [ 213.805837] ext4_bread+0x95/0x2b0 [ 213.809372] ? ext4_getblk+0x630/0x630 [ 213.813256] ? dquot_get_next_dqblk+0x180/0x180 [ 213.817919] ? debug_check_no_obj_freed+0x30b/0x595 [ 213.822928] ? kasan_check_write+0x14/0x20 [ 213.827159] ext4_append+0x14e/0x370 [ 213.830873] ext4_mkdir+0x532/0xe60 [ 213.834498] ? ext4_init_dot_dotdot+0x510/0x510 [ 213.839168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.844705] ? security_inode_permission+0xd2/0x100 [ 213.849726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.855256] ? security_inode_mkdir+0xe8/0x120 [ 213.859836] vfs_mkdir+0x42e/0x6b0 [ 213.863372] do_mkdirat+0x27b/0x310 [ 213.866997] ? __ia32_sys_mknod+0xb0/0xb0 [ 213.871137] ? ksys_ioctl+0x81/0xd0 [ 213.874759] __x64_sys_mkdir+0x5c/0x80 [ 213.878642] do_syscall_64+0x1b9/0x820 [ 213.882545] ? finish_task_switch+0x1d3/0x870 [ 213.887047] ? syscall_return_slowpath+0x5e0/0x5e0 [ 213.891974] ? syscall_return_slowpath+0x31d/0x5e0 [ 213.896897] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 213.901908] ? prepare_exit_to_usermode+0x291/0x3b0 [ 213.906922] ? perf_trace_sys_enter+0xb10/0xb10 [ 213.911589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.916521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.921701] RIP: 0033:0x454fe7 [ 213.924875] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.944141] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 213.951934] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 05:44:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000001000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:52 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)="2da26d003a29008dacac76617d6b6e6823cb290fc8c03a9c631064ee392d0f9cabd80f6e4bffa98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7e040061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bcd36740e127730e90f2cd72b828000000ebffffff000000000000", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x3) sync_file_range(r0, 0x2, 0x4, 0x5) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000280)=0xffffffffffffff93, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r3, &(0x7f0000000540), 0xfffffffffffffdd6, 0x0, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) recvmmsg(r3, &(0x7f0000002740)=[{{&(0x7f0000000380)=@ipx, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000002780)={0x0, 0x989680}) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x13) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x9e, 0x4, &(0x7f00000006c0)=[{&(0x7f00000002c0)="342e73b75be0eac0625cc85950652c496935c1cf8ad0e00d8fd3bc97d3f505bbdedb1326c141d7037827bd3926cad95d243c0c213ca49eaed1e5e63dea94d36ec4ca77e860746cd7f725afea0fd33bcdd136b19cfd5b1020892f30dad26a46", 0x5f, 0x3}, {&(0x7f0000000540)="1e7ee73247f6623416fb32a6508cdb8c186e365fc45fcfa2d593df13af5312bc0f91b908e40febd1edfa069806b4ccef66df99290fac7162ff17fecb659c1ba7b572a60b3e8dc5b135857dbde18a071edcea9c1a40f1b559441df60fe6e5703b73646cf72bca794ccea42790257649a9db7ecbbfa960abaab1dab0be7f9e5d42fedcc01d134f8f3db60d68713aa84c266a42b97e2f3c97bb05f88e4973c68b0f2d86bdf82c5aa61dd111b77c2251a2be", 0xb0, 0xfff}, {&(0x7f0000000600)="4980d053f6b487ec5f237c272ff2276d54c0dce8570bfda00131d4d0277fe2e3a33ad7bb4c502402c5e39d35e0655fb8dfc359c5053caf962d55d09fa63f26d074fe67ba825b5f0eb9e6c1f74aece056694f4229718b9163e532508115de7cfa61be395c904e1f9acfc47fd30291ced8c57e7e5c34b97dfa37f36931caab6f8ef972f8926c8b7bd6692ae7794fb40c58324c0bb8", 0x94, 0x7}, {&(0x7f0000000400)="0c9e5bcf68531f59e4f795dacf1fed5bf37d361e9b29e9d7503b1706e1c5a3ada9618885d0bf7b06ae6594144d3fe82cff2d6dc5d86ea89400d687aa624088be8b74441d5defec45cbd3528fa51ed33ad3ff7f5eef8a80b5cad7e54a0c77a17fae386d2e", 0x64, 0x2}], 0x40000, &(0x7f0000000180)={[{@nobarrier='nobarrier', 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@barrier='barrier', 0x2c}, {@barrier='barrier', 0x2c}]}) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 213.959289] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 213.966549] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 213.973902] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 213.981161] R13: 0000000000000000 R14: 00000000004d39c0 R15: 0000000000000019 05:44:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x58000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 214.032309] binder: 20675:20680 transaction failed 29201/-28, size 24738-0 line 2967 [ 214.046216] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 214.067844] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 214.067844] 05:44:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) r3 = dup2(r0, r0) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:52 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000001000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "bf56344fae6747745cef401f510812feab385439804a6d1f2714cebe78f7df124b50d18b97c7392336cfba4e26357aefb9a55538acc5f976dd2063f0a213bba13300f5ae6b95a285225a788ac650dc3008120dc0e3ecf7091f26b0531039b08d700d89d4d99ae8a05066f4ad17865ee7b6b9ee93b9f85c70463866487073d64b223f8de65edf00bb438c90f63927b243e6f775f1ddfb03a9fc0897d0d9380c9bc9c1cb491e128850cad949ca45b4c787fe73d7a7fb523f81ac0af715"}, 0xc0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 214.082479] binder_alloc: binder_alloc_mmap_handler: 20675 20001000-20004000 already mapped failed -16 [ 214.110794] binder: BINDER_SET_CONTEXT_MGR already set 05:44:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) close(r0) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) 05:44:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 214.134760] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 214.143935] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 214.158231] binder: 20675:20680 ioctl 40046207 0 returned -16 [ 214.167301] binder_alloc: 20675: binder_alloc_buf, no vma [ 214.172929] binder: 20675:20710 transaction failed 29189/-3, size 24738-0 line 2967 05:44:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)={0x303, 0x33}, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) 05:44:52 executing program 3 (fault-call:2 fault-nth:26): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:52 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 214.219302] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 214.219302] [ 214.267727] FAULT_INJECTION: forcing a failure. [ 214.267727] name failslab, interval 1, probability 0, space 0, times 0 [ 214.278175] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.279067] CPU: 1 PID: 20731 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 214.284703] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.292812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.292817] Call Trace: [ 214.292839] dump_stack+0x1c9/0x2b4 [ 214.292858] ? dump_stack_print_info.cold.2+0x52/0x52 [ 214.292875] ? trace_hardirqs_on+0x10/0x10 [ 214.292891] should_fail.cold.4+0xa/0x11 [ 214.292905] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 214.292923] ? trace_hardirqs_on+0x10/0x10 [ 214.292937] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.292949] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 214.292967] ? lock_acquire+0x1e4/0x540 [ 214.309571] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 214.310388] ? is_bpf_text_address+0xae/0x170 [ 214.310409] ? lock_downgrade+0x8f0/0x8f0 [ 214.368038] ? lock_release+0xa30/0xa30 [ 214.372011] ? rcu_is_watching+0x8c/0x150 [ 214.376155] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 214.380822] ? is_bpf_text_address+0xd7/0x170 [ 214.385319] ? kernel_text_address+0x79/0xf0 [ 214.389809] __should_failslab+0x124/0x180 [ 214.394046] should_failslab+0x9/0x14 [ 214.397841] kmem_cache_alloc+0x47/0x760 [ 214.401896] ? __es_tree_search.isra.13+0x1ba/0x220 [ 214.406910] __es_insert_extent+0x305/0x1140 [ 214.411314] ? ext4_es_insert_extent+0x21c/0x7e0 [ 214.416064] ? ext4_es_free_extent+0x820/0x820 [ 214.420653] ? lock_release+0xa30/0xa30 [ 214.424626] ? __x64_sys_mkdir+0x5c/0x80 [ 214.428683] ? do_syscall_64+0x1b9/0x820 [ 214.432740] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.438105] ? kasan_check_write+0x14/0x20 [ 214.442356] ? do_raw_write_lock+0xbd/0x1b0 [ 214.446690] ext4_es_insert_extent+0x2ea/0x7e0 [ 214.451279] ? ext4_es_find_delayed_extent_range+0xd80/0xd80 [ 214.457251] ? kasan_unpoison_shadow+0x35/0x50 [ 214.461829] ? kasan_kmalloc+0xc4/0xe0 [ 214.465717] ? __kmalloc+0x315/0x760 [ 214.469429] ext4_ext_put_gap_in_cache+0x158/0x1f0 [ 214.474353] ? ext4_zeroout_es+0x160/0x160 [ 214.478596] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 214.484132] ext4_ext_map_blocks+0x2453/0x62f0 [ 214.488717] ? unregister_lsm_notifier+0x20/0x20 [ 214.493467] ? ext4_init_acl+0x1d6/0x300 [ 214.497534] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 214.502557] ? block_commit_write+0x30/0x30 [ 214.506878] ? __ext4_new_inode+0xb0d/0x6620 [ 214.511285] ? lock_acquire+0x1e4/0x540 [ 214.515265] ? ext4_es_lookup_extent+0x42c/0xde0 [ 214.520018] ? lock_downgrade+0x8f0/0x8f0 [ 214.524168] ? lock_release+0xa30/0xa30 [ 214.528142] ? lock_acquire+0x1e4/0x540 [ 214.532111] ? ext4_map_blocks+0x480/0x1b60 [ 214.536431] ? lock_release+0xa30/0xa30 [ 214.540406] ? check_same_owner+0x340/0x340 [ 214.544726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.550256] ? ext4_es_lookup_extent+0x465/0xde0 [ 214.555180] ? rcu_note_context_switch+0x730/0x730 [ 214.560112] ? down_read+0xb5/0x1d0 [ 214.563736] ? ext4_map_blocks+0x480/0x1b60 [ 214.568075] ? __down_interruptible+0x700/0x700 [ 214.572918] ? kernel_text_address+0x79/0xf0 [ 214.577328] ext4_map_blocks+0xe31/0x1b60 [ 214.581538] ? __save_stack_trace+0x8d/0xf0 [ 214.585861] ? ext4_issue_zeroout+0x190/0x190 [ 214.590358] ? save_stack+0x43/0xd0 [ 214.594070] ? __kasan_slab_free+0x11a/0x170 [ 214.598556] ? kasan_slab_free+0xe/0x10 [ 214.602528] ? kmem_cache_free+0x86/0x2d0 [ 214.606703] ext4_getblk+0x10e/0x630 [ 214.610420] ? ext4_iomap_begin+0x1350/0x1350 [ 214.614914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.620444] ? __dquot_initialize+0x61d/0xde0 [ 214.625028] ext4_bread+0x95/0x2b0 [ 214.628565] ? ext4_getblk+0x630/0x630 [ 214.632452] ? dquot_get_next_dqblk+0x180/0x180 [ 214.637119] ? debug_check_no_obj_freed+0x30b/0x595 [ 214.642133] ? kasan_check_write+0x14/0x20 [ 214.646467] ext4_append+0x14e/0x370 [ 214.650207] ext4_mkdir+0x532/0xe60 [ 214.653843] ? ext4_init_dot_dotdot+0x510/0x510 [ 214.658536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.664075] ? security_inode_permission+0xd2/0x100 [ 214.669100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.674642] ? security_inode_mkdir+0xe8/0x120 [ 214.679233] vfs_mkdir+0x42e/0x6b0 [ 214.682772] do_mkdirat+0x27b/0x310 [ 214.686411] ? __ia32_sys_mknod+0xb0/0xb0 [ 214.690557] ? ksys_ioctl+0x81/0xd0 [ 214.694276] __x64_sys_mkdir+0x5c/0x80 [ 214.698180] do_syscall_64+0x1b9/0x820 [ 214.702086] ? syscall_slow_exit_work+0x500/0x500 [ 214.707015] ? syscall_return_slowpath+0x5e0/0x5e0 [ 214.711949] ? syscall_return_slowpath+0x31d/0x5e0 [ 214.716965] ? prepare_exit_to_usermode+0x291/0x3b0 [ 214.721979] ? perf_trace_sys_enter+0xb10/0xb10 [ 214.726643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.731664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.736845] RIP: 0033:0x454fe7 [ 214.740195] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.759466] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 05:44:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000060000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:53 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x404, 0x11, r0, 0x0) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') [ 214.767189] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 [ 214.774451] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 214.781712] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 214.788984] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 214.796330] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000001a 05:44:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x82, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="ad56b6ea54c721afbbd4beef915d564c9029ca3280800000", 0xfffffffffffffebd) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)) 05:44:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 214.826127] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 214.836443] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 214.864044] binder: 20746:20750 transaction failed 29201/-28, size 24738-0 line 2967 [ 214.875080] binder_alloc: binder_alloc_mmap_handler: 20746 20001000-20004000 already mapped failed -16 [ 214.914803] binder: BINDER_SET_CONTEXT_MGR already set [ 214.921221] Process accounting resumed [ 214.926157] binder: 20746:20750 ioctl 40046207 0 returned -16 [ 214.932447] binder_alloc: 20746: binder_alloc_buf, no vma [ 214.938196] binder: 20746:20757 transaction failed 29189/-3, size 24738-0 line 2967 [ 214.974319] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.980127] binder: undelivered TRANSACTION_ERROR: 29201 05:44:53 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) accept(r0, &(0x7f00000002c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, &(0x7f0000000240)=0xfffffffffffffd7d) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:53 executing program 3 (fault-call:2 fault-nth:27): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0x7, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="df4e91433b8ce927", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0115534f3c4a994fe3a17ac4ada1fed9"], @ANYBLOB="010008000300060000000000e60200004c04c51456fc0f6df45f9838edef74dff2e3797123a9330d8ad4f748b96d3b1efd0cdeba5b5d297f7eb0ef6135008b1c053562b03aa92a7a026460a0cadf41276101e2259b6dc57254cc24530d8b8818da6c2fc5274f357a6bb356a519642ed02232040f3056991fd9021bf80796de78df851985a68d91c01dd328894277a773cd600037725eec520d57a703e162942b9b028bac55ba502fa1c3d0118513c7f8f58958c7498a78677db2079f3a98010c6ae09ab46b8bb8f1b9d074"]) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) write(r2, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) dup2(r0, r1) 05:44:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x0, 0x0, 0x0, 0x0, 0x800e], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:53 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:53 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$nfc_llcp(r1, &(0x7f0000006cc0)=[{&(0x7f0000000000)={0x27, 0x1, 0x2, 0x6, 0x8001, 0xf4e0, "0f91b199bd6059c8efd014c74b3d386cdf389b1d8961862a8a39a76d1abc5eb14e829ccb049db0ab32318e325bc17f49be2e3c34f261a499973df76653ac6e", 0x19}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000000c0)="4a15a5904dfac80a0963fa7fdb64141475caff197e0977daaf052321bb8c2e5695d870bd51", 0x25}, {&(0x7f0000000100)="e6dae64d91492eb930f17550644b4768ada804a7a53e", 0x16}, {&(0x7f00000001c0)="f3a3b15dbfa18945cd11e811a738f212e4be8addd3066132355b935ae2e939babaf670", 0x23}, {&(0x7f0000000200)="5a6f0f375bcab45108cdb9b1b5ae91fb3a935692e15403b9b45083a53cdfa846d7e4a07553a9276df1e0c2a7ac8600dab2f56d1bea0d2232b93bdf547a268e", 0x3f}, {&(0x7f0000000240)="bbe01989cff5641e208764043ac90d967ab8290145822b868700b3bb275f8f5012341f2494a21b943e9c53bce1ca07fd8ea12ee60264fdbd756a", 0x3a}, {&(0x7f0000000300)="af7f196796068803e63823c4c479f0aa85126e0dcf1b49c5036d15977353e6642de1426613457b169b0cca9dd637bac75dd146c34eef76769e057fa136dc9fdac5a72f22901738be9bfc2d41e23c8166ce89fd2e5fddeac075cfeee1b023674777d3371a0435fc67a06017ec77486c641688a9e1e1162c2cf1e9ccebc482091ee53c21bafdd723135696", 0x8a}, {&(0x7f00000003c0)="f1d18a932e7d02091b3b58566e53041be11783f76a7519faae6bfe8e33948566bf4798b3d7ea5ca42cab6636cdbd951986d745987296e3928de1243b95a402b0f2d97d94d461b7253c313b02f12e773b9a85f5e1817a1ede1a3a9e829d3b501eca75cbd8261e6a67d9db2f018ef0d6437690db087a667abc5942e203f46f48fc12d91ac863f8f7181f6d3ee7679ccd51248f86aa1b6fb416c88560fa33380bcb7a05e03c0fba79e975a5f615d3fc65928da74b81139b09b3a2868a93ffff8caa2c70830cf58105e17113b303c239acd87413cbb4c28f0847ed8d191eb2d773", 0xdf}], 0x7, &(0x7f0000000540)={0x70, 0x29, 0x1, "6e0b0ebb6016ebb59c938209a6d5a4aaec1f8f2670c530ffd8f7d41dffba2b31d886283678528f0e48666304eccf551f02163fa4ff9d32d51208f847cec060635c130235d9d36789b3eb4911978ce5eaf9bd4f4775f5882c6b95cf75469c"}, 0x70, 0x40000}, {&(0x7f00000005c0)={0x27, 0x0, 0x2, 0x4, 0x1, 0xffffffffffff14fd, "8657efa0a170b1ab816cf54e074e2fd829fce2b6061d3c620854186f2a752cef26262983dc665441571d33b2f939f70ddcccbbeed98893c17428052fcef186", 0x29}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000640)="9b9f0a8c1e95c9", 0x7}, {&(0x7f0000006e80)="ef90a42fe1642c4c1b989754d16d8df7fdbd0115d5fb338c0ee89ce8f9169a3be6fd715264be50c7309cd86237521d8cc86ee7db5f5247afdd8a556cd984a61a86feed227064f153506a24932062be94a612fb0d9fb3bd7b4d214b426a97222564b934cc8fae35ed021a2e3209c28c0e92e14d553c5a80cc7ee9c5965fc3b4624dc54ab0f61701d1bb796efc1625ae391460ba0b36897b0c97019a1de9d5944e9958800df540fe6cfd1dd7628dc9fb59bb5e185c7743a6", 0xb7}, {&(0x7f0000000740)="77631c333b50870bbdafe839248995dd1121fa6e85fd95be15698e4cb5aef8ece7a6514eb0c29428d61b5d59fb29a30e426fe3353be83b53075674ce69153b9307206a6d7324e1cc7d89089706e6250506e3674d97587c8e3306340ae9de93c7d8f1da37d561fc40facfdb309e5e2b8327070a26e07e3608372100d90fd9c07b47645dc33186559893e8ecbc", 0x8c}, {&(0x7f0000000800)="0228c600fa63ef58a280198c956ef1778d5c040daa1eb462be21513e6b90aca83e812e925ff66d595bd23d2d48974471c5f64a07bb4b287463811a5a3b700bf5a50ea64734a16e7f1579387be6437821a8a75f235a1ca64c1ffe456092020aa67bc7", 0x62}, {&(0x7f0000000880)="73a4110c0ca12966c8745844ea3b523cd978cc6efbf6ed342a65708a75daeddbbf3036702a5a734762d383352022c3fb1bb7", 0x32}], 0x5, &(0x7f0000001040)={0x1010, 0x107, 0x1f, "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"}, 0x1010, 0x4004}, {&(0x7f0000000940)={0x27, 0x0, 0x2, 0x7, 0x1, 0x8, "0d37a74731a92e29afc1c4a52e303b16488e4268239eaae5771f0b0d3586ec2ff1d9d38a68c61033ead77dd808dbc4fa8ad84f0b21cdfaba07e78e794c1c1e", 0x1d}, 0x60, &(0x7f0000000b00)=[{&(0x7f00000009c0)="010f9e7f7c31c6bb04b49acab2e7803c4371f1a3ccf9f63f87c028a57a0480d4eec3283b688a13b247eacfc1ebf54832663293d4d74e0c59808cecb80242", 0x3e}, {&(0x7f0000000a00)="443e6b2e79d9f10b07085eaebff1460e9b7d143c0c4baa8150d9966eb766e315b4e4ab7dd711e634c42f817661ad1cbe6ca4b9b5d91ad4f81242d5dd8158c7047e43fe097f8153e132cc71601b1d8ed9f0fe550cc0b65420eac8044ff43a9f660872ded583c4d8285f7a587efb450ff4891e4a97018a26607a7ee0d3e12a43fe326915dc33160e6dc98bc7f3e4e825fd010b3e963f90df1ad81f32ea8b0803e8bee49043ae8ba93eca278ea26a99cf2d47569353579a564eaaa2162824c6b365b318be05a46864cf1d9d1ace6ed0a23b35c5", 0xd2}, {&(0x7f0000002080)="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", 0x1000}], 0x3, &(0x7f0000000b40)={0xd8, 0x117, 0x8, "d2e58d54c9b16497c4572f1be9d2adf47195679969e1a57172778ddf7e555f1422366db005dea43454ecf7b6c8f81e6deddc2738ba1e27162de8f37cb2a4ce1d10d2357809c120258784c9cc28ffa3e32ffb969df1992ea451b5cd73d0a64c990d528caf6c39322fa022f344c5bed38231284b066cf4adb2887daada60d8ff7ecaf1f98bb782a7dcd49a6541e8cf304babdc5512e6778158f3f235d6f8a8fd1cfc57892df2302d39a7519464a082d5e49701fbc983e5e90434b076a484d2f6975c"}, 0xd8, 0x44000}, {&(0x7f0000000c40)={0x27, 0x1, 0x0, 0x5, 0x4, 0x8, "25fa969143bd8349609b829a2697f9de27fcaa5cee9cdb25b16b78a2901810ffe3addc85d1ac37ccb3f359169f07b0ff31b095212a6c5bfc84900f65c6b950", 0x29}, 0x60, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="0946826c62ba8299dcbeb3b356e475be3ad6c35329da553a9e350e44c174e06fb4aa78c18e09125746f00843b4a503c5fbfff3f68ba20a7f4deb6e8be55c4ab80174e3fe7b1770316a2958e7fee519817f138649a357474093c3b07284a92d8393e8eff86d88bf2cb69e2e2b1f8409b4016ef3dc0275c709be128e89106f97d5d7421990652cf1314b80c506d979383c5399acdcc11a604ca2ee605baea854e817953f7673b0bf009ad42b09e08fa9a2a9d1c460b3cbe1538390dfadd1683bd516db8ae55555087ca04b30425b9d3a76f4759dcb0b4f51eded18062ea6ff887fb76afcbf2dcb8f874a210d8e3b37e796642b0cc84ee206", 0xf7}], 0x1, &(0x7f0000003080)={0x1010, 0x84, 0x3, "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"}, 0x1010, 0x81}, {&(0x7f0000000e00)={0x27, 0x1, 0x2, 0x7, 0x8f5, 0x4, "9214957dc1a961a322da4b75a4baca3130bc9cc2ff0d8d25c82129cd677285b1c382ce35919beed6701967e71d3ea021a97ef51741e483c11066aeaf39f852", 0x22}, 0x60, &(0x7f0000005400)=[{&(0x7f0000000e80)="9b94732c760c3ddcb8509d23d3a1085f40dfb9f555429e2ae1ef24302c378dbc9134f70290130e5e2c1fddf646eabef54885348c0288f7b18879fc8ab319f447c5451fb17f797464a83bb7be8e91349c7d4811594e4d3e6cf6a17046563a15598fddf93298cbc09133c8c544411f3203ce7aa7a9", 0x74}, {&(0x7f00000040c0)="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", 0x1000}, {&(0x7f0000000f00)="f69e578b9e967e8ccf5cbfbd83f728dfb48e59bffd770508da81f872a4a5952527c2c863e5ccddad7a8ad0b07fb02a8ca3e29d75d77eef168bcfd83772ec592543024045269552bf39759aa98ea39d77a407aba3ef3750cd919d24d911518efcb206a25d89103df360c66184c8afa857e30fc9452980af53a11401072e1d780954c2c02e83fa57185f08d0f3b27992d12ca0c256929531a69d41bd132f", 0x9d}, {&(0x7f0000000fc0)="8621", 0x2}, {&(0x7f00000050c0)="380c385d9646837f3e0ad2f3a472d6e65c6b78", 0x13}, {&(0x7f0000005100)="3daf0aad50af545d975689bdb8baccb81d2cc954369f21288ee8f271d4f690dc82d5434f7e66c8832ca23b", 0x2b}, {&(0x7f0000005140)="87c8111a32a31cae4797170ec12b0e7c3cac4fb18964e4aa8cd3bc34c2f1ffb34dd08345de6ff459410a1b6011dabbb844c8e7357cc47a0909c2c7eb4022b14d38a5524378a7818ed7918c315374b785cbaa128791c9313d414311e1fb59527f5f501e97dff149274f9d2edc35ad1920b3ac4e178ca9eb5e63bf1cae44d8443306e57d577a9873d0109a4228ad2e1e7da2ffbe84969e7007fc1d8d3c23883271786eedf41d60dcca6af23604f1c3da932e7a4183f5a61aad7e988a03f7d5bce7a79ee01d8baaadf05d681b77db89e612add5422d4e558fccab41", 0xda}, {&(0x7f0000005240)="d2169da29767a4f3055d8026be0256cc79774abf85a031ca2626c18e42f5c4b8704dd96f49a6e0dbc28c0079cb5ab6b29debbae925701f283063829c83f517ce925da8f11518ba812e64516f092bfe77cd5abeaf20c476581fb6257e51bf416f63ed045cce8e8670260952a347f5747806f297b5887e028ca3c50b887d8f224f51e915522d7845ff601e1c97387a763cad87be6e6c8116674d06dbd9faec94cc34c14baf9e407caad64a2ce2874274ab0803d5bb380ec0ff50ed3d196535c104f11114ea5a507a4955461e213188c070d99860b1618ffabccd54d3c9239036384437ea6fe6edb3b71e9e35bd4af63c91ae9ac5f337742f7e42", 0xf9}, {&(0x7f0000005340)="ff7f591a21193913f650a136098ed21e3f75032550c217401d51ea08b9f40d8b9d9fc757198ca8fb44169d003a9a19d93a211422647ac6e06fa0ef442299d5bc6a7b517ccfc6d6f8f346bcb7a3a86e6d548f2867edb5eec9215041556a8bdcb400c466c354008a12787cd9e2a22174edc4a07a4e2a62d4c1faecab105cb47587b96ccb2117b355cd1f7d9a99352fbf735220959ee47b606551fe7d2acf6345c9a86af4af382ead3b0b3ef0c7f4d642601de3154da6a7ef7a907886", 0xbb}], 0x9, &(0x7f00000054c0)={0x68, 0x0, 0xf93, "0e618b5239a7d17b15aaf2661479a996df956dd70b1286835f64436abcc92b18bf017f27d9ad177c2267526c6ce65e579e1c3505406009fc987d67a5806af2cdcbd8b5ccaa17b635cb99c281c84f38b7b5"}, 0x68, 0x4000}, {&(0x7f0000005540)={0x27, 0x0, 0x2, 0x3, 0x1f, 0x9, "e0b5c658d2ab181a3937ad870d810dd0cc47c619d296c85859ade8a5c889e905f9383a1896d0223a0452916088f5345bc70b0373031b323ccb4b4a9719ada3", 0x9}, 0x60, &(0x7f00000069c0)=[{&(0x7f00000055c0)="a1cd86d2e9b5ee5214237d", 0xb}, {&(0x7f0000005600)='n>', 0x2}, {&(0x7f0000005640)="9dc3c998b25bf7483864314223517a69b9fe5933b4b5d2d3686c7c92ec5c5cd0b548e7abfcc0b1dd2585b094ab4b481efff79b02c1f49b2b19c635a66570da8d6318f5feb25af8a5cd42b8fd8efbc457da6c372a2f1ebcdadb7f1744889a844117e675e089f0760ffc1ea02d310df6de98e0db8a8dec83daf112ad8440ae06da99b41c9754cf9b015ac673d964221206", 0x90}, {&(0x7f0000005700)="7b13c6200ba21e7318e139a6ea4886fbad7bec9bfc86c70f1180c7d72217730f3f931573114e0f3dc6b4ff2ae5fc3c004f3588464572edb8e2916ca43946ff9278d71777b01bbb21e4514570e34b90ae296953a9a33b5a34", 0x58}, {&(0x7f0000005780)="c790603519e73e21a21d2444dcc8ad8658abe5fbe5ef1fa8a52069a490f34395fa6185ae47406b370507eb20af25191f0c44a1bcbf238a35e8b5793897bd6c06a564d835b2576a5b99c0602b2c4fe78556a638f32f5bab10897b61664d30798a7385ee74279847b472047b8d44b2bd1862e0fa4182aad07cf3d889b08914adc48094d874080cbdb740a6d38c5ca2c590a7c2867c53914f2ddec390d209a6df67d64e10912cd35bee12697a8e686f401c7043b87fdd7c6b029726854e0dda3d44f9f9a869705fa9c4f80f024ef333f56fd765f3571db370488faef178f490a7b982ca039a", 0xe4}, {&(0x7f0000005880)="17066a54df07f4b6081b49229a486ccb3a77b132d5b35b04fadadafefd212bb7c7fb41493a7907a4112620f14fb9560ec8f4e8faf0cf5cf602e433e0b86708b5bc666ebff3006de84cf07da0290e974d39a3721e9dbb42ea2a6cb16ccc97f11beb96395bb9956ad389b8503c7e86d8bb214d5ec97ac45eebc823c96147057a024561fedc8f84e40c33e7c965158b38f031fa106a4cb3f275f5e06add49b340dbdd8532c6acf21d06a79a21dc648ebdf0b8ba78f283f9110d3671dbf0e08573ee94112179efaa983e4d45d8b0dc74a922d10e480b0e48d0206ccf17349b92ec15a79a20530060ce", 0xe7}, {&(0x7f0000005980)="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", 0x1000}, {&(0x7f0000006980)="9a5f81bd46bb61b3c8eba3ae1257308072ed8392537ea4fcbb407d51a22cd80a80", 0x21}], 0x8, &(0x7f0000006a40)={0x100, 0x102, 0x80, "7819c27ec3e75d3fe8df67a8dd566e1082978c26ae20bac73037ec15ee628795b4e0e5e2c05de03b21e1e31c318a0b0f9172d58dd9c1f6faa9dd80da6b2f078837b9ae96bdbd6532adb208ad5a7e8e1c85f1ffc0cd1578ea313c2abf9e9eeb9227c6c59694109467c051d34cc800689ec5969099c3cce14322f2198ae77914545f3b4e4c021b3a3b96686060e4b0878f05d7f2643682aafb4b24861dde866d066010d84a462d5811e75750cd5b8acb0347a5e2b2caaf23d8ec5d1eebe6830ce622c3d2ed6aca1bd7fba8886e90d48bb5d93017274fb746e47299e8e6dc2ebb893efdd47336dbfae5c70b3a64e7f96e7e"}, 0x100, 0x20008040}, {&(0x7f0000006b40)={0x27, 0x0, 0x2, 0x2, 0x6, 0x7, "9ac90f345fe09a9f8e7b34779c330369e829ab7ab23b3d477b44c89731f3ddbc02c4eedd84b19e55b3c4e24c66a8137734a907ebcb7ee96237bce2f923d4f0", 0x25}, 0x60, &(0x7f0000006c40)=[{&(0x7f0000006bc0)="f3a3743e937b22e2945500fe40529f4d6a86f96171b3ce05d8f21c5b6306e6b34bbd4af7c56adb2095ebad11c47a8b3e8f50a6d2d1a3efcd50607f54a5e696e860a0ed2656a9045dbbc7", 0x4a}], 0x1, &(0x7f0000006c80)={0x18, 0x925d33877176c396, 0x5, "ed"}, 0x18, 0x4000004}], 0x7, 0x90) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl(r2, 0x100000000, &(0x7f0000000680)="50133eeddb42e46770c5661cd00e1052a2730edeb3b9ac") 05:44:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400003000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 215.501284] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 215.501284] [ 215.501545] FAULT_INJECTION: forcing a failure. [ 215.501545] name failslab, interval 1, probability 0, space 0, times 0 [ 215.523395] CPU: 0 PID: 20769 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 215.531796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.541143] Call Trace: [ 215.543756] dump_stack+0x1c9/0x2b4 [ 215.547397] ? dump_stack_print_info.cold.2+0x52/0x52 [ 215.552600] should_fail.cold.4+0xa/0x11 [ 215.556676] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 215.561775] ? do_raw_spin_unlock+0xa7/0x2f0 [ 215.566183] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 215.570767] ? kasan_check_write+0x14/0x20 [ 215.575001] ? do_raw_spin_lock+0xc1/0x200 [ 215.579242] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 215.584794] ? __mark_inode_dirty+0x495/0x1550 [ 215.589376] ? __inode_attach_wb+0x13e0/0x13e0 [ 215.593956] ? kasan_check_read+0x11/0x20 [ 215.598103] ? do_raw_spin_unlock+0xa7/0x2f0 [ 215.602507] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 215.607089] ? kasan_check_write+0x14/0x20 [ 215.608206] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 215.611346] ? check_same_owner+0x340/0x340 [ 215.611360] ? __dquot_alloc_space+0x4b6/0x8c0 [ 215.611375] ? rcu_note_context_switch+0x730/0x730 [ 215.611391] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 215.611403] __should_failslab+0x124/0x180 [ 215.611423] should_failslab+0x9/0x14 [ 215.647186] kmem_cache_alloc+0x2af/0x760 [ 215.651339] ? percpu_counter_add_batch+0xf2/0x150 [ 215.656273] ext4_mb_new_blocks+0x778/0x4740 [ 215.660684] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 215.665700] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 215.670708] ? ext4_discard_preallocations+0x13d0/0x13d0 [ 215.674230] binder: 20770:20772 got transaction to invalid handle [ 215.676162] ? lock_release+0xa30/0xa30 [ 215.676179] ? kasan_check_read+0x11/0x20 [ 215.676197] ? rcu_is_watching+0x8c/0x150 [ 215.682868] binder: 20770:20772 transaction failed 29201/-22, size 24738-0 line 2852 [ 215.686803] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 215.686818] ? is_bpf_text_address+0xd7/0x170 [ 215.686839] ? kernel_text_address+0x79/0xf0 [ 215.716519] ? __kernel_text_address+0xd/0x40 [ 215.721021] ? unwind_get_return_address+0x61/0xa0 [ 215.725956] ? __save_stack_trace+0x8d/0xf0 [ 215.726392] binder_alloc: binder_alloc_mmap_handler: 20770 20001000-20004000 already mapped failed -16 [ 215.730289] ? save_stack+0xa9/0xd0 [ 215.730304] ? save_stack+0x43/0xd0 [ 215.730319] ? kasan_kmalloc+0xc4/0xe0 [ 215.730331] ? __kmalloc+0x14e/0x760 [ 215.730345] ? ext4_find_extent+0x775/0xa10 [ 215.730355] ? ext4_ext_map_blocks+0x293/0x62f0 [ 215.730373] ? ext4_map_blocks+0x8f3/0x1b60 [ 215.756190] binder: BINDER_SET_CONTEXT_MGR already set [ 215.759003] ? ext4_getblk+0x10e/0x630 [ 215.759017] ? ext4_bread+0x95/0x2b0 [ 215.759029] ? ext4_append+0x14e/0x370 [ 215.759042] ? ext4_mkdir+0x532/0xe60 [ 215.759055] ? vfs_mkdir+0x42e/0x6b0 [ 215.759071] ? do_mkdirat+0x27b/0x310 [ 215.772653] binder: 20770:20791 got transaction to invalid handle [ 215.773290] ? __x64_sys_mkdir+0x5c/0x80 [ 215.773310] ? do_syscall_64+0x1b9/0x820 [ 215.777278] binder: 20770:20791 transaction failed 29201/-22, size 24738-0 line 2852 [ 215.780893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.780910] ? save_stack+0xa9/0xd0 [ 215.780927] ? save_stack+0x43/0xd0 [ 215.798822] binder: 20770:20772 ioctl 40046207 0 returned -16 [ 215.802278] ? __kasan_slab_free+0x11a/0x170 [ 215.802289] ? kasan_slab_free+0xe/0x10 [ 215.802302] ? kfree+0xd9/0x260 05:44:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000006000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x80d, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x8000, 0x0) connect$pppoe(r1, &(0x7f0000000380)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'vlan0\x00'}}, 0x1e) io_setup(0x7f, &(0x7f00000003c0)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x20) io_submit(r2, 0x5, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x40, r0, &(0x7f0000000400)="a102dd439833624cd2f54823d100ef3c89db63114e6f44cd113436893510127532df422ffb0799f3278b7985feab08cb357da5dc478fed08cfc31e0c1b247b25a0ba2d60e5d3b29b6480b3b5574cf49b75ad0ad5a80a57ff64f75f13f10fe361c04cd6451265acc76a9a36674293206969b36de1a1ae0e34da72d58a32bfb0461cd89e12777e22d22f83f21bad639e8eebf69ebee6d5c7b08126ba7d8f7cf752c64d430dbcf949d2e28a80ce1a2085827c641c68c2", 0xb5, 0x7fffffff, 0x0, 0x0, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, r3, &(0x7f0000000500)="692f1901c92e312cb46e946dcc6816ab144d6ac4754cd22799c182e3a343355426fc67e63b264963122f6c4dd4a6fe989b6532d92fa936c313f3fa7d7cda2d30e52977b7ad6cbdde4c9fed04c3ae199781242ee67664d45f3848af96ab2a56c17b53e539307e752af5a9b84245ba56a9ce", 0x71, 0x8f59, 0x0, 0x1, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000005c0)="8803579e468fe09a8cd9126338f24b825ecf828fcabb616c8eea1ed5cd30ee838d20d27d04bf615a820afcdd537af10c3c261acbdfde013def2840c98ab02f52e6636aa77cc71d9adcc15f4880539448d6142c3187dc079a936387547513e935da00941459fe7a8c5a", 0x69, 0x5d4, 0x0, 0x1, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000900)="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", 0xff, 0xffff, 0x0, 0x0, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f00000007c0)="038bc03a7060", 0x6, 0x3, 0x0, 0x400, r1}]) ioctl(r0, 0x8912, &(0x7f0000000640)="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") r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14) sendto(r0, &(0x7f0000000040)="870273e9d54dff5152f46bed81046a59e1f3e68affbb9180e65aa020b8a50c70206884e957b98feae355f8a615295b2e4545169a679ce80c2e98e4655016c94b68deffcef447bd44de3831a43e037873b9a312221c979cb59089414d5056cb5b2c4107aa5a327af4d37bfe273dea8ba7644ab63b77f7d8e1baa10598c3c7750604736bbd01688e5fda988883248c0657acb7182fdb2d738525e10bdad3ad641c172b01f5cc77f7", 0xa7, 0x80, &(0x7f00000002c0)=@xdp={0x2c, 0x1, r5, 0x3b}, 0x80) r6 = accept4(r4, 0x0, &(0x7f0000000000)=0x7, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="ad56b6ea54c721afbbd4beef915d564c90c2000000000000", 0x18) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000880)) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000b00)=ANY=[@ANYBLOB="9300000000000000feffffffffffffff0600000000000000", @ANYRES32=r3, @ANYBLOB="00000000dd0700000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="006900007914000021000000010000000000000000000000000000eb", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000020000000000000000000000000000000000000000000000"]) write(r6, &(0x7f0000000100)="240008001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001", 0x21) connect(r1, &(0x7f0000000a00)=@rc={0x1f, {0x1, 0x6, 0x0, 0x8000, 0x0, 0x401}, 0x7fff}, 0x80) [ 215.802316] ? ext4_ext_map_blocks+0xede/0x62f0 [ 215.802330] ? ext4_map_blocks+0xe31/0x1b60 [ 215.802343] ? ext4_getblk+0x10e/0x630 [ 215.802360] ? ext4_bread+0x95/0x2b0 [ 215.836639] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.836859] ? ext4_append+0x14e/0x370 [ 215.841662] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.845204] ? ext4_mkdir+0x532/0xe60 [ 215.845220] ? vfs_mkdir+0x42e/0x6b0 [ 215.845234] ? do_mkdirat+0x27b/0x310 [ 215.845248] ? __x64_sys_mkdir+0x5c/0x80 [ 215.845264] ? do_syscall_64+0x1b9/0x820 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x803, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 215.845278] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.845297] ? kasan_check_read+0x11/0x20 [ 215.908856] ? do_raw_spin_unlock+0xa7/0x2f0 [ 215.913272] ? check_same_owner+0x340/0x340 [ 215.917602] ? kasan_check_write+0x14/0x20 [ 215.921843] ? kasan_unpoison_shadow+0x35/0x50 [ 215.926434] ? kasan_kmalloc+0xc4/0xe0 [ 215.930414] ? __kmalloc+0x315/0x760 [ 215.934136] ? trace_hardirqs_off+0xd/0x10 [ 215.938377] ? ext4_find_extent+0x775/0xa10 [ 215.942707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0xc00, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 215.948251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.953792] ? ext4_inode_to_goal_block+0x2e3/0x3f0 [ 215.958816] ext4_ext_map_blocks+0x2dc0/0x62f0 [ 215.963409] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 215.968432] ? block_commit_write+0x30/0x30 [ 215.972766] ? __ext4_new_inode+0xb0d/0x6620 [ 215.977182] ? lock_acquire+0x1e4/0x540 [ 215.981160] ? ext4_es_lookup_extent+0x42c/0xde0 [ 215.985916] ? lock_downgrade+0x8f0/0x8f0 [ 215.990076] ? lock_acquire+0x1e4/0x540 [ 215.994054] ? ext4_map_blocks+0x480/0x1b60 [ 215.998466] ? lock_acquire+0x1e4/0x540 05:44:54 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000001c0)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cb08cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26fc128dbb534e2ef651c18abdcdb16eba56f5dc72300000000000000000000000000", 0x89, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 216.002532] ? ext4_map_blocks+0x88b/0x1b60 [ 216.006862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 216.012408] ? lock_release+0xa30/0xa30 [ 216.016383] ? check_same_owner+0x340/0x340 [ 216.020711] ? ext4_map_blocks+0x66a/0x1b60 [ 216.025037] ? rcu_note_context_switch+0x730/0x730 [ 216.029986] ? down_write+0x8f/0x130 [ 216.033709] ? ext4_map_blocks+0x88b/0x1b60 [ 216.038035] ? down_read+0x1d0/0x1d0 [ 216.041759] ext4_map_blocks+0x8f3/0x1b60 [ 216.045911] ? __save_stack_trace+0x8d/0xf0 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 216.050242] ? ext4_issue_zeroout+0x190/0x190 [ 216.054744] ? save_stack+0x43/0xd0 [ 216.058378] ? __kasan_slab_free+0x11a/0x170 [ 216.062788] ? kasan_slab_free+0xe/0x10 [ 216.066768] ? kmem_cache_free+0x86/0x2d0 [ 216.070926] ext4_getblk+0x10e/0x630 [ 216.074652] ? ext4_iomap_begin+0x1350/0x1350 [ 216.079154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 216.084692] ? __dquot_initialize+0x61d/0xde0 [ 216.089193] ext4_bread+0x95/0x2b0 [ 216.092742] ? ext4_getblk+0x630/0x630 [ 216.096635] ? dquot_get_next_dqblk+0x180/0x180 [ 216.101316] ? debug_check_no_obj_freed+0x30b/0x595 [ 216.106328] ? kasan_check_write+0x14/0x20 [ 216.110564] ext4_append+0x14e/0x370 [ 216.114277] ext4_mkdir+0x532/0xe60 [ 216.117909] ? ext4_init_dot_dotdot+0x510/0x510 [ 216.122583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 216.128124] ? security_inode_permission+0xd2/0x100 [ 216.133147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 216.138689] ? security_inode_mkdir+0xe8/0x120 [ 216.143281] vfs_mkdir+0x42e/0x6b0 [ 216.146826] do_mkdirat+0x27b/0x310 [ 216.150460] ? __ia32_sys_mknod+0xb0/0xb0 [ 216.154610] ? ksys_ioctl+0x81/0xd0 [ 216.158243] __x64_sys_mkdir+0x5c/0x80 [ 216.162133] do_syscall_64+0x1b9/0x820 [ 216.166028] ? finish_task_switch+0x1d3/0x870 [ 216.170524] ? syscall_return_slowpath+0x5e0/0x5e0 [ 216.175453] ? syscall_return_slowpath+0x31d/0x5e0 [ 216.180387] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 216.185404] ? prepare_exit_to_usermode+0x291/0x3b0 [ 216.189997] binder: 20794:20811 transaction failed 29201/-28, size 24738-0 line 2967 [ 216.190418] ? perf_trace_sys_enter+0xb10/0xb10 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 216.190434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 216.190453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.190464] RIP: 0033:0x454fe7 [ 216.190467] Code: 1f 40 00 b8 5a [ 216.208817] binder_alloc: binder_alloc_mmap_handler: 20794 20001000-20004000 already mapped failed -16 [ 216.213265] 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.226440] binder: BINDER_SET_CONTEXT_MGR already set [ 216.229399] 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.251589] binder_alloc: 20794: binder_alloc_buf, no vma [ 216.254206] RSP: 002b:00007fce3d4e7a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 216.254222] RAX: ffffffffffffffda RBX: 00000000200005d0 RCX: 0000000000454fe7 [ 216.254230] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000440 [ 216.254238] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 216.254246] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 216.254254] R13: 0000000000000000 R14: 00000000004d39c0 R15: 000000000000001b [ 216.256599] binder: 20794:20811 ioctl 40046207 0 returned -16 [ 216.259864] binder: 20794:20831 transaction failed 29189/-3, size 24738-0 line 2967 [ 216.325792] Process accounting resumed [ 216.357127] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 216.391606] Process accounting resumed 05:44:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = semget(0x0, 0x1, 0xc0) semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000180)=0x8) socketpair$inet6(0xa, 0x0, 0x7, &(0x7f0000000440)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0380033e", @ANYRES16=r3, @ANYBLOB="04002bbd7000fddbdf2509000000080004000000000208000400580a000085a6606672a35218b32fcac9010acf92746902ac5d5aae8209705514f035b7"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x1) faccessat(r1, &(0x7f0000000300)='./file0\x00', 0x98, 0x1800) 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:54 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, [{}, {}]}, 0x48) 05:44:54 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x1000, 0x40, 0x3}, 0x10) 05:44:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:54 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000500000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x818, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 216.452500] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.459549] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.478554] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 216.478554] 05:44:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x5, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x100000001, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @loopback=0x7f000001}}}, 0x108) 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:54 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x1) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 216.500868] binder: 20853:20854 got transaction to invalid handle [ 216.507217] binder: 20853:20854 transaction failed 29201/-22, size 24738-0 line 2852 [ 216.523787] Process accounting resumed [ 216.537142] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:54 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount$9p_fd(&(0x7f00000000c0)='vboxnet0keyring!\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,port=,rfdno=3,wfdno=5,msize=3']) 05:44:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x807, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 216.587398] binder_alloc: binder_alloc_mmap_handler: 20853 20001000-20004000 already mapped failed -16 [ 216.597117] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 216.624064] Process accounting resumed [ 216.629502] binder: BINDER_SET_CONTEXT_MGR already set [ 216.630874] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 216.630874] [ 216.637084] binder: 20853:20854 ioctl 40046207 0 returned -16 [ 216.646776] binder: 20853:20880 got transaction to invalid handle [ 216.657848] binder: 20853:20880 transaction failed 29201/-22, size 24738-0 line 2852 05:44:54 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 216.687125] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:44:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount$9p_fd(&(0x7f00000000c0)='vboxnet0keyring!\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,port=,rfdno=3,wfdno=5,msize=3']) 05:44:55 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x8, @loopback={0x0, 0x1}, 0x10000}, {0xa, 0x4e21, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x49974501}, 0x4, [0x9, 0x200, 0x7, 0x4, 0x3, 0x80000000, 0x101, 0x15c9]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='\neiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 216.776102] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 216.802725] Process accounting resumed [ 216.814139] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 216.814139] 05:44:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000aa900000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x900, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:55 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r1, r2, 0x7, r0, r0) r3 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r3, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10, 0x80800) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) 05:44:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='%eiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount$9p_fd(&(0x7f00000000c0)='vboxnet0keyring!\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,port=,rfdno=3,wfdno=5,msize=3']) 05:44:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 216.833719] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.839675] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.861365] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) syz_mount_image$btrfs(&(0x7f0000001300)='btrfs\x00', &(0x7f0000001340)='./file0\x00', 0x88d, 0x2, &(0x7f00000014c0)=[{&(0x7f0000001380)="73d7cdf7d61a727dde79cb20fc53b5b4e62f572c6cafcecc0a887384fc36ec7c16313832b1203cbfcbc32ae16dd5de0a96f6ccd870abd3446d7c13d65da8d4ab66fda98010c0463fb491efbf9809eec6a7f7b3e21ed67215107f5b6bcc8d15d0c9ee7e08398d9ba25f862f9cf5e30c485cb5f1a09a1e8d31061d143435ff6316915e9383edaacdfd1870d30608333c35e0c460dc14f5fe27628afd872320bed4fb36588c251ffd18420d6744b34272b1fec50f89ba3285fa3cd3ff8b08ce4f6f36f523cb1674e15714c96d1df6911da6cf4b5dd61b7c43f72d5ed81293121362e39ee7ac41ed8ee409ed1507bf99b4cb91f4fd", 0xf3, 0x8}, {&(0x7f0000001480)="788f7286e3", 0x5, 0x1}], 0x1020000, &(0x7f0000001500)={[{@check_int_data='check_int_data', 0x2c}, {@metadata_ratio={'metadata_ratio', 0x3d, [0x0]}, 0x2c}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}, 0x2c}, {@inode_cache='inode_cache', 0x2c}, {@fragment_metadata='fragment=metadata', 0x2c}, {@fragment_all='fragment=all', 0x2c}]}) signalfd(r0, &(0x7f0000000080)={0x6c}, 0x8) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="6f73322e6c6f73656c696e9bdefcee8b328c5fa10bf8b2dbb675"], &(0x7f00000012c0)=']\x00', 0x2, 0x3) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000002c0)=""/4096) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x140) 05:44:55 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x808, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 216.916508] binder: 20938:20939 got transaction to invalid handle [ 216.922837] binder: 20938:20939 transaction failed 29201/-22, size 24738-0 line 2852 [ 216.945116] Process accounting resumed [ 216.978685] binder_alloc: binder_alloc_mmap_handler: 20938 20001000-20004000 already mapped failed -16 [ 216.990100] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 216.990100] [ 217.002654] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 217.012880] binder: BINDER_SET_CONTEXT_MGR already set [ 217.013835] binder: 20938:20957 got transaction to invalid handle 05:44:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 217.018888] binder: 20938:20939 ioctl 40046207 0 returned -16 [ 217.024500] binder: 20938:20957 transaction failed 29201/-22, size 24738-0 line 2852 [ 217.042632] Process accounting resumed 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x500, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='feiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 217.072435] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 217.096927] audit: type=1326 audit(217.095:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=20976 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ba9 code=0xffff0000 [ 217.106407] binder: undelivered TRANSACTION_ERROR: 29201 05:44:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000600000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:55 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x5, 0x8000) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x80fb2, 0x7fffffff, 0xffffffffffffffc5}) getsockopt(r0, 0x3, 0xfffffffffffffff7, &(0x7f00000005c0)=""/40, &(0x7f0000000680)=0x28) r2 = add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)="459daf2416932168331dc9c143646ed685615116c1965cbed7d9d8994b5e6c7e984c33fa00f4a8e08e46f6", 0x2b, 0x0) r3 = add_key(&(0x7f0000000640)='logon\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0xfffffffffffffd6d, 0xfffffffffffffffd) open(&(0x7f00000006c0)='./file0\x00', 0x40000, 0x118) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'rxrpc\x00'}) keyctl$search(0xa, r2, &(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, r3) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f00000004c0)='./file0\x00') sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="c8bb139b81a09abec0f2b5c7bcd44cf2a15643dc98803b0b1b2021a6ff95d388b683ad8002c5e0d9fa2ab4ad537a746819fb59f3d5eea6efa4d8b614c9fb9aad2c4dfcc13bb49432f35e7df496f9e992934ae847782d484083715066ae00fe9db81823e35b92a341bae7ca631bec519b9fdbdccd00e897471e6fcde1bb506a9af2b4e93c", 0x84}, {&(0x7f0000000300)="fb1622cbfb0df9f7efbf3df836a0af245c45588ce656d2d01061d1686f554a2aa30c16a5ab2c885b331486030220d474a0f07907335ac4dabcf6a7f012c121c36933c3ea1a6e7fbef702b85028bf9bf9062ef984701d3e9984b61303bb7ae5bf0e3b68a4e81c1474446cc613fb3c09cc177fdcbf7736c6c1080961db47c588a61d974c42c32ec7ab441deff7e2f112e1d34464844532b07b907b3aef123adebc36bbd47283dd758d52ffbb3cef0ea8f5d8d9ec58672278bbb3445ff6920c140d70b4b70c0e39675fe6d1102a79e9971728203fa7a31e9781af7557868031c6a14f448d394ad0ea", 0xe7}], 0x2, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x800}, 0x1) [ 217.118707] Process accounting resumed 05:44:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind(r0, &(0x7f0000000140)=@in6={0xa, 0x4e20, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0xfe25) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) ioctl$TIOCGPTPEER(r1, 0x5441, 0xd7ea) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xffffffffffff7f81}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x6}, 0x8) 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x4305, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:55 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 217.163557] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 217.163557] [ 217.163562] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.164703] binder: 20989:20990 got transaction to invalid handle [ 217.186403] binder: 20989:20990 transaction failed 29201/-22, size 24738-0 line 2852 [ 217.208236] binder_alloc: binder_alloc_mmap_handler: 20989 20001000-20004000 already mapped failed -16 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 217.236382] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 217.245824] Process accounting resumed [ 217.246849] binder: BINDER_SET_CONTEXT_MGR already set 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='r%iserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 217.277238] binder: 20989:20998 got transaction to invalid handle [ 217.277891] Process accounting resumed [ 217.283682] binder: 20989:20998 transaction failed 29201/-22, size 24738-0 line 2852 [ 217.308082] binder: 20989:20990 ioctl 40046207 0 returned -16 [ 217.314341] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:55 executing program 7: r0 = socket$inet6(0xa, 0x7ffff, 0xfffffffffffff548) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)={0x303, 0x33}, 0x4) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') splice(r1, &(0x7f0000000000), r0, &(0x7f0000000040), 0xffc0000000000, 0x4) 05:44:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) acct(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000200)={0x0, 0x0, 0x2, &(0x7f0000000180)=0x7fff}) 05:44:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x858, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 217.327609] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 217.327609] [ 217.374767] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.380523] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.410166] Process accounting resumed [ 217.433519] Process accounting resumed 05:44:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000001800)="e3360bd282ac96a1895c0fe0ad1505886ff841b929a4be0aa51356b432cfd02a109bc9f7fa44a0246dee8c2bec0aaf7db09c1061cdee48f04bd24568537c88b6bac3d31e0cdbeedd0a8c262c81244404e9b3c4b9a1650d64c5848cb25436072b152f450ba7147accf560", 0x6a) 05:44:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040006c000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:56 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:56 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) pipe(&(0x7f0000000000)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='r\niserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 217.869665] audit: type=1326 audit(217.868:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=20976 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ba9 code=0xffff0000 05:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x814, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x0, 0x4, 0x3f, {}, 0x8, 0x9}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000240)={0x40, 0x78, 0x401, 0x1, 0x6, 0xc06}) [ 217.930488] Process accounting resumed [ 217.934193] binder: 21052:21053 got transaction to invalid handle [ 217.940823] binder: 21052:21053 transaction failed 29201/-22, size 24738-0 line 2852 [ 217.954142] Process accounting resumed [ 217.955281] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 217.969142] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 217.969142] 05:44:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 218.000019] binder_alloc: binder_alloc_mmap_handler: 21052 20001000-20004000 already mapped failed -16 [ 218.014812] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 218.032919] Process accounting resumed [ 218.036698] binder: BINDER_SET_CONTEXT_MGR already set 05:44:56 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x9602}}) socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='re%serfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:56 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x802, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 218.058909] binder: 21052:21053 ioctl 40046207 0 returned -16 [ 218.077180] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 218.077180] [ 218.082546] binder: 21052:21080 got transaction to invalid handle [ 218.090787] Process accounting resumed [ 218.095270] binder: 21052:21080 transaction failed 29201/-22, size 24738-0 line 2852 05:44:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x152) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000240)='./file0/file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bind(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) [ 218.129430] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 218.158129] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.171728] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.190796] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000001800)="e3360bd282ac96a1895c0fe0ad1505886ff841b929a4be0aa51356b432cfd02a109bc9f7fa44a0246dee8c2bec0aaf7db09c1061cdee48f04bd24568537c88b6bac3d31e0cdbeedd0a8c262c81244404e9b3c4b9a1650d64c5848cb25436072b152f450ba7147accf560", 0x6a) 05:44:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340406800000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) 05:44:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='re\nserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_fd(&(0x7f0000000080)='openpromfs\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x22001, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d66642c706f72747ebe4a9530b97dcc282943320900362c7266646e6f3d3678332c7766646e6f3d7b332c63616368653d667363616368652c6163636573733d75736d722c6163636573733d757365722c00"]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000340)=""/168, &(0x7f0000000240)=0xa8) 05:44:57 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:57 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x8000, @loopback={0x0, 0x1}, 0x4}}, 0x8, 0x0, 0xfffffffffffff0d9, 0xdccb}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r1, 0x1}, 0x8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 219.086643] binder: 21139:21140 got transaction to invalid handle [ 219.092979] binder: 21139:21140 transaction failed 29201/-22, size 24738-0 line 2852 [ 219.106772] REISERFS warning (device loop5): super-6502 reiserfs_getopt: empty argument for "resize" [ 219.106772] [ 219.106781] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 219.106781] [ 219.126057] Process accounting resumed 05:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@resize={'resize', 0x3d}, 0x2c}]}) [ 219.133587] binder_alloc: binder_alloc_mmap_handler: 21139 20001000-20004000 already mapped failed -16 [ 219.150186] binder: BINDER_SET_CONTEXT_MGR already set [ 219.151289] Process accounting resumed [ 219.169209] binder: 21139:21140 ioctl 40046207 0 returned -16 05:44:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reikerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:57 executing program 7: umount2(&(0x7f0000000000)='./file1\x00', 0x2) socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 219.180475] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 219.187739] binder: 21139:21151 got transaction to invalid handle [ 219.195799] binder: 21139:21151 transaction failed 29201/-22, size 24738-0 line 2852 05:44:57 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 219.246740] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 219.246740] [ 219.273473] Process accounting resumed [ 219.278340] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.285186] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.307480] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 219.340832] Process accounting resumed [ 219.366476] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/161}, 0x18) 05:44:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000060a8000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@resize={'resize', 0x3d}, 0x2c}]}) 05:44:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000080)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei\nerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:58 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x2, 0x14, [0x20, 0x1, 0xfffffffffffffeff, 0x5e6, 0x28]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:58 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x7, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@resize={'resize', 0x3d}, 0x2c}]}) [ 220.082762] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 220.082762] [ 220.084845] binder: 21210:21212 transaction failed 29201/-28, size 24738-0 line 2967 [ 220.102087] Process accounting resumed [ 220.108460] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000080)='./file0\x00', 0x1) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r1 = dup2(r0, r0) pread64(r1, &(0x7f00000002c0)=""/214, 0xd6, 0x20000) 05:44:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reioerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.148272] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 220.159105] Process accounting resumed [ 220.186432] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 220.186432] 05:44:58 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfst', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x9, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:58 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e21, 0x66e3, @empty, 0x2}, r1}}, 0x38) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 220.216463] binder_alloc: binder_alloc_mmap_handler: 21210 20001000-20004000 already mapped failed -16 [ 220.232072] Process accounting resumed 05:44:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 220.261861] binder: BINDER_SET_CONTEXT_MGR already set [ 220.279274] Process accounting resumed [ 220.285113] binder: 21210:21212 ioctl 40046207 0 returned -16 [ 220.298200] binder_alloc: 21210: binder_alloc_buf, no vma [ 220.304052] binder: 21210:21241 transaction failed 29189/-3, size 24738-0 line 2967 05:44:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@resize={'resize', 0x3d}, 0x2c}]}) 05:44:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x40100, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000417caec88ee259b5a84880a9645a"], 0x58) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'team0\x00', @random="76659698108d"}) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x1d, 0x11, 0x1, 0x14, 0x3, 0x93, 0x3, 0xce, 0x1}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000001200000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiberfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.328723] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.334768] binder: undelivered TRANSACTION_ERROR: 29201 05:44:58 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfsL', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.380192] Process accounting resumed [ 220.392521] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 220.400408] FAT-fs (loop1): Filesystem has been set read-only [ 220.412672] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 220.412672] 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x6, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:58 executing program 7: socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x5, 0x100000002) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x2, 0x1, {0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x3a) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000001040)={0x16b4, 0x14, 0x1, 0x0, 0x70bd25, 0x25dfdbfd, {0x52ba15fe2ab05d6f, 0x0, 0x4}, [@nested={0x40c, 0x13, [@typed={0x14, 0x6f, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @generic="e4fe27702cc28312027b1c7063cfbec09ddcf52c4cfc81e95843b02c13c994ca928e555838e978fa084a6a8de98240ffcc1039a30e804b2a4aca2d9fe4a55e74e34c529f5a9f7ac0fbb594a30bc950be709b902b70ed1923f2668985079f43a01f07362b0a87c9ec8e7f0398223e8847342689bbe70bb59e55f75ad9", @generic="fee5031caec08d80b83a7f0d6b44a25e0cbde9c977adedab06be471cfbe2d69600963e2f64ce3ca97b975c66a84d6ee341076c6e98058844fbb7b92e6aa2eea587d7b5874ab216cda2b1165148006544a67494f5bf58365c415f5231292ab5025daf906606ab3ae1f356cc77545b39eac31f8aa578c58bdecdf784a06b61f3e4acde2b43220952586530de87813805504de93d26464caf213053e14f5d454b8c409e86684b0305b91f7af36b81d8aefd9a077e1b4f278898", @generic="a6c3cf72036eb72a9e7651e9639a0cabead6dd7777672cf3862faf1bd45b79536662b460027ed35481cecb069a42ac67b7f8ffefad677464a3b54c3b47c311e650b86276bb43ac8a3ff8c95a6d48b9cf704e6d3129ea0af54bfb9f4db2b6456f85e31a287ae449a46230d5f01fbe9c0b5107d2827124af90c84329e8d182f0eb319f12f1d2ebd2466db2f5da507a8094427b8ee6bb799c8c897d2a9e132084cecf43e4bdd3ac91ae265a88d9850482afda0ae2a26a4b9ab8792ba074c1cb8e6cfce48123c3ed4a1a93405fd6b16d1cbd7b0e71ce17bbe62980a39553851d18591a41f8", @typed={0x8, 0x8b, @ipv4=@multicast2=0xe0000002}, @generic="068d612ac4bf26059629b10603018c6888919fa2aba1d5fe7624b6c43e0e798c2e3f9720847710c088ec32e373d30db40793b1f0f35c665364b2f2332ed6d695c3c93272209f5bc880cdcb4deff3855c93cbc193b940f5c9bcdb9fc436500e7b74393aa3758754e62d4d791585b712e76e54f4cba50c375c95a59a190dad6cda1290ad6ae7eb7fdad0d31dee141125269159a61622", @generic="bbd3cbf2d45f02f38354de9a3906125b0154beaa78a671da6d102e46e4a17cb93a4a0baa574e9f923a14e642c991965b26d34733e0444c9fabbce178a3018aca1c476749f05828f51549536564cb5ab8b399c9a4d268274b271efd1756ef706d7433ba62f6373469a21aa63d2420314c1f224984127e6f14be31436387734f8c0c416492f959ce04bce4ca8966cb2b7a763caf9491359219f78f327ccc62a354e3913f8a48a4b295364099023edd9a8c9ab161136481b725f20914beb2be25c31484d2856d69e6f1dd6c79bf2ec1bf1119e36337f4f134b43f44ab3e112cb1f25c7f37ddaf91", @typed={0x4c, 0x67, @binary="c16f758701d33dc6f1afe8ba3f00a99bd9b831c078dd1e9048547d97f4cf9b070e13b6e54652ace5ca99dee6905254caaf2cf23275e229db425831ef96c8b5d997bd619dbd"}, @typed={0xc, 0x63, @u64=0xdd}]}, @nested={0x1b4, 0x36, [@generic="0e463038cce1435995273b25513611c76ba873191f52fc6ac6b605b991f27bfaeb9fd2ce837b0603ac86d77aeab6cf57a7a7fccf89952e491ea1d3adaf222bc9b7acb6255e88c6cae83e078e77b0e5bfbbd613", @generic="f30e27685e4937b38c23f778e5c5a860fdccd62fbe459f953d639fc38280304616beb35433d97ed9c4bbedc58bd586f9d16f827d0f256004bf3635cfa7a1456e7e63f4d6642fb522ed39df8f62abb0bd466a916f3cbfc89a25656f7e78ef464b1cc49c6f39124e4383c0ce74e9c8abb71d0ca8df2402947261b1aa3bcb4564c461bb8ce688402132ccbea0cddf34e3051ae3361da7e765684b2b6d4ff3a46bce78d0b623be244ba7ee06cca9e9d8", @generic="e1f64e9362e3c8384c26da380498ced4c6ae73c2752c6491121c2a52ecbf902d6a7af4fcea5a0eacb544f64a291c230d401892c9a10c8111f52befdadc13d635d906001976af39ed48111ff6a77d867ddb143ba36b5ad1689859857be6c92af91b2c2580b438a8200057b2dbdbfcddcaa0e67d6ce366d1e25c86e94895ff9f5bd5eff7b7bb4dce66d1fd5157842f54fd8e534d0775f08c7e3672e46439d7d78775f226", @typed={0xc, 0x77, @u64=0xc2}]}, @typed={0x4, 0x6b}, @generic="b12eecd074079745a0fa563292a8fb78229e53c353837a940e72c0369878a0ff37249a6cd225293ed8aa8fc64602d82f0289dab96625d8702fbf682c6ca1b597a7d2a7df8ba897a2a5611b99f1f4c1723ea210f9d897d45335edeee9df2180ac780da05bbdb6e6ddcb56451f35735645bc4d2dd9f0d6618fdbb4abc7da48849455f3f1b5427a9df0ef56cc596473dc564553b6c9408dfb8e4157c288c0e013034f61f5a26b98d440cc9f9a38c695bfd132de11a7b4a20c9f29805e5603e17727bdf857993528890482b8d12a2de97976c3a567dd79971d7eb476b50df51ee5cc5adc7e26d64b3a0c864567e7cbe6afde51708ae41e7c6e49afe3c20c4d2e28ab69701211dac6c7839852c22387bc2463028bacc59530f45dd076804f04012b788848ff578289b84a3cb0b72eb5fb6d776467dabc5a0b04b8a1835b4c0cb194486cc15175dfcb9557e91e05b449313e25d0b921eb624b760c8b6e0dd2b6fd9ca1964037835b89420f1f7a52b24b9aad6735b82ed3287c56b3bd003a4b3919a973eda4b296251c44b183801f793faafea753793f99a3484646dac8cee3fd45692aeaa8367e018db3d5c745f0915d878e86c5c48d59347eb5fe93b95f2b663110b4ce1c381f5369e603e9539d816444f909f15f04d8ab2a5478de5fcba76006ef7a903a54a1cbc2a83d745bf33b8bd0322170c6364f8f6ea5bf886c0f92e1e613d45f05a832051ed420248be09fd6ee15a6184dd7e3f3364cb0cb2e51627e5cac1c1bbdd87a2b662d46b454a5d54d9255797ffd388bd6b9fc9dae76888fb62bee93ca95f933332ad623d24dd3bd9e895cbfbae75eb49c9fe166e9c58f032558fff053bc8a95f2fa901706e1a0a07bb176bf40ea048b06d51e5081e0b1eb2beb99e58ccf2500f852ba2e5e4dc6814e1249abfdc85d18bbfe8d7370ecac8c1af542a57afa59ca413aebeca8f661bfd7bfb7a8ccfba20f15d6e1e8c3b52fcfb2de33079466204a101a5c8154d9d8949ebc77cc01fbf529f5b5f9c2b7951a77c9e8d94efde2144753481b43cfabb92f1b3c5d35cd4603952ec650e99436e4b41b9ed482826569a2e863ae715e23a5d527a0b745b370ad5cd512befda183e1e4804d15d29e70e60c0c7d3bcf689d597f4cf8d36fc1839b511249e4e2bc6a619bf4335faf55fd240ed710c683e3155e5375660a4003557a18b0a1748606945921ecc735c62fcdf8387a63227ab8ace816c04abc017b00811fc6e757608d8631a5a2a729fe073f418715bf1f5b01380f66e79863fd4c678c7f0cfc0b5cb2b999d332e25ab56d4e3d3de35055779175a0f5bd591b125f9be5bb16b847765ab6c818bd74604ee9047efd9958e5006216687a69604568c0c23a48c766ce19818f2412ad48306471b4921b4639667c43d70e5a22c88f2cc83c7bb7909a8ff60c9d8eb675856647de04c40522e19c182f84c8413baa259a4710bf9d209e61422bbd4e0b0737548561eb8f01c6bc15a7503f04452879570631a349923760f61a2f3445b9863c7263a915246613bb86593eb0a5ed6c2754d0768c4db37d7cd04eeff2a73f39883b6946ac88803684c29811e733300f016e4e1306b0ec6fc713eda80a0f67736c66d8bf547bad86f42d0cb5335c7e38f720a9fc40cb1740115dced189c7c691d62c2d93469abfaae31fdda98677385c8fa1159dcb02d9dcc5b73e3c2078c64ebd496fcfe931d8b6a7cf4d57fb5644c93333a138ed8f85d3b8a866e1140194660245d238e5c3329a81952c6748107224f6f32d2ccfcc4d19d3acd669f0642950646e09272107bdf27b8638ec6e5d66762d2d33438013dadb04ca60ce5f547a1f6fb1b900675bcfb87d1fb61b0352edc87e045581571585b6c07fcd3d6bb7ce2e02c855e946ea9cda52a4c5c5e96460f5e3713fa9acab522d64a41b902264c18b40a9d735df2f35162cee2f7195c8cedff0cdeed9f3095d92f582631bf3ccb47e24d40dbefa13bc69aa967b8a018a5b5f46db275b5aa58ef66bd6e97617ce50b197a676a6204ea228069540e330dc3d2c9b1630820e5e4b601e69267202a764009256d0e296047d3cfe3f6feb253738100bbec46f5009f7bf0e085dd489a0f9ebf3313ae07a75a445f313a99ff07ae82dc9009139c465d02fa5dd48e6011b43547fac607c690cb09e6e4a3e4c0ae622836b77cda50ddd1d7539f1e0eeb5861adad67b1737c17ead32c0052d7636dabddb65d8717c3aaf22368696a0453f16ff35f8e2750913735bbe1d3dc2a54cc5d996be2e909165fd7a366a49b06353a0d9e55b2b50446db1ce34ca7cd49f5864a06bb0daf1e7f57d4fd4786e19edc0a1d00534762fda69f5d019a89dd2a22039f52ed52b06b0078c4a1d60c4c6afcfbb1097d2aa843d7fc1b9497cc4149a1c043a7706681d03f4d3cc1ff85485338b6f15c567045cdc0a8e95cf22b77b0ea532b7666ee06ad79383734450ebe87afa8caaa476e47d18ebfe8febed1abd903007d8f00b9c2e7aac92b5b6a2c1e53367b60cbe59f793d8d48410b34f8386ce5e3978d3f595492c7e43e87555ad875fc4d035dfccda46b7d7e593c4458749dc45f9504e0d78b405c6475165db27e64177cb40c020381057406d4aa3ccb2fee955b23bf528260f44d6618c2f6bf4a6b30976163e04c756b19922f0f5bda3351ec0ba1606138f6ed058488dd2ff2a4b33f4d383101d69db5843c435cdf32e8a1d3fad694e0989f887efeeac909975da3e59ee67f7f62b144c9ba4679dc12589af1330b0f409125331e8d2ee1eee975536fede8f7a21dd9efc322aeaf80d27c61afc5a4f069355de50e668218a5286d26eda5ab1dc3a7b9f65ea50ed1ddacb76ea0555ecf1809e3fd8be79f4fbc2d791d55e81b9709782434ec94ebabc4be2a5160fa4e3a7d4897aa1361fe52e1d76f58976c33a0a2ac677e030fb80e7b5c598ad96fde0419e914a97c1cea5a2cca25bd27c3ee4437f47582f7a6b8c447985c7d7bc60f80ac1b271d5bd119df0811499ff049906baa189a2785187fffb7aaa40b09a2bf981b5d26d638fb6982ae79e91eaa4db94ed822bc6304e057a4dd72ca1810db2aee9e88ee6160865fabb639474ca333ee361317f930bfa4aadc9cd5b1a26043385252687bc794a16dbd2e67188dd4fec150c205956c1e3b607b99bc237ad9b9f49405512c5937a82fe6267261486bbcc60837dc2304845b682c9272529f2a8cf888707412ca7f2356d4de2a17b46a515edbf9b05dbbf9a78c371c0d671adda98f9bfd9b4853722956eb310d0163085246a4aac31668430ccef07e599849bbc2d29a9eb949d0b63a33fd0d39d3f933a41a257251caa369550ba93bd8a328cd9552ff0e0aec105c130212e055fb82f8ec81e5201558a4659cdc4ec7408e3f8397d6cfc4febb521bc39fc54a801090580cf0ac55bfb8a4449227bdeb1307ad7e4f529a16537308d77a06b5575bd6d194d4e73ce21f8e626835209c76e627dca7c6e340b8840c46a6c867918be740f249c1a718aed7c39569c3a0b98751c8f499866f3299b8e29ae09708806e4e6f62c811eaf66aa306b0857af4ff190f1435334251a6a0d75491f36f1471b3f016383e10fc77eb21b8dc74b5ad32e726c508e765509f6d1ee37c4928996b109150d708b69131b9d77b1b8620c8e7bdbd7ea128bd52bfda08b814ded5156418eb8085ff56d0964248afa885b50c11a9c498844e8263223f665f468b0894c7d6a4e60900e92c6c67324fc8b537cec6d11ab75c7d3716ff3db7bf6c1653efce262699159bb738896c2c7cbe61c3c20b21941aea0036111a857a6924b13efc548800d03f716c939a9e9be67abf903e4e5da3c9529794558348193cea33720438bdb086182638229d5952ab915f16c82f3c3fe24a94f959b275c5bdfc80d3464f337070734242c53765462bf78b484be5f32856804de2f0897f59046736e526ab38505bb779217874be9a181436ae3bb14775a2867b66635ed066f95d7dd272cba9ffb4aa07b8c62294f27b01a7a9942327441c2a80fd5aa682e620a2b3a606ef5a2ef5da6deeb58a8c0d0d3c7036f1b7e66b7abb02f7ef411a55032ecbec89da4bb178f2d5ad5e5cd28d1248ee173fb0c53dcfc3a2907529f7af85c1f20c130fd3d27dbfbec3ebc1c244200278d5546e27be7054e87e51c732b60d22f895c0df35059d4e8e1a5b936c501dc289cce8282d3b399dc4d45b91957aac329db1a32ea44926b24f2979759890bd92871fc0db793be009affcf7f79c14b4b754fedc02bf5cc03a5795a5bf723e69f29ea88121523b1deec294ecdb8ae85f0361920d9331da09eb55351fe2a90dcb7c9c6771ad91503cf37e6c6230f8cad0bedcae3fc7988867ec48128f022693fc53112e9c0a2d62f45e2066fb5feb879d6ba8b039f26186b6d44c7bf3c5498996b62db8951ffe7e64392cbf956661e0af009b84a8a5a7fca3b8dc0f6fda62d33187e4691f710100ca6068364ccb7bc5f96b61778240421614c88a43c23ef172cb0be2bae3d0bd4283a67d0173c5da7a58fed78e397d49a8447fbbb904941fe25e92e7f4b77a93dd89ebd0f13c8af9bb96a8cb2e84bedd13344a76f140b2c3e543617a5c8884395b9593f95618a73d580cc3f666ddf6f212517bc0d876641408d3168b270a0da6ca36c06078a03b29db632b318b0d1932226a9f5b562f7b7771530ea3afe05b470b3ca18faab867fbd5f7fefea0902f5e1768532ba0f9cb83945c2fc5a4cd7bf78ad30ce5a1c504d7e4907d26676dcf7a9de646a0e59e6096177f18b3e4963d2ab806f4c73d05732e5df0dd9b5463dd704a25dd6a952453f079f4e5aed745f01b5a831f2f3f5e30315c20bf6a5734b970c5bad2292e68e1bde6c7a10505aaa9846e40a5c5e4ea551522158eb1e9aa4dffb32cf195329c0fd2d7b6c935c9361fe8c46347679b0a2ef923111a7f61def33c1cd06f893f5e0f181c0484bffadf49fc9ce6d6dafc2b486259b7356d8d5c5c56b71b4467e527eaeb5d5a75a95ad4f5b5726739ea12afb91a213bcbbc5bf64f033418c4eacc0c1c8b37adece829b33a447bc03f63a6f7c4e623a3e0c046de84946dbd7bcaf92050f8b9787f1ecf7c196b3e21185023a885e0484bb12ea1a77cd8c7c53aa29b51473341d72f25b798c00a988ca8eb8dc12948e52ae0aab187d81724a36c29d72fae80e9da9d351cf1f52dbd4da449dcc62d1ed128d193eeaeee887336cb21be4184c42dbf41ddf651522c6513db39147e44694b5260514ef80c303b328d11b9aa23deabd843375709a8bc63fc49b12a98fdf081e8525dee7eee1c8c8d3f46d7656cf22aaaf5839ed2d004067d3895d5fac9d51177760c324b21500165711aad2b1cbb3d6599e0516e19aeea6d9845ebaaf265445c31f3d2c82eadf9e222e2feb6bfab78b413b063c69a1c9d2ff9b61756f5d821d0690b6cd8904d88b63730a469cbba29851e4d48db07e03a01b6d1e3a05da9058d6ee5ecc67e3bbcb9e1f0d697bc9eb35ed6d828af4e470f9835a342c68b12a66d18ba22c0cae27527d80f0af9389a9bf3ce909b1cced343d62316e24f2b8478d8c93dd54c501c96006955339859b17b00ee76516aa6695b802c7cf6b32969549ad5a94bc5cbe002bbb4c0d775145be8641654f77c12c4373ff9ca173cc881cf8973979b2489f2e23156ded58e9977e5678739a3de8a38afabac7e950796c922ea054cb8485395bed89666feb7b8b09cb28c7ba6ebdf8fa0a72b55f4f2303ed0bc27839a9f5dcccbdbf2cae1fb8dda1c1d8", @typed={0x8, 0x21, @fd=r0}, @nested={0xd4, 0x77, [@generic="ca93904267f11ecb69063dab6d52d345f91335bfccc15616ee2aba9a521cf0b7e799bf9ce9bbb037b26c9bae27be0a2e6a3f4909fb1edca7f1b22de67a2826fd472f1af6f51c2b08345326d5d1546b2b48b8ef6dfef6c4e8cb4156f1fa13c90cf912c373337d4fce7f798b9feb78e3dae609cfdc978920d3c2f802dde337e3e9622b7de3df66b4083b08d420bd0546cbb97329200ce0976d91ed7dcdf834777a369d0e9c5bdb25c6cbe909980523730868b23a4f2ad6a90c6fb65d882670d7f7add5ac019dbc47864b80bae0a64b8b"]}]}, 0x16b4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000100)={0x20, 0x5, 0x0, 0x7fff, 0x0, 0x9}) getpeername$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) [ 220.425608] binder: 21288:21289 got transaction to invalid handle [ 220.431972] binder: 21288:21289 transaction failed 29201/-22, size 24738-0 line 2852 [ 220.458915] Process accounting resumed [ 220.468269] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 05:44:58 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000700)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}]}) 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x3, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 220.473581] binder_alloc: binder_alloc_mmap_handler: 21288 20001000-20004000 already mapped failed -16 05:44:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:44:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei#erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.521083] Process accounting resumed [ 220.528075] binder: BINDER_SET_CONTEXT_MGR already set [ 220.553712] binder: 21288:21306 got transaction to invalid handle [ 220.560065] binder: 21288:21306 transaction failed 29201/-22, size 24738-0 line 2852 05:44:58 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) setrlimit(0x7, &(0x7f0000df1ff0)={0x0, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) mq_timedsend(r0, &(0x7f0000000300)="3d017357f0991d99075d2c5d9a2ab503b2aa1ee2f8ef968743fa2599a8a58a5377393299eb21afdaa9dfcf9f53fe8b28a18e16cc9fce0770fdb4e579184dc84ec3d526bddd45f282a64482f9f3724ba583bf0d414483f6c1543066439758e59509cc8593de35e1cfe458c44baa23bdaab59fd3569a9e4abb2d71daaba4c10054a269b259a93dce9ace847a9ebbecc0eb4187b8f3d5cc08efbc28d9be7d41de983305f5e1df3d179fa77746e6ae930099f096829521b478677534acbf7e011d8baa0658", 0xc3, 0x3de, &(0x7f0000000000)={0x77359400}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x1000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:58 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.561100] binder: 21288:21289 ioctl 40046207 0 returned -16 [ 220.578495] Process accounting resumed [ 220.584112] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 05:44:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000006800000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiierfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.649866] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 220.657840] FAT-fs (loop1): Filesystem has been set read-only [ 220.676842] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 220.680730] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.694134] Process accounting resumed 05:44:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "0210050200ef000097"}], 0x20}, 0x0) 05:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x7000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 220.714271] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.734156] binder: BINDER_SET_CONTEXT_MGR already set [ 220.749016] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:44:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:44:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r1, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000f10ffc)=0x3f, 0x4) 05:44:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:59 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r1}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:59 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 220.760336] binder: 21352:21354 ioctl 40046207 0 returned -16 [ 220.776898] Process accounting resumed [ 220.784558] binder: 21352:21354 got transaction to invalid handle [ 220.790955] binder: 21352:21354 transaction failed 29201/-22, size 24738-0 line 2852 [ 220.824225] binder_alloc: binder_alloc_mmap_handler: 21352 20001000-20004000 already mapped failed -16 [ 220.845149] Process accounting resumed [ 220.854129] binder: 21352:21372 got transaction to invalid handle [ 220.860457] binder: 21352:21372 transaction failed 29201/-22, size 24738-0 line 2852 05:44:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiherfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x689, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 220.885183] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 220.914229] Process accounting resumed 05:44:59 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') ioctl(0xffffffffffffffff, 0xffffffffffff3f4c, &(0x7f00000002c0)="e99be80a44a1947731a19ffb576a4b3fb4705fde26aca952daec773ac51298971594a9152281a2a76bde99f56d592dffd61ac76525f530bccadb2a27deed55876b8083eb81719bd617b9eb02d0c8050b0a2754bf38faac91184fd395b3592c0e49c9e8f0e2b27454db80e18f9a136376a20186332c6bd3d21f6bbe8b099b5f70b3644c3a1ba6c9") umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'team_slave_1\x00', 0x5}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0xd673, 0xffffffffffffffff, 0x6, 0x3820]}) fcntl$getflags(r0, 0x0) 05:44:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400074000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:59 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000000)={0x7, 0xdb2, 0xfffffffffffffffd, 0x207}) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:59 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\t', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 220.927398] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 220.940485] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.946334] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.974625] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 05:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xffffca88, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 220.982587] FAT-fs (loop1): Filesystem has been set read-only [ 220.995324] binder: 21405:21406 got transaction to invalid handle [ 221.001658] binder: 21405:21406 transaction failed 29201/-22, size 24738-0 line 2852 [ 221.014111] Process accounting resumed 05:44:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei*erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 221.033059] Process accounting resumed 05:44:59 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c9000000b78184b4b555c9a81f824b4989b144481c706820750d340a40418548d2f29aedd1b7ede59f13a4ce1d119d69f2db9cff921b04987e5b0949c43bad58c00954885c5ccdf163b24d413db434233e10be689716c196827031dfdae7557ecc34433232edafd6247565f7d4093936ecdd589b532fe8120000ffed21f63dc65d09e721c5aa0894697b363e72d14631f494a75c52369864f9002b7e1358a2d57f57ffceda31f23877c84151bc4c62bfa81ead1106abfa1f7968b2eff03869311430b62775e318e3d67028c778"], &(0x7f0000000080)=0xd1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x38000000000, 0x7}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x3, &(0x7f0000000400)) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) getpeername$inet6(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:44:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 221.084983] binder_alloc: binder_alloc_mmap_handler: 21405 20001000-20004000 already mapped failed -16 [ 221.113495] binder: BINDER_SET_CONTEXT_MGR already set [ 221.127662] binder: 21405:21406 ioctl 40046207 0 returned -16 [ 221.139102] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 221.156061] Process accounting resumed [ 221.165557] binder: 21405:21448 got transaction to invalid handle [ 221.171901] binder: 21405:21448 transaction failed 29201/-22, size 24738-0 line 2852 [ 221.182090] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 221.190055] FAT-fs (loop1): Filesystem has been set read-only [ 221.203133] Process accounting resumed [ 221.207124] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 221.214856] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.221867] binder: undelivered TRANSACTION_ERROR: 29201 05:44:59 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:44:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:44:59 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:44:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reixerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:44:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040a860000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:44:59 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:44:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xa000, r2, r3, 0xfffffffffffffff9, 0x2000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000900)={0x8001, 0x100000001, 0x2, 0x80, 0x4, 0x401, 0xe827, 0x100000000, 0x0}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000980)={r4, 0x2, 0x101, 0xffffffff, 0x1, 0x6}, &(0x7f00000009c0)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, [0xffffffff, 0x0, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], @ipv4=@broadcast=0xffffffff, [0xff, 0xffffffff, 0xff, 0xffffffff], 0x14d4, 0x0, 0x33, 0x4e22, 0x4e24, 0x4e20, 0x4e22, 0x2002, 0x2}, 0x1c1, 0x2020}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@ip={@broadcast=0xffffffff, @rand_addr=0xfffffffffffff92c, 0xff000000, 0xff000000, 'ip6tnl0\x00', 'syzkaller0\x00', {}, {0xff}, 0x29, 0x1, 0x48}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x5, [0x7ff, 0x3, 0x6, 0x40, 0x8, 0x7c4], 0x1, 0x7, 0x9}, {0x401, [0x57a4, 0xd82, 0x2, 0x8, 0x9, 0x1000], 0x10000, 0xfffffffffffffffb, 0x101}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x20, 0x8, 0x2, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x5, [0x8, 0x200, 0x5, 0x8, 0x9, 0xfffffffffffffff7], 0x43f, 0xfff, 0x4}, {0x6, [0x1ff, 0xfffffffffffffe00, 0x80000000, 0x0, 0x3f, 0x100000001], 0x8, 0x7f, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) [ 221.699214] binder: 21459:21465 got transaction to invalid handle [ 221.705540] binder: 21459:21465 transaction failed 29201/-22, size 24738-0 line 2852 [ 221.717105] Process accounting resumed [ 221.722773] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xfeffffff00000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x80000000012, 0x0) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000000)=""/53) 05:45:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2e, &(0x7f0000000140)={@loopback=0x7f000001, @multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:00 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 221.744352] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 221.768267] Process accounting resumed [ 221.769587] binder_alloc: binder_alloc_mmap_handler: 21459 20001000-20004000 already mapped failed -16 05:45:00 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1000, &(0x7f0000000240)={0x100000000}, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x9) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reilerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8847000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 221.826810] Process accounting resumed [ 221.842819] binder: BINDER_SET_CONTEXT_MGR already set [ 221.875302] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 221.888062] Process accounting resumed [ 221.888875] binder: 21459:21465 ioctl 40046207 0 returned -16 [ 221.911641] binder: 21459:21483 got transaction to invalid handle 05:45:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:00 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x20) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x1004001, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x6003, 0x8000}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r2, 0x4, &(0x7f0000000180), 0x0) 05:45:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x4305000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 221.917999] binder: 21459:21483 transaction failed 29201/-22, size 24738-0 line 2852 [ 221.952373] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:00 executing program 7: socket$inet6(0xa, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2, &(0x7f00000001c0)={'trans=', 'unix', 0x2c, {'port', 0x3d, [0x78, 0x34, 0x3f, 0x7f, 0x38, 0x38, 0x36, 0x32, 0x30, 0x78]}, 0x2c, {'rfdno', 0x3d, [0x63150ade1305230d, 0x37, 0x2d, 0x2d, 0x3f, 0x7f, 0x33]}, 0x2c, {'wfdno', 0x3d, [0x36, 0x78, 0x0]}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@dfltgid={'dfltgid', 0x3d, [0x0]}, 0x2c}, {@version_L='version=9p2000.L', 0x2c}]}}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000300)={0x0, {{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x88) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000006c000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:00 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="72656973657266737f", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000080)='./file0\x00') ioctl$KDDISABIO(r1, 0x4b37) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x1) 05:45:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiuerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 222.006858] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.027492] binder: undelivered TRANSACTION_ERROR: 29201 05:45:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff00000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 222.077519] binder: 21543:21547 transaction failed 29201/-28, size 24738-0 line 2967 [ 222.088137] Process accounting resumed [ 222.106844] binder_alloc: binder_alloc_mmap_handler: 21543 20001000-20004000 already mapped failed -16 05:45:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xd000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000080)='stat\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 222.128908] Process accounting resumed 05:45:00 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 222.175510] binder: BINDER_SET_CONTEXT_MGR already set [ 222.190160] Process accounting resumed [ 222.201297] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 222.203511] binder_alloc: 21543: binder_alloc_buf, no vma [ 222.208864] FAT-fs (loop1): Filesystem has been set read-only [ 222.214484] binder: 21543:21561 transaction failed 29189/-3, size 24738-0 line 2967 [ 222.228741] binder: 21543:21547 ioctl 40046207 0 returned -16 [ 222.273772] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.279610] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.287483] Process accounting resumed 05:45:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:01 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiKerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000074000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:01 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xa4, 0x4, 0x8000, 0x9, 0x8, 0x3, 0x3e, 0xd57, 0x181, 0x40, 0x131, 0x3, 0x5, 0x38, 0x1, 0x4, 0x80000000, 0x5}, [{0x60000004, 0x3, 0x7, 0x9, 0x20, 0x2, 0x8, 0x2}, {0x60000007, 0x277, 0x7f, 0x10001, 0xe38, 0x2ab7, 0x9, 0x200}], "4d442b1f0493817c413535d2c48f9d7e89fddfe4ba25668689f31da7959b15ca6413422ea63a883b278139ae6ee43401192fb448b565556c4aaf127646b7fc71d2a714d741575a0eb89a6e60681fdd45e0f4dd735f055d07f0a3ef90827f6fb6f2ac309bf1f648980fc5", [[], [], [], [], [], [], []]}, 0x81a) 05:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xffff0000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 222.788856] binder: 21599:21601 transaction failed 29201/-28, size 24738-0 line 2967 [ 222.799430] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 222.812166] Process accounting resumed [ 222.837431] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 222.856122] binder_alloc: binder_alloc_mmap_handler: 21599 20001000-20004000 already mapped failed -16 [ 222.859409] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 222.873203] FAT-fs (loop1): Filesystem has been set read-only [ 222.883828] binder: BINDER_SET_CONTEXT_MGR already set 05:45:01 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) socket$inet6(0xa, 0x4, 0x88) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:01 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:01 executing program 0: r0 = socket$inet6(0xa, 0x80004, 0x100000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x1ff, 0x0) accept4$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) acct(&(0x7f0000000200)='./file0\x00') openat(r2, &(0x7f0000000180)='./file0\x00', 0x20040, 0xa0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x6000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reicerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 222.900269] Process accounting resumed [ 222.906587] binder: 21599:21601 ioctl 40046207 0 returned -16 [ 222.928107] binder_alloc: 21599: binder_alloc_buf, no vma [ 222.933810] binder: 21599:21624 transaction failed 29189/-3, size 24738-0 line 2967 [ 222.961114] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 222.985211] Process accounting resumed 05:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x1400, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400007000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 223.011997] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 223.019358] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.030949] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.051610] Process accounting resumed [ 223.081748] binder: 21651:21655 got transaction to invalid handle [ 223.088104] binder: 21651:21655 transaction failed 29201/-22, size 24738-0 line 2852 [ 223.132970] binder_alloc: binder_alloc_mmap_handler: 21651 20001000-20004000 already mapped failed -16 [ 223.143772] binder: BINDER_SET_CONTEXT_MGR already set [ 223.149208] binder: 21651:21655 ioctl 40046207 0 returned -16 [ 223.155481] binder: 21651:21661 got transaction to invalid handle [ 223.161772] binder: 21651:21661 transaction failed 29201/-22, size 24738-0 line 2852 [ 223.182690] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.188467] binder: undelivered TRANSACTION_ERROR: 29201 05:45:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x7, &(0x7f0000000080)=0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80040, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000002c0)="795a04a90684cee6b170e6ba512a0557c53e205edc09af529c49ce614874ae6402959700c51785c45ac23f87ec196336990dec584f71dbfb6010910f2ca1e80ed527606dc099945e7ab40d4506c3160f13773e6b42b6864eba32139b44f5ea0ceed4b35e6c0fbe133cd07d8cbd18fae1c20c421b825cbe4a4f3dd666920d6a72ba23da1b60913ae8ffae4b911a586a541d34c6780a2f7fb91fca4a1d0038267a475629dbd88825c3e79b398dd93531f5fe8fb79954fd08560579edc9196d314a1e1e450f5019f79c46f6c270f30db125c9254ed36c305616450a41393d31d1c22dd2551d5f1988ce36c1df665a1ba2", 0xef, 0x9a2, 0x0, 0x1, r2}, &(0x7f0000000240)) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiderfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:01 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000040)="5c55e7d047afac22b73d12ab", 0xc, 0x694e, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000100)="27014c1371498eafc4", 0x9, 0x80000000, 0x0, 0x1, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x100000000, r0, &(0x7f0000000300)="dc5257021e51b19e4ce3bc6a38e8953cfac366cf3a6731478b6befc646f59cf24647d26c961ba11aa8c934d41f7c686be51d6fa1e8102044fd13093bacfdfda5702455d31ecc26eda63c51479738ce9e23797639f244f0ccafe8b6f3ea53fda1d3681de1ab2dffb7bcea05a8ae3b6858f19f0b19a9a7beb47859e1c4f5093b373c720a7e2018e4c1cd717cd60de9", 0x8e, 0x8, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000001040)="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", 0x1000, 0x9, 0x0, 0x1, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f00000003c0)="27b2782b6d15ec07d9b42220e9bdd632f36ead97ca23bd1ae95f1b8aa98ac7fb50d07e38ff6d7dd0c78a4a750b3e17df97134c125a12c75446924827261b6a2089e69f1088a8137130fc961e051a247b867fe5205d22db9d63f11f9c5c5b6cdf7e46c58a1912e555d69d172101ac04a02900c5eb84b80424d2ecabbb300f22a017427159d1c87939afa3f516f44f47ca9014c8ea3e3bbf3afbd36ee60c1e244eb94873e28a4310639b51edf550f2a64f67efa35ac5d4ae5589bb254fb96ac4ab8d3bcacc86693551a8d4b358e23ab80d8dd40840312246f3424bb1899520bb31222214272e07d5d766b8336df1", 0xed, 0x4, 0x0, 0x0, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000500)="5830425802e6bb9adc3f0455bf20f122e0b06c74f158f4e37e85d79fa669718c44205d7c848d59da4733bf0e722b8728e90c421878af3e94acf29c7736b3c976c4415638aa36c97eabc58c5b7887979d258b08d88878b770dae55367d64490519b45307edeb654cdd39188de81455402c9f1da8b1031379b6b", 0x79, 0x5, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x80000000, r1, &(0x7f00000005c0)="b45694ec0718c36390d8fe969c7003d01e9ba9d1f8f433933078c9a0a6ad", 0x1e, 0x8, 0x0, 0x0, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x10000, r1, &(0x7f0000000640)="e98be27d83853105f05c740cc9f9f132d9e2ed82dd836968d99a9ff0982172a79f8a9552b98066059590ce8dd181d9ea72f563f0aeb57365535d84007433d4eb29926540f0f511", 0x47, 0x1, 0x0, 0x1, r1}]) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:01 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x4, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400aa9000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 223.710136] binder: 21668:21669 got transaction to invalid handle [ 223.716553] binder: 21668:21669 transaction failed 29201/-22, size 24738-0 line 2852 [ 223.727190] Process accounting resumed [ 223.734320] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 223.749841] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) 05:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x3580, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='threaded\x00', 0x9) [ 223.752510] binder_alloc: binder_alloc_mmap_handler: 21668 20001000-20004000 already mapped failed -16 [ 223.757375] FAT-fs (loop1): Filesystem has been set read-only [ 223.776118] Process accounting resumed [ 223.785129] binder: BINDER_SET_CONTEXT_MGR already set [ 223.790558] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:02 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) statx(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x20, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000100)={0x1, {r1, r2+10000000}, 0x8000, 0xd6fe}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x6) 05:45:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) linkat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1400) [ 223.814988] binder: 21668:21669 ioctl 40046207 0 returned -16 [ 223.850673] binder: 21668:21689 got transaction to invalid handle [ 223.857092] binder: 21668:21689 transaction failed 29201/-22, size 24738-0 line 2852 05:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x7, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:02 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673d4", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiterfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 223.867920] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 223.875129] FAT-fs (loop1): Filesystem has been set read-only [ 223.895102] Process accounting resumed 05:45:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='threaded\x00', 0x9) [ 223.924059] Process accounting resumed [ 223.974530] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.980504] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.013272] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 224.020564] FAT-fs (loop1): Filesystem has been set read-only 05:45:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff00000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80, 0x40000) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x40) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000aa800000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:02 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:02 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiperfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 224.605641] binder: 21740:21742 got transaction to invalid handle [ 224.611967] binder: 21740:21742 transaction failed 29201/-22, size 24738-0 line 2852 [ 224.623480] Process accounting resumed [ 224.627731] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 224.651064] Process accounting resumed [ 224.662365] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 224.669640] FAT-fs (loop1): Filesystem has been set read-only [ 224.696609] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='openpromfs\x00', 0x101000, &(0x7f00000002c0)="81fffdb2de3c1447197d94c07c8f4e86d84db513c7c548a3c5d2f51f2164ba407fa97d5955278719fde0be423e0871c04293ac176d4a23eacb4103f041bd798c6f0000000000000083131684fb512c9cb92f27606f981eb160285b7b78691d9129a39ab3e7e52659b6ae91d7864b19d97d739da8a393ad1443cd015d0bbc10f207bcaa854fcc7e8a07c3972a1f4aadf18f") ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) r1 = getpgid(0xffffffffffffffff) migrate_pages(r1, 0x4ec8, &(0x7f0000000080)=0x4, &(0x7f0000000140)=0x1ff) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 05:45:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiyerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xb00, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:02 executing program 7: socket$inet6(0xa, 0x0, 0x80001) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') read$eventfd(r0, &(0x7f00000001c0), 0x8) mount$9p_fd(&(0x7f0000000000)='^-.\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) [ 224.705907] binder_alloc: binder_alloc_mmap_handler: 21740 20001000-20004000 already mapped failed -16 [ 224.727287] binder: BINDER_SET_CONTEXT_MGR already set 05:45:03 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8848000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 224.763026] Process accounting resumed [ 224.773713] binder: 21740:21742 ioctl 40046207 0 returned -16 [ 224.780382] binder: 21740:21780 got transaction to invalid handle [ 224.786701] binder: 21740:21780 transaction failed 29201/-22, size 24738-0 line 2852 [ 224.802087] Process accounting resumed [ 224.825732] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.831665] binder: undelivered TRANSACTION_ERROR: 29201 [ 224.859539] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 224.885394] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) 05:45:03 executing program 7: socket$inet6(0xa, 0x2eba5ab1ad730d5, 0x8080000008) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x10002, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r1, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x200}, 0xc) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x3) recvmmsg(r2, &(0x7f0000002200)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1, &(0x7f0000000440)=""/149, 0x95, 0x5}, 0x7ff}, {{&(0x7f0000000500)=@pppol2tp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/48, 0x30}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/106, 0x6a}], 0x3, 0x0, 0x0, 0x8}, 0x9}, {{&(0x7f0000000740)=@ipx, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/135, 0x87}], 0x1, &(0x7f00000008c0)=""/118, 0x76, 0x56c0000000000000}, 0x100000000}, {{&(0x7f0000000940)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/189, 0xbd, 0xb37a}, 0x1000}, {{&(0x7f0000000ac0)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/248, 0xf8}, {&(0x7f0000000c40)=""/69, 0x45}], 0x2, &(0x7f0000000d00)=""/153, 0x99, 0x400}, 0x74}, {{&(0x7f0000000dc0)=@ipx, 0x80, &(0x7f0000002080)=[{&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/55, 0x37}, {&(0x7f0000000ec0)=""/101, 0x65}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000002040)=""/61, 0x3d}], 0x6, &(0x7f0000002100)=""/237, 0xed, 0x8}, 0x5}], 0x6, 0x1, &(0x7f0000002380)={0x0, 0x989680}) set_mempolicy(0x1, &(0x7f0000000240), 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x80000001) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) 05:45:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400060000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x61, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei%erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x700000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:03 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfsp', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xfffff000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:03 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x100040, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xce3e) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 225.480170] binder: 21807:21809 got transaction to invalid handle [ 225.486527] binder: 21807:21809 transaction failed 29201/-22, size 24738-0 line 2852 [ 225.487067] Process accounting resumed 05:45:03 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r0, &(0x7f00000005c0)='threaded\x00', 0x9) [ 225.548008] binder_alloc: binder_alloc_mmap_handler: 21807 20001000-20004000 already mapped failed -16 05:45:03 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\n', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei.erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88480000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0xc00, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x64, "27387f3fd0b92fc57a810932256bd1c8dafb5d44ec8985915383619ea69501623de617ffc9f9ba30bbb994836f9ae11d596803fb2a935a63fe657b551f5e01a8dd62c8afbb414e5d33843378a7e40f590238f8bee299fc62e855ad9b1390b95b3308e5ed"}, &(0x7f0000000080)=0x6c) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x8, 0x3, 0x40}, 0x10) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000300)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 225.592832] Process accounting resumed [ 225.608181] binder: BINDER_SET_CONTEXT_MGR already set [ 225.608257] binder: 21807:21827 got transaction to invalid handle [ 225.618948] binder: 21807:21809 ioctl 40046207 0 returned -16 [ 225.619918] binder: 21807:21827 transaction failed 29201/-22, size 24738-0 line 2852 [ 225.669124] Process accounting resumed [ 225.686448] Process accounting resumed [ 225.699691] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 225.707600] FAT-fs (loop1): Filesystem has been set read-only [ 225.709985] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.741243] binder: undelivered TRANSACTION_ERROR: 29201 05:45:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) 05:45:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88470000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400012000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:04 executing program 7: socket$inet6(0xa, 0x803, 0x3fe) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 05:45:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000180)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000080)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) memfd_create(&(0x7f0000000080)='openpromfs\x00', 0x2) acct(&(0x7f0000000300)='./file0\x00') syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x1, &(0x7f0000000280)=[{&(0x7f0000000340)="c206818c06a2962958d02b31942b9297f7b82bca64b47a56119a130f234f86dac86b63b82972f3179d300c60d9aebad99b52ddeb461af77196e4c7ac6d1f8a717b9db174bd609ea788114573f660c2ab8c1a809032b21d1674878f6ad7b4572373eed33aa636a42b6d3a503761c785b25c1c593b172185a3aef4a1a6a8e696002395edd49f46c19eb8a6dbdae39ed923b2382bbf6f", 0x95, 0x9}], 0x2000, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:04 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r0, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiXerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:04 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r1, 0x20, 0x70bd25, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc4d1}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000091) 05:45:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8035000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 226.476139] binder: 21881:21884 got transaction to invalid handle [ 226.482493] binder: 21881:21884 transaction failed 29201/-22, size 24738-0 line 2852 [ 226.496237] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 226.519113] Process accounting resumed [ 226.527674] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 226.535724] FAT-fs (loop1): Filesystem has been set read-only [ 226.541639] binder_alloc: binder_alloc_mmap_handler: 21881 20001000-20004000 already mapped failed -16 [ 226.543262] binder: BINDER_SET_CONTEXT_MGR already set [ 226.564111] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xb00000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei+erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r0, &(0x7f00000005c0)='threaded\x00', 0x9) [ 226.580284] Process accounting resumed [ 226.592170] binder: 21881:21896 got transaction to invalid handle [ 226.598531] binder: 21881:21896 transaction failed 29201/-22, size 24738-0 line 2852 05:45:04 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="72656973657266738a", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8848, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 226.642463] binder: 21881:21884 ioctl 40046207 0 returned -16 [ 226.694101] Process accounting resumed [ 226.704271] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.710163] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.732099] Process accounting resumed [ 226.753815] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 226.761713] FAT-fs (loop1): Filesystem has been set read-only 05:45:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) 05:45:05 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000020000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000002c0)={0x6, {{0x2, 0x4e20, @multicast2=0xe0000002}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x108) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000140)='./file0\x00') 05:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffe, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r0, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:05 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667397", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei0erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x800e000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 227.497179] Process accounting resumed [ 227.506794] binder: 21957:21958 transaction failed 29201/-28, size 24738-0 line 2967 [ 227.507037] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 227.522819] FAT-fs (loop1): Filesystem has been set read-only 05:45:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000400)={0x1, "87c100000000be17001a06002100ff00"}, 0xffffffffffffffa7) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0xff, 0xfffffffffffffffe}], 0x0, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, [0x0, 0x3f]}, 0x2c}, {@hide='hide', 0x2c}, {@block={'block', 0x3d, [0x3d, 0x3f, 0x35, 0x78, 0x30, 0x7f, 0x7f, 0x39]}, 0x2c}, {@nocompress='nocompress', 0x2c}]}) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8100000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 227.554325] binder_alloc: binder_alloc_mmap_handler: 21957 20001000-20004000 already mapped failed -16 [ 227.560233] Process accounting resumed 05:45:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r0, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:05 executing program 7: socket$inet6(0xa, 0xa, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000300)={{0x5000, 0x4004, 0xd, 0x2, 0x1, 0x0, 0x7fff, 0x8, 0x7f, 0x8, 0x2aa335fa, 0x8}, {0x6000, 0x7000, 0xa, 0x20, 0x5, 0xfffffffffffffffd, 0x0, 0x8, 0x4, 0x6, 0x6, 0x9}, {0x3000, 0x100000, 0x7, 0x6, 0x7, 0x8000, 0x6, 0x9, 0x9, 0xfffffffffffffffe, 0x2, 0x40}, {0x105002, 0x1000, 0x1f, 0x0, 0x400, 0x2, 0xffffffffffff0001, 0x2, 0x5, 0xf949, 0x4, 0x10000000000}, {0x4000, 0x3005, 0x9, 0x1805, 0x9, 0x6, 0x4, 0x400, 0x2, 0x6, 0x2, 0x17d}, {0x6001, 0x1000, 0xe, 0x7, 0x4, 0x7f, 0x8, 0xfffffffeffffffff, 0x1, 0x42ad, 0x8, 0x20a571a}, {0x0, 0x6000, 0xf, 0x134a, 0x0, 0x9, 0x7ff, 0x2, 0x0, 0x1855, 0x2d2, 0x9}, {0x100000, 0xf000, 0xc, 0x4, 0x91b2, 0xc6, 0x100, 0x6f, 0x7fffffff, 0x7e, 0x7f, 0x82f1}, {}, {0x6004, 0x100000}, 0x20, 0x0, 0x0, 0x200000, 0x7, 0x1100, 0x0, [0x9e, 0x2, 0x80000001, 0xffffffff00000000]}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x7, 0x3, 0x0, 0x1, &(0x7f00000001c0)=[{}, {}, {}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 227.598454] binder: BINDER_SET_CONTEXT_MGR already set 05:45:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='rei-erfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:05 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff00000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 227.628966] binder: 21957:21958 ioctl 40046207 0 returned -16 [ 227.638243] binder_alloc: 21957: binder_alloc_buf, no vma [ 227.643901] binder: 21957:21973 transaction failed 29189/-3, size 24738-0 line 2967 [ 227.665721] Process accounting resumed [ 227.685211] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 227.711567] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.717322] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.745395] Process accounting resumed [ 227.752641] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 227.753693] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 227.769494] FAT-fs (loop1): Filesystem has been set read-only 05:45:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) 05:45:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000028d5c000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x18000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='opefs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:06 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:06 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000001c0)=0x81, 0x8) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x18081, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x40}}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) fcntl$setflags(r1, 0x2, 0x1) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x1, 0x5, "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", 0xd6, 0x0, 0x40, 0x3, 0xf2be, 0x8, 0x8000, 0x1}, r2}}, 0x128) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:06 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r0, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reizerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 228.499707] binder: 22026:22028 transaction failed 29201/-28, size 24738-0 line 2967 [ 228.511499] Process accounting resumed [ 228.515761] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8864000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiaerfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 228.540472] binder_alloc: binder_alloc_mmap_handler: 22026 20001000-20004000 already mapped failed -16 [ 228.576155] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x9) 05:45:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 228.588723] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 228.596654] FAT-fs (loop1): Filesystem has been set read-only [ 228.604576] Process accounting resumed [ 228.610871] binder: BINDER_SET_CONTEXT_MGR already set [ 228.618741] binder: 22026:22028 ioctl 40046207 0 returned -16 05:45:06 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:06 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:06 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000001c0)="df121e5e7398e5232a200c20e4e3fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cf328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbe07055ea1453ea2958f3d173eb90ae039b956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3046f18abdcdb16eba56f5dc72300000a000000000000000000000000", 0x468d052f83eab5c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x9, 0x100000001}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 228.648413] binder_alloc: 22026: binder_alloc_buf, no vma [ 228.654083] binder: 22026:22042 transaction failed 29189/-3, size 24738-0 line 2967 05:45:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000012000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 228.689906] Process accounting resumed [ 228.701931] binder: undelivered TRANSACTION_ERROR: 29189 [ 228.707688] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.714562] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 228.745982] Process accounting resumed [ 228.757982] binder: 22079:22081 transaction failed 29201/-28, size 24738-0 line 2967 [ 228.779354] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 228.795574] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 228.803475] FAT-fs (loop1): Filesystem has been set read-only [ 228.809603] binder_alloc: binder_alloc_mmap_handler: 22079 20001000-20004000 already mapped failed -16 [ 228.826586] binder: BINDER_SET_CONTEXT_MGR already set [ 228.838884] binder_alloc: 22079: binder_alloc_buf, no vma [ 228.844708] binder: 22079:22090 transaction failed 29189/-3, size 24738-0 line 2967 [ 228.848701] binder: 22079:22081 ioctl 40046207 0 returned -16 [ 228.877891] binder: undelivered TRANSACTION_ERROR: 29189 [ 228.883675] binder: undelivered TRANSACTION_ERROR: 29201 05:45:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) 05:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8035, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) sendmsg$unix(r1, &(0x7f0000003600)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000013c0)="1585b850e101a88a59dcc597867c47c88f425a869b9ffae6b4a16fc02036d8cca31502f8b4489afe51edd483e00d4f18d6ab22c6f835f64ea8c2e8b0b4848e2b07f7a824c4cc9ad685a292ca43d5a16fb1b08a5e972d1565236b82b5e6509c8bf2437c0256806d1da59f09abe4078adffd3f096671135d9a0fc8fe762c2ec55e72c73fb724209e689a85e4e00fd4393b9a3bc7341f9142740d592005c6d8559c1f634f54ee5ddef968fa0432ff01abe2746e998bb08eaad58a04cc8a20d35cc48a6d184a36b0c1dc7872e6384703b57690eb6d0ab7fd0e8d1815", 0xda}, {&(0x7f00000014c0)="1b3461cf907951af2e6be91aa2f88be11f2106356df2439e33b1985bbc4545c736a9d10c5c5091e58b8506369084025c2b9b23865bef94aad677e38261b142b0d53ea57cf8a574ce7da47292ff7c6ee3e5e0cf42431bf5efaf03d8ac360e6f09ab21351f4369c567074c2818c2c592724c82903b16d6f4050a719f31ebca96b5851b9ae0fe67ea3cf09bf9f5a2fa560e1b0a19f89def7d46c234300188d69e9ba5702736dd35342f307dff5f39504b734e", 0xb1}, {&(0x7f0000000240)="fedb8e77c79834fbcba5d54e23715d72", 0x10}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="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", 0x1000}], 0x5, 0x0, 0x0, 0xf72d787e463e92f7}, 0xc000) 05:45:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reis\nrfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:07 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:07 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') io_setup(0x3, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f00000001c0)="d8fd9c0884595f24d0edef108fde5b13aeb1dec7bb18170a13f06279bd2473db52d963bdd30148261d8db37971c07f3b4a4b755e6ebd278991ed2df993304c70bdb795e41c2ec151c9981254b11985f2053204bea66d30a80dfc5bcf4f6613ee34463efde472b6083f84f56a06da4682fa5c16d9d86c4048c2d0daee5b59b028ca50aee7a6330e318523517e41b7bc76ec2c575de2b22b1e7b985dbbed40b12ff4ccd92544f977b80741ae09185f40835fe7bbb479de5c06704994ac0e80d55b", 0xc0, 0x6, 0x0, 0x0, r0}, &(0x7f00000000c0)) 05:45:07 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000007fffffff000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xffffa888, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x449a98db5edc0b19, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) r1 = socket$inet6(0xa, 0xa, 0x4000000000bfd3) pwrite64(r0, &(0x7f00000002c0)="6d480244cc59951ed46087c249e20654064080d5b2e9e2ea0669320b6dd4a3dc4d3a6103d57c7173b5eebf41e7ec56589e98d108a6362af6581480800993f7a556692ed7c21fed98291a2454758e8bef984d6d648549e97634509823e455f9b10ef72e22e21ec5c7c0907d407db90603d5a0a411a86ee580dd4ad06d766d81f8ac2074c0e6a954b784d489c8a033b664e3770f20b9cbd1a057195c1c9b23a4159905e7a1be7e55273b9219986b017cd0582b8f076e474b83d735177a950a496139015609e03441163b57a8f65fb441388c8483c7837a7f2999f3b6e28cf1aac82b5065a514032c43bb70db534c1fb9257e6be4912cbd", 0xf6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 229.412980] Process accounting resumed [ 229.426385] binder: 22101:22109 transaction failed 29201/-28, size 24738-0 line 2967 [ 229.438802] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 229.447995] Process accounting resumed [ 229.450050] binder_alloc: binder_alloc_mmap_handler: 22101 20001000-20004000 already mapped failed -16 05:45:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reis%rfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 229.481693] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 229.509299] Process accounting resumed 05:45:07 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x4788, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:07 executing program 7: socket$inet6(0xa, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x10200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 229.541783] binder: BINDER_SET_CONTEXT_MGR already set [ 229.546080] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 229.554975] FAT-fs (loop1): Filesystem has been set read-only [ 229.560225] binder: 22101:22109 ioctl 40046207 0 returned -16 [ 229.573738] Process accounting resumed [ 229.585232] binder_alloc: 22101: binder_alloc_buf, no vma 05:45:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000012c0)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f0000000080)=0x78) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:07 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 229.590898] binder: 22101:22119 transaction failed 29189/-3, size 24738-0 line 2967 [ 229.621928] Process accounting resumed [ 229.668139] binder: undelivered TRANSACTION_ERROR: 29189 [ 229.673940] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.687240] Process accounting resumed [ 229.716043] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 229.723939] FAT-fs (loop1): Filesystem has been set read-only 05:45:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) 05:45:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x543, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:08 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000005, 0x10, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x20) fcntl$notify(r0, 0x402, 0x0) 05:45:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiseffs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000060a800000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:08 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x600000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 230.287690] binder: 22170:22171 got transaction to invalid handle [ 230.294086] binder: 22170:22171 transaction failed 29201/-22, size 24738-0 line 2852 [ 230.308142] Process accounting resumed [ 230.321100] Process accounting resumed 05:45:08 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f0000000080)='./file0\x00', 0x8) acct(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:08 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfsl', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 230.349849] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 230.357786] FAT-fs (loop1): Filesystem has been set read-only [ 230.361611] binder_alloc: binder_alloc_mmap_handler: 22170 20001000-20004000 already mapped failed -16 05:45:08 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x6, 0x72, 0x6, "874539fb0b0058b1a129d2f0b5cd6b3b2000976b887419d1155ade15b82c82546a8e67789ed6b88180efa6d3228821d2c14db7fe3f63db6e963c4a896c167d", 0xb}, 0x60) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 05:45:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reise\nfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xffff000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 230.432259] binder: BINDER_SET_CONTEXT_MGR already set [ 230.441201] binder: 22170:22195 got transaction to invalid handle [ 230.446065] binder: 22170:22171 ioctl 40046207 0 returned -16 [ 230.447534] binder: 22170:22195 transaction failed 29201/-22, size 24738-0 line 2852 05:45:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 230.500639] Process accounting resumed [ 230.527123] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 230.535050] FAT-fs (loop1): Filesystem has been set read-only [ 230.544536] Process accounting resumed [ 230.585377] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.591472] binder: undelivered TRANSACTION_ERROR: 29201 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:09 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)="6f60256e70090000007300f9ce1fbacd4dff53ad7763d9a64cd1c7a7b3ef9aeeca34205135789c0aa8eb1640f3c4f3b7738a540aa79b9aa8aabbc78a0de11f9918cb4634bf7db7d6a8f99496aa1c303a309411ce69f3e49f7626eab36a02", 0x101000, &(0x7f0000000240)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340406000000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xd00000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reise%fs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:09 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f00000003c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x1001) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x400, 0x101}, 0x2}, 0x20, 0x1, 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 231.169687] binder: 22244:22246 got transaction to invalid handle [ 231.176061] binder: 22244:22246 transaction failed 29201/-22, size 24738-0 line 2852 [ 231.193075] Process accounting resumed 05:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x88640000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 231.213783] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(0xffffffffffffffff) close(r1) 05:45:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f00000002c0)="1ea02891ca14db293e48289afe84d72807d13047881bee9ae521e0bed5d5d1b8b391f5b1ce75f55610ab9420377d0d665d6b2deaee3cb155d1a490b6c18a366c18ee774e863ea24f9379c647d61f8db355850a67b6d0683aaa8b216ebb95479dd8075e3f325f9fab69c7458ecb5895833d35e4c297d7e64f9f850a9efe27303bf87a97e2ef57d4d13b9b63433005b633aac4fad43a0dbfd69972c06f287a4038861c2e6007e5ab9bed956e374e826c9094c0976d629df4689edb15110729a368e7fecdc7c8eed04f1bbd") acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 231.254933] Process accounting resumed [ 231.265549] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 231.273445] FAT-fs (loop1): Filesystem has been set read-only [ 231.284728] binder_alloc: binder_alloc_mmap_handler: 22244 20001000-20004000 already mapped failed -16 05:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8847, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:09 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x40000011, r0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000300)={[], 0x3ff, 0x3, 0x2, 0x0, 0x7fffffff, 0x100000, 0x7003, [], 0x6}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiser\ns\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 231.308795] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:09 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(0xffffffffffffffff) close(r1) [ 231.351192] Process accounting resumed [ 231.365308] binder: BINDER_SET_CONTEXT_MGR already set [ 231.383064] binder: 22244:22246 ioctl 40046207 0 returned -16 [ 231.409664] Process accounting resumed [ 231.416622] binder: 22244:22281 got transaction to invalid handle [ 231.422996] binder: 22244:22281 transaction failed 29201/-22, size 24738-0 line 2852 [ 231.435424] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8100, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x278400, 0x0) sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000140)="281a37a8b0361bbe9c1475142b955209cf409b127fb0c890fbca537b1e68e9179bb7a6a659134dbadb9804dca53649a4b9eecef1ddf441c36e406420ba770bf304f3684f4e6abf6a31362a9e1fb27d2da770101a32b21270b94a5d1a171a249b96fc371bbea3d90dc78e75a144ea88aa37f1", 0x72}, {&(0x7f0000000240)="6ddb42e1ce1dd2", 0x7}, {&(0x7f00000002c0)="7dcee98d89a7a1cebda08661e8b9ddabeb49b663447644efb59d1b094506709caf0732aefd411ab30c7569f4f528848bdd7b79eb38460cbf19605040b39f38402d8a6a13366f96af9e1c2d5c8e104c797fd555b7410e8f16f54f03164bad09ff5c2d629c2f676c9308dcc6aea93205ac2c609824fb5f7e638f042cdcd90b3373df35f98b181f9efba87cb7b0f9b5e0862f53eee5b36e41504bd0c36857db00220db4ec219b86cfd1fd679f39f55eea253a9924482fc874104df8ed300283b846a89bf3ca448a950679006493a87f35", 0xcf}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="52cb573aec67f163bac478c2234d3c8352c03d9d9593b259f00b2a80f9127c9592f6fe0a32048f6d1f74934e7524d0db692ef566d20ac0057a439bfa65dfb90f6f5a4ca7e80855ab73215d0f60dc1be44f8ae358ff9ce5ee220a50bc091df47225b24e37823c09e092ac49fce0274b6a75d342732a7dfdbe12f1d576f99ff3e009621b55b11d2532666a3a537ce9f1dc6da9ecf5b88351962360f2", 0x9b}, {&(0x7f0000001480)="919f575b1612a1be4d0a7168fe9aa64dcc0a51f154", 0x15}, {&(0x7f00000014c0)="dd08ff0f488e725be5319852131959b6fb578648cda4aa939cc9dd0e7f69957b8e580d923d6463782ac60aa8285571084c045e372b78657a05a867c194a9e7132cc4dd0bac4097fb80ed64c2174c6ab5cfa196a9797532da67e716abdd72a5bdeec26248", 0x64}, {&(0x7f0000001540)="c31412aa3db117992c5bceec4d8d57ff3e7051f30dd0ca4066f6589e04521175062b107f10df70a7ef183c46f1043919a7a80f4c2d6533935b2d1b314f7a9e252f04a779360cd6937131914c52864d022daf83738775dd35f7d1c616a9af913de5bda6ca5f200a00d626e771e81a5be33e6348482e3a9b9cce50fae2ec8cc99d10a9937fc1d8a30817ef326ab86d5fb90f58cbd5d40152e36eb70b095c46e7c4427b", 0xa2}, {&(0x7f0000001600)="05c963537bd2ed3c4bb64cce41a8a20e5f4a99c9cda02dcd8e04906964f3f11cf47a78a7d2485d3f91b92dfbc67c347e1c272e820e5a5d2a79e84f9425894c5c0b111aaf376938e26229c38b4bfabe58b88f630414d24f14a8f76298ce6364828288e8b99e71d773eb3ca94d7978e4ce6f6bb81860217c13f975c09b0b0e535a38506a4a601bb65d91", 0x89}], 0x9, &(0x7f0000001780)=[{0x1010, 0x10a, 0x20, "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"}, {0xb8, 0x10d, 0x20, "9ecb7c124a652839057b9036eef51e529e52999187e4f81b567be9d72ffb699237445206cb5fe42a98c368088201015e34fdbe457b253417c08465800d1a7864917fbef5ec753686cd4a9119d9e959af0794779a17c7fad2213c05e054454dd68753350d6f4649f5f2a3ff4602c5996a91feea173d477d54872e76a32df0ffdd9a4e867e4a4aec432b32a9eff9a227ed735b813245c062d4df1d8120ae7a7aabca72aed773"}, {0x110, 0xff, 0x7, "bd9c0c329f35143bb2bf4d6d1530a044fa6d742ed31352b1d1b0e56a23d286633e217531f8bf364cd8a65d3ae5e5e4aad61d15ecebcc51d2fd24ed6e2ecb4c066fa7b8b13c43f500815aa1049b1a171c2622cf3168413456b7b5abea79f816531f25c3a2542ff58dc1d609c02b4a565c3f53c5e8a060e87a1cf550daece9b2fae3a4c539d1e6a6219ce4d65b6323818dd21fdfd6e5b321e427922d561eaa9815c7048ee477221e840d7b591b43546b0f7c4bea64f90d30f79ff5e4461a4139f2fb236dcd875dd75419bece44195ea9acb550735bb15c3a3665335e0192d0f921f3ad83c64789131a299c42848818ad27e9560557775c826da6dce2da63"}, {0xb0, 0x10e, 0x6, "026e021bfd4c1b065edce71b43163a268585ead1079ff32af34e5897dbbec4f5dcd41dc89fa127441e997bc809c29b4555fa4d7fccc72b14b70607c89928d54a0f7d2d91f08df06bb73edd8e97f43ee2dff608a15c18859c6862abb037af6bf312638b8a877b216bb39c6004283c885ba71245bd440a1d0fef499b92874bb3a0f8db772b77212d9523b7d75823c2b9d60c72bb64ed6b301b4fa1e1"}, {0x50, 0x117, 0x3, "62a29e042e56ba66d00bf7c28846be12f6e95131498a621a9e83f681f22813f571ce1e493da2853267bfd352bcbb7eb282364d9c60ab0be94e32a1"}, {0x88, 0x10a, 0x0, "86842c41bb34ff4aa1f6e7d49d620206d6f0eb7df28e247c3fc719e7bbb7acc49188727236a8e24c63f5befd931ecbf74679192d2e776d03d971007d42201bf22bf2e6623d0f3fc91849fa489020e64587ee238af4e005b8ce2c9c4ee8d98e32b1d13a480049c0bdb9df332c11d56874dbea"}, {0x20, 0x84, 0x2, "724826e162cf20df0bc2bea4e41470"}], 0x1380, 0x48c1}, 0x4090) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:09 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x9, 0x20, 0x5, 0x8, 0x1, 0x7, 0x1f, {0x0, @in6={{0xa, 0x4e22, 0x65, @local={0xfe, 0x80, [], 0xaa}, 0x9}}, 0x0, 0x0, 0x4, 0x0, 0x80000001}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x400}, 0x8) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(0xffffffffffffffff) close(r1) 05:45:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiser%s\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040a90a000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 231.474371] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 231.482262] FAT-fs (loop1): Filesystem has been set read-only [ 231.497298] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 231.506555] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.515745] binder: undelivered TRANSACTION_ERROR: 29201 05:45:09 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673f6", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xe80, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:09 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x400002000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000140)={0x4, &(0x7f00000002c0)=[{}, {}, {}, {}]}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r3, 0x80000000, 0x18}, 0xc) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000780)={0x9, 0x108, 0xfa00, {r4, 0x3b, "94b107", "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"}}, 0x110) [ 231.552265] Process accounting resumed [ 231.555350] binder: 22332:22333 got transaction to invalid handle [ 231.562619] binder: 22332:22333 transaction failed 29201/-22, size 24738-0 line 2852 [ 231.577232] Process accounting resumed 05:45:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiser.s\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 231.644129] binder_alloc: binder_alloc_mmap_handler: 22332 20001000-20004000 already mapped failed -16 [ 231.672530] binder: BINDER_SET_CONTEXT_MGR already set 05:45:09 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x1d, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) open_by_handle_at(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x200000) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x14000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 231.698548] binder: 22332:22363 got transaction to invalid handle [ 231.704859] binder: 22332:22363 transaction failed 29201/-22, size 24738-0 line 2852 [ 231.707881] binder: 22332:22333 ioctl 40046207 0 returned -16 [ 231.732111] Process accounting resumed 05:45:10 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\a', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 231.757787] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 231.765711] FAT-fs (loop1): Filesystem has been set read-only 05:45:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiser/s\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8060000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000002c0)="0d1cb23f69ab0ba7fca33dd5b0c839dd518cb16c0a88229cd454fcccdaba92c849da9d7de53d7ebb1c03607a199363e22daf9c60775b353f9bbf1407517a03050522f994b4365662bb19ef163f0e8d87c6b74f2861b939ff8ac2f3ebe857dc9bd78bbc52d3b9d8d33c74778f6ee8ac82cb14d5e53fb98d25154786371f33bb9f5b240792f421090a3eb7ce32eaecee206b5a4db6373d3df2df180aeafb70fc9b2f292a628b6aff8941aafdc087df7b488764a3bfe568d0bb71c2569deeb3c02acbd2390ab5d87774c46b0ee7e925defd70554f1bf760c57078577457e297e0156c") getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x7f}, &(0x7f0000000240)=0x8) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 231.818152] Process accounting resumed 05:45:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400020000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:10 executing program 7: socket$inet6(0xa, 0x3, 0xc4e4) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/113) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:10 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 231.887471] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.896839] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.923060] Process accounting resumed 05:45:10 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x80ffffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 231.942058] Process accounting resumed [ 231.944658] binder: 22409:22413 got transaction to invalid handle [ 231.952299] binder: 22409:22413 transaction failed 29201/-22, size 24738-0 line 2852 05:45:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf#\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000000c0)) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80403, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 231.984658] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.013284] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.021262] FAT-fs (loop1): Filesystem has been set read-only 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffffffff000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 232.034136] Process accounting resumed [ 232.042218] binder_alloc: binder_alloc_mmap_handler: 22409 20001000-20004000 already mapped failed -16 [ 232.044286] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.062126] binder: BINDER_SET_CONTEXT_MGR already set [ 232.069544] binder: 22409:22413 ioctl 40046207 0 returned -16 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x100000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:10 executing program 0: r0 = socket$inet6(0xa, 0x800000002, 0x100000000) ioctl(r0, 0x8913, &(0x7f0000000180)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000002c0)=""/158, &(0x7f0000000080)=0x9e) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) 05:45:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 232.096287] binder: 22409:22435 got transaction to invalid handle [ 232.102633] binder: 22409:22435 transaction failed 29201/-22, size 24738-0 line 2852 [ 232.108425] Process accounting resumed 05:45:10 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:10 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000004800000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfi\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x800e, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(0xffffffffffffffff) [ 232.209124] Process accounting resumed [ 232.211580] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.223951] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.224242] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.241206] Process accounting resumed 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(0xffffffffffffffff) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x81000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 232.278552] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.280333] binder: BINDER_SET_CONTEXT_MGR already set [ 232.286519] FAT-fs (loop1): Filesystem has been set read-only [ 232.307563] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') socketpair(0x2, 0x8000b, 0xfff, &(0x7f0000000080)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:10 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000000)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0xfffffffffffffeef, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfd\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(0xffffffffffffffff) [ 232.339138] binder: 22483:22486 ioctl 40046207 0 returned -16 [ 232.367855] binder: 22483:22486 got transaction to invalid handle [ 232.374172] binder: 22483:22486 transaction failed 29201/-22, size 24738-0 line 2852 [ 232.384132] Process accounting resumed 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xb000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 232.403091] Process accounting resumed 05:45:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x1, 0x4) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 232.447547] binder_alloc: binder_alloc_mmap_handler: 22483 20001000-20004000 already mapped failed -16 [ 232.451087] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x3000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 232.490083] Process accounting resumed [ 232.500165] binder: 22483:22520 got transaction to invalid handle [ 232.506511] binder: 22483:22520 transaction failed 29201/-22, size 24738-0 line 2852 [ 232.524130] Process accounting resumed [ 232.539362] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.539764] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.556188] FAT-fs (loop1): Filesystem has been set read-only 05:45:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040007a000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf\n\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) r1 = semget(0x1, 0x4, 0x400) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f0000000000)=""/45) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x80) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 05:45:10 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xffffdd86, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 232.609327] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.616944] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.646420] binder: 22557:22558 got transaction to invalid handle [ 232.647131] Process accounting resumed 05:45:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x6488, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 232.652714] binder: 22557:22558 transaction failed 29201/-22, size 24738-0 line 2852 [ 232.665990] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.676711] binder_alloc: binder_alloc_mmap_handler: 22557 20001000-20004000 already mapped failed -16 [ 232.709261] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.711083] binder: BINDER_SET_CONTEXT_MGR already set [ 232.732966] binder: 22557:22563 got transaction to invalid handle [ 232.739334] binder: 22557:22563 transaction failed 29201/-22, size 24738-0 line 2852 [ 232.748073] Process accounting resumed [ 232.753180] binder: 22557:22558 ioctl 40046207 0 returned -16 05:45:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfb\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:11 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x2) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:11 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getrusage(0x1, &(0x7f0000000400)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x2, {0x8, 0x3f, "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", 0xf8, 0x81, 0x4, 0xff, 0x5792, 0x0, 0xff}, r2}}, 0x128) 05:45:11 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x800000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:11 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(r0) 05:45:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040fdfdffff00000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 232.823215] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.826037] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.831081] FAT-fs (loop1): Filesystem has been set read-only [ 232.847076] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x300000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 232.882863] binder: BINDER_SET_CONTEXT_MGR already set [ 232.900059] binder: 22604:22605 ioctl 40046207 0 returned -16 [ 232.905982] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.911679] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 232.923147] binder: 22604:22605 got transaction to invalid handle [ 232.923340] Process accounting resumed 05:45:11 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:11 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nfc_llcp(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x4, 0x3, 0x1, "33f371c044153f1347d03ea15773d006a6284015cf51c5f837f911cbf24a7b36101a93b4a99030bf4f970668fcf8c1fd66c84c1aa30cf3ab4101c15cbb4325", 0x30}, 0x60, &(0x7f00000006c0)=[{&(0x7f00000001c0)="2003144054933d270f54d1a40288811e0b8d5bc49414ac8c7f21e9dc62ea1d90516a4bd57450a1f379ea83c0d4e49fbe37ff4d4cc70a7d99b4a25652a56c43bc7b5a9b852a92ca6b62a5668a4e99c91a5051300bb7170a9ba2cab2e5d5f3a9fe0a067c9401e4be7982aa19ed37f302c984b7ba4a2ff3a2c77f36445f57cea28c7c3db20c355f1538b04e26d75d642568a40140d157e34df6890946d2f3933660c0c92b128e20ca39a6c05671d7533bf5", 0xb0}, {&(0x7f00000000c0)="e9b8bd11a9488ddbb652faef4677f06937a68a4852b7f80c84aeb39d8c671bcb5e6c188046b09ac0fc6429f31e2d0edae1ef537661ef2ae70353b048e64d83a7262fb3f5708d9af8c5760440fc8459", 0x4f}, {&(0x7f0000000300)="7a882f12b2c5381e58607a7246d8f20575bff7a5ab49b04970b1321a520637591d193debfcc75c16452485548daa60b360aa01601691da6bb2fc3ee476a6789f84243c63ef5146b3ef5fad1f120e749b9bb76f5d4b2530eb96d547a012662e482744b9bdc9d3fed5566d81913eb31cf17dd8bb2ede9340ba0fb919e3576f48b75ee71f1906ba23680d152ce23599919f3673b7de805e68f5f26c397add56be762e20cf15214af46134000fb3c699b145a977bccd01d2f5a192", 0xb9}, {&(0x7f00000003c0)="7afe4d9e4d875c35f4949633e65f0cd689cfdd95e98c5e4aa3c1eeed6b7ad8922d96a580b9d89e0c8c8cc28118c49cfd3b5573da357d5930765e56f4902966bc3e1575ddec1eb158f452ea7abff02c0da38533ac3b0a131baf46a536f8636d9f8db91616945de890fe4cd38ac618c2762a524c17034c679574fc175b10bfd55445a324b1c8b0586cfec6dfddf40fbff0e9267868d45bc84ab2b64fb1706d0ca35d401622b4ef2ef5966d9ff7d5ee1e5766ab9fc2f2dc3cf1463debbcdb38418b11e2", 0xc2}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="df0c1927ed0e990102ffbe9518bc435c5f9d682f903f8234c9fdcdd8cf7e92f742b9bbcc5409145c00d5bb996bf7d12bcfcd3926894771125bc78b2c48b9f977ae0ee704f43db6c15347b9b9e8c1dabf941d02bc14c99066fb9df1696bfc476d66d09b9506b79634e8a86910e4fc96adc615d6caf4e0bc0407310158dc51900e1571e0d20d4d0af83d541b0b99f7ad644964816a253c13c13e772bf89fffa3b1e6f2de24f037b51300d99069426229d9f7b010f626c194bea4bd3e2e91ad293e4d21b86abc031a25948bee4736171362ab61873827db927443157d46d117a6376992d59a1be3137f958006f341a7ef633df6783a21a1aee7", 0xf8}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf8, 0x4000080}, 0x40004) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) [ 232.929480] binder: 22604:22605 transaction failed 29201/-22, size 24738-0 line 2852 [ 232.969708] binder_alloc: binder_alloc_mmap_handler: 22604 20001000-20004000 already mapped failed -16 05:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x1800000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 233.008616] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.014593] Process accounting resumed [ 233.016501] FAT-fs (loop1): Filesystem has been set read-only [ 233.021586] binder: 22604:22621 got transaction to invalid handle [ 233.032548] binder: 22604:22621 transaction failed 29201/-22, size 24738-0 line 2852 05:45:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf%\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 233.056885] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 233.091639] Process accounting resumed [ 233.099108] binder: undelivered TRANSACTION_ERROR: 29201 05:45:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400600000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 233.105079] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.113400] Process accounting resumed 05:45:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x30}, &(0x7f0000000180)=0xc) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) creat(&(0x7f0000000140)='./file0\x00', 0x8) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x4000, 0x0) 05:45:11 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xfffffffffffffff7, 0x800c, 0x2, 0x7, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x8001, 0x20, 0x7, 0x7}, &(0x7f0000000100)=0x18) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfa\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x89060000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 233.155658] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 233.162849] binder: 22648:22654 got transaction to invalid handle [ 233.170452] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.170970] binder: 22648:22654 transaction failed 29201/-22, size 24738-0 line 2852 [ 233.178782] FAT-fs (loop1): Filesystem has been set read-only [ 233.235398] Process accounting resumed [ 233.280430] Process accounting resumed [ 233.290369] binder_alloc: binder_alloc_mmap_handler: 22648 20001000-20004000 already mapped failed -16 [ 233.311162] binder: BINDER_SET_CONTEXT_MGR already set [ 233.311169] binder: 22648:22676 got transaction to invalid handle [ 233.311190] binder: 22648:22676 transaction failed 29201/-22, size 24738-0 line 2852 [ 233.329550] binder: 22648:22654 ioctl 40046207 0 returned -16 [ 233.352377] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.358511] binder: undelivered TRANSACTION_ERROR: 29201 05:45:11 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(r0) 05:45:11 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673fd", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:11 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 05:45:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x27}}) close(r2) close(r1) 05:45:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8864, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfk\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340404c00000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8906, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 233.746180] binder: 22684:22693 got transaction to invalid handle [ 233.752495] binder: 22684:22693 transaction failed 29201/-22, size 24738-0 line 2852 [ 233.758558] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.768342] FAT-fs (loop1): Filesystem has been set read-only [ 233.785202] binder_alloc: binder_alloc_mmap_handler: 22684 20001000-20004000 already mapped failed -16 05:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x806000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf+\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 233.814206] binder: BINDER_SET_CONTEXT_MGR already set 05:45:12 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x30, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) 05:45:12 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673fd", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 233.846567] binder: 22684:22693 ioctl 40046207 0 returned -16 [ 233.857601] binder: 22684:22700 got transaction to invalid handle [ 233.863932] binder: 22684:22700 transaction failed 29201/-22, size 24738-0 line 2852 05:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x1400000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340407a00000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 233.912099] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.920084] FAT-fs (loop1): Filesystem has been set read-only [ 233.935196] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.942281] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.976584] binder: 22746:22747 got transaction to invalid handle [ 233.983051] binder: 22746:22747 transaction failed 29201/-22, size 24738-0 line 2852 [ 234.019011] binder_alloc: binder_alloc_mmap_handler: 22746 20001000-20004000 already mapped failed -16 [ 234.029919] binder: BINDER_SET_CONTEXT_MGR already set [ 234.035363] binder: 22746:22747 ioctl 40046207 0 returned -16 [ 234.041742] binder: 22746:22748 got transaction to invalid handle [ 234.048073] binder: 22746:22748 transaction failed 29201/-22, size 24738-0 line 2852 [ 234.069298] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.075325] binder: undelivered TRANSACTION_ERROR: 29201 05:45:12 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(r0) 05:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x5800000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:12 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserft\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:12 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'tunl0\x00', 0x400}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x1, 0xfffffffffffff63e, 0x6, 0xadbb, 0x1f, 0x3, 0x1, 0x6, 0x1ff, 0x9f8}) 05:45:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000002000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x0, @broadcast=0xffffffff, 0x0, 0x0, 'fo\x00'}, 0x2c) 05:45:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x1800, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 234.656314] binder: 22764:22767 got transaction to invalid handle [ 234.662658] binder: 22764:22767 transaction failed 29201/-22, size 24738-0 line 2852 [ 234.676541] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 234.696109] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 05:45:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 05:45:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 234.704106] FAT-fs (loop1): Filesystem has been set read-only [ 234.715612] binder_alloc: binder_alloc_mmap_handler: 22764 20001000-20004000 already mapped failed -16 [ 234.743070] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x300, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 234.750711] binder: 22764:22778 got transaction to invalid handle [ 234.752127] binder: BINDER_SET_CONTEXT_MGR already set [ 234.758321] binder: 22764:22778 transaction failed 29201/-22, size 24738-0 line 2852 05:45:13 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:13 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000bc0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x4200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000c00)={0x0, 0x800}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000c80)={r1, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, 0x84) r2 = socket$inet6(0xa, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566fcbd6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x3da, 0x200, 0x10001, 0x0, 0xffa, 0x6}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfu\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x700, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 234.845827] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 234.853702] FAT-fs (loop1): Filesystem has been set read-only [ 234.872845] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 234.877097] binder: 22764:22767 ioctl 40046207 0 returned -16 [ 234.911781] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 234.922124] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.927955] binder: undelivered TRANSACTION_ERROR: 29201 05:45:13 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(r0) 05:45:13 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1000, &(0x7f0000000240)={0x100000000}, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x9) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xd00, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000005000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:13 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667302", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:13 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfh\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x806, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 235.567697] binder: 22832:22833 transaction failed 29201/-28, size 24738-0 line 2967 05:45:13 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1000, &(0x7f0000000240)={0x100000000}, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x9) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 235.608539] binder_alloc: binder_alloc_mmap_handler: 22832 20001000-20004000 already mapped failed -16 [ 235.616189] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 235.625940] FAT-fs (loop1): Filesystem has been set read-only [ 235.635832] binder: BINDER_SET_CONTEXT_MGR already set [ 235.652721] binder: 22832:22833 ioctl 40046207 0 returned -16 05:45:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfx\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:13 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667304", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x608, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 235.661133] binder_alloc: 22832: binder_alloc_buf, no vma [ 235.666898] binder: 22832:22853 transaction failed 29189/-3, size 24738-0 line 2967 05:45:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000002000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:13 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'sit0\x00'}}, 0x1e) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 235.721362] binder: undelivered TRANSACTION_ERROR: 29189 [ 235.727962] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.771949] binder: 22879:22884 transaction failed 29201/-28, size 24738-0 line 2967 [ 235.793876] binder_alloc: binder_alloc_mmap_handler: 22879 20001000-20004000 already mapped failed -16 [ 235.828565] binder: BINDER_SET_CONTEXT_MGR already set [ 235.830100] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 235.841038] binder: 22879:22884 ioctl 40046207 0 returned -16 [ 235.841956] FAT-fs (loop1): Filesystem has been set read-only [ 235.850841] binder_alloc: 22879: binder_alloc_buf, no vma [ 235.860017] binder: 22879:22892 transaction failed 29189/-3, size 24738-0 line 2967 [ 235.904135] binder: undelivered TRANSACTION_ERROR: 29189 [ 235.910346] binder: undelivered TRANSACTION_ERROR: 29201 05:45:14 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(r0) 05:45:14 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1000, &(0x7f0000000240)={0x100000000}, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x9) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffffffffffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf-\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:14 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:14 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x220000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x2d) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f00000000c0)) fcntl$setsig(r1, 0xa, 0x5) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000fffffdfd000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x80ffffff00000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 236.465769] binder: 22904:22905 transaction failed 29201/-28, size 24738-0 line 2967 [ 236.485810] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 236.502514] binder_alloc: binder_alloc_mmap_handler: 22904 20001000-20004000 already mapped failed -16 05:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8906000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:14 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1000, &(0x7f0000000240)={0x100000000}, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x9) [ 236.528884] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 236.532132] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 236.537473] FAT-fs (loop1): Filesystem has been set read-only [ 236.550063] binder: BINDER_SET_CONTEXT_MGR already set 05:45:14 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0xc4102) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x5f) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xff, 0x3, 0xffffffff, 0xfffffffffffffc01, r2}, &(0x7f0000000200)=0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000006c0)) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="53efa4f0f44aa2cc3ac01437bba1597b4068cf83c8b7dd184cc76a5a5d6c0fe809fab8993f13b4901e55cbd2590067529e1197d5efd5676baa4130f5a365d5cafce1", 0x42}, {&(0x7f0000000380)="447fb001882e8ad50bfb70abb5d8d7c754f0a6f86a010d2b0810ea94bcfc52d3c6ad68037cd2c83a6069f55cf6ef5fbc25b3aac873f712f6c8c45d17dd0ae0b1c1d992e8c28b695beb698c8b7321125c33ae16dbd1", 0x55}, {&(0x7f0000000400)="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", 0xfd}], 0x3, 0xa) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x4}, &(0x7f0000000100)=0x8) ioctl$TCSBRK(r1, 0x5409, 0x5) r4 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r4, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) preadv(r1, &(0x7f0000000680), 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) symlink(&(0x7f0000000680)='./file0\x00', &(0x7f0000000080)='./file0\x00') bind$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) 05:45:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfz\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x800e0000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:14 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 236.599100] binder_alloc: 22904: binder_alloc_buf, no vma [ 236.604751] binder: 22904:22924 transaction failed 29189/-3, size 24738-0 line 2967 [ 236.635070] binder: 22904:22905 ioctl 40046207 0 returned -16 [ 236.678303] binder: undelivered TRANSACTION_ERROR: 29189 [ 236.684088] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.717100] FAT-fs (loop1): bogus number of reserved sectors [ 236.723010] FAT-fs (loop1): Can't find a valid FAT filesystem 05:45:15 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r1) close(r0) 05:45:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000100000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:15 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1000, &(0x7f0000000240)={0x100000000}, 0x8) 05:45:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x600, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfX\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:15 executing program 7: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:15 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667312", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xffffff80, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 237.358960] binder: 22974:22975 got transaction to invalid handle [ 237.365291] binder: 22974:22975 transaction failed 29201/-22, size 24738-0 line 2852 [ 237.383338] FAT-fs (loop1): bogus number of reserved sectors [ 237.389329] FAT-fs (loop1): Can't find a valid FAT filesystem 05:45:15 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) inotify_init1(0x800) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400, 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f00000001c0)='./file1\x00', 0x8, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="5f83d2120383e8bd855cb45111af9d5ae5dd1a45d5ad344adddd35b90da1d74fc4831083d60052c9d87c689e266c0b58cbb58bfeba99f538dab742eac48ded464c59b7888d", 0x45, 0xbd}, {&(0x7f0000000300)="c7cd989dcbcf9ad1dcd552e830968ea58831ddacc54f88fa91b2cf", 0x1b, 0xfffffffffffffffb}], 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = getpid() socket$inet6(0xa, 0x80005, 0x791) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000380)=0xffffffff00000001, 0x8) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r0, r0, 0x2}) [ 237.404255] binder_alloc: binder_alloc_mmap_handler: 22974 20001000-20004000 already mapped failed -16 05:45:15 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) 05:45:15 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x200000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 237.443486] binder: BINDER_SET_CONTEXT_MGR already set [ 237.458835] binder: 22974:22975 ioctl 40046207 0 returned -16 05:45:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfy\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x80350000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 237.489052] binder: 22974:22998 got transaction to invalid handle [ 237.495378] binder: 22974:22998 transaction failed 29201/-22, size 24738-0 line 2852 [ 237.534354] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 237.555557] FAT-fs (loop1): bogus number of reserved sectors [ 237.561464] FAT-fs (loop1): Can't find a valid FAT filesystem [ 237.571833] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. [ 237.588883] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.594792] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.614195] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 237.654883] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. 05:45:16 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xf0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040004c000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:16 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) 05:45:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:16 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:16 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100000000}) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') readahead(r0, 0x7, 0x10000200) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, [0x10000, 0x8, 0x1, 0x9]}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x50, r1, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 05:45:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x4305, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:16 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) [ 238.249393] binder: 23060:23063 got transaction to invalid handle [ 238.255823] binder: 23060:23063 transaction failed 29201/-22, size 24738-0 line 2852 [ 238.267088] FAT-fs (loop1): bogus number of reserved sectors [ 238.272998] FAT-fs (loop1): Can't find a valid FAT filesystem [ 238.286638] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xfeffffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:16 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) socket$inet6(0xa, 0x0, 0x0) 05:45:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfK\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:16 executing program 7: socket$inet6(0xa, 0xa, 0x800000ffffffff) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:16 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs`', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 238.358902] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 238.361199] binder_alloc: binder_alloc_mmap_handler: 23060 20001000-20004000 already mapped failed -16 05:45:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 238.447852] binder: BINDER_SET_CONTEXT_MGR already set [ 238.462785] binder: 23060:23063 ioctl 40046207 0 returned -16 [ 238.479766] FAT-fs (loop1): bogus number of reserved sectors [ 238.481604] binder: 23060:23091 got transaction to invalid handle [ 238.485669] FAT-fs (loop1): Can't find a valid FAT filesystem [ 238.491912] binder: 23060:23091 transaction failed 29201/-22, size 24738-0 line 2852 [ 238.524121] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.529913] binder: undelivered TRANSACTION_ERROR: 29201 05:45:17 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x43050000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:17 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) 05:45:17 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) r1 = mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x40000018}) 05:45:17 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000007a0000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfo\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x5800, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 239.195977] binder: 23131:23134 got transaction to invalid handle [ 239.202336] binder: 23131:23134 transaction failed 29201/-22, size 24738-0 line 2852 [ 239.210670] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 239.216215] FAT-fs (loop1): bogus number of reserved sectors [ 239.225489] FAT-fs (loop1): Can't find a valid FAT filesystem 05:45:17 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:17 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xd, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:17 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 239.248404] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 239.266279] binder_alloc: binder_alloc_mmap_handler: 23131 20001000-20004000 already mapped failed -16 05:45:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfp\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:17 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 239.325998] binder: 23131:23154 got transaction to invalid handle [ 239.332335] binder: 23131:23154 transaction failed 29201/-22, size 24738-0 line 2852 [ 239.342427] binder: BINDER_SET_CONTEXT_MGR already set [ 239.380387] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 239.389453] binder: 23131:23134 ioctl 40046207 0 returned -16 [ 239.412564] FAT-fs (loop1): bogus number of reserved sectors [ 239.418505] FAT-fs (loop1): Can't find a valid FAT filesystem [ 239.442976] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.456475] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.462197] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x8, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040006c000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:18 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:18 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x7ff, @mcast2={0xff, 0x2, [], 0x1}, 0x80}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffa}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x20, 0x1, [0x8]}, &(0x7f0000000200)=0xa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:18 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667310", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:18 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x0, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:18 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x0, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x58, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 240.117197] FAT-fs (loop1): bogus number of reserved sectors [ 240.120062] binder: 23195:23199 got transaction to invalid handle [ 240.123122] FAT-fs (loop1): Can't find a valid FAT filesystem [ 240.129366] binder: 23195:23199 transaction failed 29201/-22, size 24738-0 line 2852 05:45:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserf*\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 240.172838] binder_alloc: binder_alloc_mmap_handler: 23195 20001000-20004000 already mapped failed -16 05:45:18 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:18 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x0, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) [ 240.216346] binder: BINDER_SET_CONTEXT_MGR already set 05:45:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x6, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:18 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:18 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) [ 240.241189] binder: 23195:23199 ioctl 40046207 0 returned -16 [ 240.261816] binder: 23195:23223 got transaction to invalid handle [ 240.268332] binder: 23195:23223 transaction failed 29201/-22, size 24738-0 line 2852 [ 240.281748] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000007fffffff0000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 240.342141] FAT-fs (loop1): bogus number of reserved sectors [ 240.344140] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.348084] FAT-fs (loop1): Can't find a valid FAT filesystem [ 240.357938] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.379908] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 240.397881] binder: 23259:23260 transaction failed 29201/-28, size 24738-0 line 2967 [ 240.423332] binder_alloc: binder_alloc_mmap_handler: 23259 20001000-20004000 already mapped failed -16 [ 240.467933] binder: BINDER_SET_CONTEXT_MGR already set [ 240.473498] binder: 23259:23260 ioctl 40046207 0 returned -16 [ 240.479518] binder_alloc: 23259: binder_alloc_buf, no vma [ 240.485117] binder: 23259:23264 transaction failed 29189/-3, size 24738-0 line 2967 [ 240.505962] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.511767] binder: undelivered TRANSACTION_ERROR: 29201 05:45:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xb, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfc\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:19 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:19 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:19 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c6310643dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000004000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x2000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:19 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) [ 241.038695] binder: 23273:23275 transaction failed 29201/-28, size 24738-0 line 2967 [ 241.042857] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 241.047694] FAT-fs (loop1): bogus number of reserved sectors [ 241.061536] FAT-fs (loop1): Can't find a valid FAT filesystem [ 241.076135] binder_alloc: binder_alloc_mmap_handler: 23273 20001000-20004000 already mapped failed -16 05:45:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfl\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 241.104842] binder: BINDER_SET_CONTEXT_MGR already set [ 241.116359] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 241.127548] binder: 23273:23275 ioctl 40046207 0 returned -16 [ 241.141420] binder_alloc: 23273: binder_alloc_buf, no vma [ 241.147244] binder: 23273:23305 transaction failed 29189/-3, size 24738-0 line 2967 05:45:19 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:19 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x8000) r1 = memfd_create(&(0x7f0000000300)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000001c0)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79de3ff4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea646f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92b046750a61827e1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x40000000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:19 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 241.230128] FAT-fs (loop1): bogus number of reserved sectors [ 241.236044] FAT-fs (loop1): Can't find a valid FAT filesystem [ 241.264531] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 241.290389] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.298881] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.305655] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0xf000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:20 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000006c000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:20 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:20 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x1000002ec, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 241.933196] binder: 23342:23343 transaction failed 29201/-28, size 24738-0 line 2967 [ 241.946082] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 241.956898] FAT-fs (loop1): bogus number of reserved sectors [ 241.960443] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 241.962773] FAT-fs (loop1): Can't find a valid FAT filesystem 05:45:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x18, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:20 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x0, 0x6, 0x7, 0x1, 0x5, 0x8}) [ 241.972861] binder_alloc: binder_alloc_mmap_handler: 23342 20001000-20004000 already mapped failed -16 05:45:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174000204410005", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 242.004376] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 242.018517] binder: BINDER_SET_CONTEXT_MGR already set [ 242.030596] binder: 23342:23343 ioctl 40046207 0 returned -16 05:45:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x4888, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:20 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x0, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:20 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 242.046189] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 242.066166] FAT-fs (loop1): invalid media value (0x00) [ 242.068416] binder_alloc: 23342: binder_alloc_buf, no vma [ 242.071591] FAT-fs (loop1): Can't find a valid FAT filesystem [ 242.077110] binder: 23342:23363 transaction failed 29189/-3, size 24738-0 line 2967 05:45:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x14, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 242.150283] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 242.170151] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.176521] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.219444] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000004c0000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:21 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x0, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174000204410005", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x400000000000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:21 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:21 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x799) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @empty, 0x8}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x4c) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:21 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3, 0x0, 0x7, 0x1, 0x5, 0x8}) [ 242.830873] binder: 23412:23413 got transaction to invalid handle [ 242.837263] binder: 23412:23413 transaction failed 29201/-22, size 24738-0 line 2852 [ 242.851200] FAT-fs (loop1): invalid media value (0x00) [ 242.851827] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 242.856574] FAT-fs (loop1): Can't find a valid FAT filesystem 05:45:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x58000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174000204410005", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 242.884778] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 242.902470] binder_alloc: binder_alloc_mmap_handler: 23412 20001000-20004000 already mapped failed -16 [ 242.925998] binder: BINDER_SET_CONTEXT_MGR already set 05:45:21 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) read(r0, &(0x7f00000001c0)=""/178, 0xb2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0xa0010, r0, 0xffffffffffffffff) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 242.944086] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 242.944253] FAT-fs (loop1): invalid media value (0x00) [ 242.957783] binder: 23412:23413 ioctl 40046207 0 returned -16 [ 242.958476] FAT-fs (loop1): Can't find a valid FAT filesystem [ 242.973443] binder: 23412:23430 got transaction to invalid handle [ 242.979785] binder: 23412:23430 transaction failed 29201/-22, size 24738-0 line 2852 05:45:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x80ffffff00000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:21 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3, 0x0, 0x0, 0x1, 0x5, 0x8}) 05:45:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 242.992922] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000060000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 243.045449] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.051534] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.089923] binder: 23460:23461 got transaction to invalid handle [ 243.096281] binder: 23460:23461 transaction failed 29201/-22, size 24738-0 line 2852 [ 243.115345] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 243.131399] binder_alloc: binder_alloc_mmap_handler: 23460 20001000-20004000 already mapped failed -16 [ 243.142891] binder: BINDER_SET_CONTEXT_MGR already set [ 243.148344] binder: 23460:23467 got transaction to invalid handle [ 243.154640] binder: 23460:23467 transaction failed 29201/-22, size 24738-0 line 2852 [ 243.162907] binder: 23460:23461 ioctl 40046207 0 returned -16 [ 243.171285] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 243.195868] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.201646] binder: undelivered TRANSACTION_ERROR: 29201 05:45:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:21 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667306", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88caffff00000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:21 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0x5, 0x8}) 05:45:21 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f00000001c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe74eaec9bdd36740e127730e90f2cd72b8280000000000ec56401d73384a4b86ce637c5d2c56169b0769b8ec5729b4402b6249c06a43083001a7b488", 0x8000000000000001) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100)="44eb123f5791dc26020bc0c7287a7d52aba639e9dfb25e42f6be2f1481730617432586549809d6c4a5db90a88fb47a85da1db124fb520766ed7107bb1c850c274a5f2e858187ca3cd00664ae909608d04425316f887de2f417fb8fc231517b92c1d64d46d25a06c0c0fe0de1cdded2e3cd0c9cbf4ea1761543f66404627f9a48bf94b67f8d4427fecd8d4789eb33263aa60b890e5234042a993c94e58d9f3f8f98dfc8fde7424f7055c54a9f5135567a957643e56a1920203f555749", 0xbc, 0x5}, {&(0x7f0000000300)="0cc74394dd7f4c172f12fc0120361e91c981fd38e37c15ab70e4feae5eb2c5ecae8222bef49f20524734b027f2215c3446ee5120bacaa9139d999ae963d86672ac50", 0x42, 0x80000001}, {&(0x7f0000000380)="fae3a0be705a2984b7045b0efbf3aafb16493bbe60", 0x15, 0x7}], 0x40, &(0x7f0000000440)={[{@gid={'gid', 0x3d, [0x37, 0x32, 0x37, 0x3d]}, 0x2c}, {@utf8='utf8', 0x2c}, {@show_sys_files_no={'show_sys_files=no', 0x3d, [0x7a, 0x33, 0x31, 0x37, 0x0, 0x32, 0x3b, 0x33]}, 0x2c}, {@fmask={'fmask', 0x3d, [0x34, 0x32, 0x33]}, 0x2c}, {@umask={'umask', 0x3d, [0x31, 0x36, 0x35, 0x30, 0x35, 0x32, 0x37]}, 0x2c}, {@disable_sparse_yes={'disable_sparse=yes', 0x3d, [0x33, 0x36]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x78, 0x78, 0x33]}, 0x2c}, {@errors_recover='errors=recover', 0x2c}]}) 05:45:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174000204410005000770", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000a80a0000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 243.754253] binder: 23480:23481 got transaction to invalid handle [ 243.760583] binder: 23480:23481 transaction failed 29201/-22, size 24738-0 line 2852 [ 243.767044] FAT-fs (loop1): invalid media value (0x00) [ 243.773846] FAT-fs (loop1): Can't find a valid FAT filesystem [ 243.786357] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:22 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 243.794990] binder_alloc: binder_alloc_mmap_handler: 23480 20001000-20004000 already mapped failed -16 05:45:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:22 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 243.826220] binder: BINDER_SET_CONTEXT_MGR already set [ 243.839689] binder: 23480:23481 ioctl 40046207 0 returned -16 [ 243.846562] binder: 23480:23495 got transaction to invalid handle [ 243.852983] binder: 23480:23495 transaction failed 29201/-22, size 24738-0 line 2852 [ 243.865839] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:22 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/56) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x1) 05:45:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174000204410005000770", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:22 executing program 0: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x7000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 243.933080] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 243.956589] FAT-fs (loop1): invalid media value (0x00) [ 243.962038] FAT-fs (loop1): Can't find a valid FAT filesystem [ 243.978757] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.984570] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.006317] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 244.015578] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 244.036767] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040005c8d0200000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:22 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x1) mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x82, &(0x7f00000000c0)={0x9, 0x7fff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x8}) 05:45:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4305, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e666174000204410005000770", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7f, 0x400) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x101}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r1, @in={{0x2, 0x4e20, @rand_addr=0x785c}}, [0x0, 0x4, 0x7, 0x8001, 0x2, 0x4ecc, 0x4, 0x1ff, 0x1, 0x0, 0xfef, 0x16b, 0x4f9, 0x9, 0x80000001]}, &(0x7f00000001c0)=0x100) r2 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x102) inotify_rm_watch(r0, r2) socket$inet6(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r3, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000240)={0x508a, 0x1, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) socket$inet6(0xa, 0xf, 0x3) 05:45:22 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x700, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r1) [ 244.695454] FAT-fs (loop1): invalid media value (0x00) [ 244.697612] binder: 23555:23557 got transaction to invalid handle [ 244.701053] FAT-fs (loop1): Can't find a valid FAT filesystem [ 244.707304] binder: 23555:23557 transaction failed 29201/-22, size 24738-0 line 2852 [ 244.726189] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xe80, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 244.746462] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 244.762857] binder_alloc: binder_alloc_mmap_handler: 23555 20001000-20004000 already mapped failed -16 [ 244.787987] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 244.797213] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 244.808084] Process accounting resumed [ 244.810912] binder: BINDER_SET_CONTEXT_MGR already set 05:45:23 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:23 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)="2d42d54e49c56aba707070f00884a2af8b1d734468c7a15c9b62f911cf206c6d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bfec5e9559000003dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e1", 0x1) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r1) 05:45:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 244.839216] FAT-fs (loop1): invalid media value (0x00) [ 244.844595] FAT-fs (loop1): Can't find a valid FAT filesystem [ 244.852488] binder: 23555:23557 ioctl 40046207 0 returned -16 [ 244.869706] binder: 23555:23590 got transaction to invalid handle [ 244.876049] binder: 23555:23590 transaction failed 29201/-22, size 24738-0 line 2852 [ 244.910075] Process accounting resumed [ 244.914965] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 244.925268] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 244.933695] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.941541] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.961561] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 244.974711] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffff0000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000fdfdffff000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r1) 05:45:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:23 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl(0xffffffffffffff45, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000001c0)="1c3ba16324142c5d4b55334140c40fcf08cb76d187e7bb4ce2777be7ac0df71aa9ae43bd9d7e6f092af940439e4ec7be056c882fb3f34545c7dd144348952cd73d82fc6fad0b321a6a4b8f101d93bede6c006c1270bb77fb2b36fc4224cdd5177615d3bba146df") symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:23 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1400000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 245.619320] binder: 23629:23633 got transaction to invalid handle [ 245.625832] binder: 23629:23633 transaction failed 29201/-22, size 24738-0 line 2852 [ 245.640082] Process accounting resumed [ 245.645585] FAT-fs (loop1): invalid media value (0x00) [ 245.650967] FAT-fs (loop1): Can't find a valid FAT filesystem [ 245.660137] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x543, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 245.668890] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 245.680125] binder_alloc: binder_alloc_mmap_handler: 23629 20001000-20004000 already mapped failed -16 [ 245.704415] binder: BINDER_SET_CONTEXT_MGR already set [ 245.710545] binder: 23629:23642 got transaction to invalid handle 05:45:23 executing program 7: socket$inet6(0xa, 0x5, 0x2000000) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) [ 245.716883] binder: 23629:23642 transaction failed 29201/-22, size 24738-0 line 2852 [ 245.733542] binder: 23629:23633 ioctl 40046207 0 returned -16 [ 245.742590] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 245.758135] Process accounting resumed 05:45:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8848000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:24 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="726569736572667305", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:24 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 245.762341] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 245.825539] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.826081] FAT-fs (loop1): invalid media value (0x00) [ 245.831362] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.836469] FAT-fs (loop1): Can't find a valid FAT filesystem 05:45:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 05:45:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000007000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x806000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:24 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673fc", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:24 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x8, 0x8, 0x1, 0x0, 0x0, [{r1, 0x0, 0x5}]}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x600000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 246.535498] binder: 23681:23682 transaction failed 29201/-28, size 24738-0 line 2967 [ 246.547071] Process accounting resumed [ 246.563146] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 246.592540] binder_alloc: binder_alloc_mmap_handler: 23681 20001000-20004000 already mapped failed -16 [ 246.615406] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 246.622620] FAT-fs (loop1): Filesystem has been set read-only [ 246.632354] binder: BINDER_SET_CONTEXT_MGR already set 05:45:24 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000000)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:24 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='%/file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 246.648120] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 246.662095] binder: 23681:23682 ioctl 40046207 0 returned -16 [ 246.672387] binder_alloc: 23681: binder_alloc_buf, no vma [ 246.678196] binder: 23681:23705 transaction failed 29189/-3, size 24738-0 line 2967 05:45:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfffff000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 246.704711] Process accounting resumed 05:45:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 246.771153] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.777695] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.785223] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 246.792410] FAT-fs (loop1): Filesystem has been set read-only [ 246.807941] Process accounting resumed 05:45:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400048000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:25 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='//file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e0000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:25 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x48010, r0, 0xfffffffffffffffe) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x18000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:25 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='d/file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) acct(&(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 247.583492] binder: 23750:23751 got transaction to invalid handle [ 247.589841] binder: 23750:23751 transaction failed 29201/-22, size 24738-0 line 2852 [ 247.602072] Process accounting resumed [ 247.609507] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 247.616732] FAT-fs (loop1): Filesystem has been set read-only 05:45:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfffffffffffff000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673fc", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:25 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='\n/file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 247.664353] binder_alloc: binder_alloc_mmap_handler: 23750 20001000-20004000 already mapped failed -16 [ 247.703964] binder: BINDER_SET_CONTEXT_MGR already set 05:45:25 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) fadvise64(r0, 0x0, 0x8000400552, 0x5) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 247.711363] binder: 23750:23751 ioctl 40046207 0 returned -16 [ 247.718221] binder: 23750:23781 got transaction to invalid handle [ 247.724591] binder: 23750:23781 transaction failed 29201/-22, size 24738-0 line 2852 [ 247.748963] Process accounting resumed [ 247.805164] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.810904] binder: undelivered TRANSACTION_ERROR: 29201 05:45:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:26 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='.%file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x14000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000050000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="72656973657266738c", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:26 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf4, 0xb6, &(0x7f0000000300)="f3600498cb8fefda6b8a66cef8ffab9b05d5f3c190ac29c8ffdd80aec33e7593d92ec379bf9bb50103ca1d66bae7440b5ac0f2dbc4016a97d2717491fbc92b4f2cba5ecbd015e08f089413bde8bf7fd79317462d7e52d7ee9238f5f0534b368453def479ccb27e89010e989599332de5a9a9a2a0116445cf85f9221d1872699769c803dc5c5a367c9047901a965bc784a531f089faf4d542be305886acb349e178e7ca672760ff73cc2c18826e3011d75d1bf697795e3b28bdf5c98e411e3e0967fee3eaefb12a0980c16d5d6fc4aea93ad3afe1a764d04af1add54dba76022cb9fae25b891ab48b71ed0f38f9a98dce5b46a0ea", &(0x7f0000000400)=""/182, 0x7ff}, 0x28) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x3, 0x3, 0x3}, 0x7, 0x2c8c, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000240)='./file0\x00', 0x40) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x58000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 248.481734] binder: 23826:23830 transaction failed 29201/-28, size 24738-0 line 2967 [ 248.516237] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:26 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x401, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r2, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 248.552944] binder_alloc: binder_alloc_mmap_handler: 23826 20001000-20004000 already mapped failed -16 [ 248.592249] binder: BINDER_SET_CONTEXT_MGR already set 05:45:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 248.611097] binder: 23826:23830 ioctl 40046207 0 returned -16 [ 248.611319] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 248.634886] binder_alloc: 23826: binder_alloc_buf, no vma [ 248.640603] binder: 23826:23849 transaction failed 29189/-3, size 24738-0 line 2967 [ 248.656333] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 248.712713] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 248.741554] binder: undelivered TRANSACTION_ERROR: 29189 [ 248.747372] binder: undelivered TRANSACTION_ERROR: 29201 05:45:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:27 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:27 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='.dfile0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x18, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000068000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:27 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000000c0)={0x6b, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x81, 'ovf\x00', 0x10, 0xff, 0x1d}, 0x2c) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x2}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:27 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 249.400735] binder: 23893:23897 transaction failed 29201/-28, size 24738-0 line 2967 [ 249.418194] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 249.427386] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8864000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 249.459152] binder_alloc: binder_alloc_mmap_handler: 23893 20001000-20004000 already mapped failed -16 05:45:27 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x70, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:27 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 249.501930] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 249.505994] binder: BINDER_SET_CONTEXT_MGR already set [ 249.538124] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:27 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./\nile0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88a8ffff00000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:27 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 249.541685] binder_alloc: 23893: binder_alloc_buf, no vma [ 249.552761] binder: 23893:23909 transaction failed 29189/-3, size 24738-0 line 2967 [ 249.585136] binder: 23893:23897 ioctl 40046207 0 returned -16 [ 249.607207] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 249.663276] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 249.672372] binder: undelivered TRANSACTION_ERROR: 29189 [ 249.678318] binder: undelivered TRANSACTION_ERROR: 29201 05:45:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:28 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000aa80000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:28 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000000)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x142, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:28 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./%ile0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 250.325519] binder: 23949:23951 got transaction to invalid handle [ 250.331936] binder: 23949:23951 transaction failed 29201/-22, size 24738-0 line 2852 [ 250.343462] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 250.359679] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:28 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88480000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:28 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0xfffffffffffffffd) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 05:45:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 250.374382] binder_alloc: binder_alloc_mmap_handler: 23949 20001000-20004000 already mapped failed -16 [ 250.412346] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 250.432403] binder: BINDER_SET_CONTEXT_MGR already set [ 250.450036] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:28 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:28 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./.ile0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:28 executing program 7 (fault-call:0 fault-nth:0): mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 250.479219] binder: 23949:23951 ioctl 40046207 0 returned -16 [ 250.522118] binder: 23949:23972 got transaction to invalid handle [ 250.528468] binder: 23949:23972 transaction failed 29201/-22, size 24738-0 line 2852 [ 250.550198] FAULT_INJECTION: forcing a failure. [ 250.550198] name failslab, interval 1, probability 0, space 0, times 0 [ 250.561507] CPU: 0 PID: 24003 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 250.569915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.579370] Call Trace: [ 250.582022] dump_stack+0x1c9/0x2b4 [ 250.585658] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.590852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.596387] ? _parse_integer+0x13b/0x190 [ 250.600548] should_fail.cold.4+0xa/0x11 [ 250.604634] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.609750] ? lock_release+0xa30/0xa30 [ 250.613735] ? check_same_owner+0x340/0x340 [ 250.617053] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.618098] ? __check_object_size+0x9d/0x5f2 [ 250.618125] ? lock_acquire+0x1e4/0x540 [ 250.626754] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.628081] ? get_pid_task+0xd8/0x1a0 [ 250.628098] ? lock_downgrade+0x8f0/0x8f0 [ 250.628116] ? lock_release+0xa30/0xa30 [ 250.649501] ? lock_acquire+0x1e4/0x540 [ 250.653478] ? fs_reclaim_acquire+0x20/0x20 [ 250.658122] ? lock_downgrade+0x8f0/0x8f0 [ 250.662276] ? check_same_owner+0x340/0x340 [ 250.666605] ? proc_fail_nth_write+0x9e/0x210 [ 250.671141] ? rcu_note_context_switch+0x730/0x730 [ 250.676079] __should_failslab+0x124/0x180 [ 250.680321] should_failslab+0x9/0x14 [ 250.684122] kmem_cache_alloc+0x2af/0x760 [ 250.688274] ? lock_acquire+0x1e4/0x540 [ 250.692249] ? __might_fault+0x12b/0x1e0 [ 250.696315] getname_flags+0xd0/0x5a0 [ 250.700117] ? lock_release+0xa30/0xa30 [ 250.704094] getname+0x19/0x20 [ 250.707288] do_mq_open+0x1a7/0x960 [ 250.710919] ? mq_create_mount.constprop.12+0x190/0x190 [ 250.716283] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 250.721818] ? _copy_from_user+0xdf/0x150 [ 250.726003] __x64_sys_mq_open+0x165/0x1f0 [ 250.730235] ? mqueue_evict_inode+0x9d0/0x9d0 [ 250.734739] do_syscall_64+0x1b9/0x820 [ 250.738632] ? finish_task_switch+0x1d3/0x870 [ 250.743138] ? syscall_return_slowpath+0x5e0/0x5e0 [ 250.748080] ? syscall_return_slowpath+0x31d/0x5e0 [ 250.753048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 250.758072] ? prepare_exit_to_usermode+0x291/0x3b0 [ 250.763090] ? perf_trace_sys_enter+0xb10/0xb10 [ 250.767759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.772605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.777791] RIP: 0033:0x455ba9 [ 250.780977] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.792362] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 250.800248] RSP: 002b:00007fd8cb927c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 250.800264] RAX: ffffffffffffffda RBX: 00007fd8cb9286d4 RCX: 0000000000455ba9 [ 250.800272] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000040 [ 250.800280] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 250.800288] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000013 [ 250.800296] R13: 00000000004c0356 R14: 00000000004cfb98 R15: 0000000000000000 [ 250.887513] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673fd", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000020000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf0ffff, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:29 executing program 7 (fault-call:0 fault-nth:1): mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:29 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:29 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='.//ile0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 251.219359] FAULT_INJECTION: forcing a failure. [ 251.219359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.231220] CPU: 0 PID: 24026 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 251.239717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.249077] Call Trace: [ 251.251700] dump_stack+0x1c9/0x2b4 [ 251.255348] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.260554] should_fail.cold.4+0xa/0x11 [ 251.264647] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.269756] ? mnt_get_count+0x150/0x150 [ 251.273849] ? dput.part.26+0x276/0x7a0 [ 251.277826] ? shrink_dcache_sb+0x350/0x350 [ 251.282152] ? chown_common+0x730/0x730 [ 251.286136] ? trace_hardirqs_on+0x10/0x10 [ 251.290487] ? lock_acquire+0x1e4/0x540 [ 251.294463] ? __fdget_pos+0x1bb/0x200 [ 251.298352] ? lock_release+0xa30/0xa30 [ 251.302330] ? check_same_owner+0x340/0x340 [ 251.306656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.312190] ? _parse_integer+0x13b/0x190 [ 251.316372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.321915] ? should_fail+0x246/0xd86 [ 251.325816] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.330923] ? lock_release+0xa30/0xa30 [ 251.335097] __alloc_pages_nodemask+0x36e/0xdb0 [ 251.339781] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 251.344808] ? get_pid_task+0xd8/0x1a0 [ 251.348700] ? lock_downgrade+0x8f0/0x8f0 [ 251.352853] ? lock_release+0xa30/0xa30 [ 251.356833] ? lock_acquire+0x1e4/0x540 [ 251.360813] ? fs_reclaim_acquire+0x20/0x20 [ 251.365141] ? lock_downgrade+0x8f0/0x8f0 [ 251.369299] ? lock_release+0xa30/0xa30 [ 251.373281] ? check_same_owner+0x340/0x340 [ 251.377613] ? proc_fail_nth_write+0x9e/0x210 [ 251.380327] binder: 24029:24036 transaction failed 29201/-28, size 24738-0 line 2967 [ 251.382140] cache_grow_begin+0x91/0x710 [ 251.382162] kmem_cache_alloc+0x689/0x760 [ 251.382180] ? __might_fault+0x12b/0x1e0 [ 251.382197] getname_flags+0xd0/0x5a0 [ 251.382215] ? lock_release+0xa30/0xa30 [ 251.409852] binder_alloc: binder_alloc_mmap_handler: 24029 20001000-20004000 already mapped failed -16 05:45:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4788, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 251.410077] getname+0x19/0x20 [ 251.410092] do_mq_open+0x1a7/0x960 [ 251.410113] ? mq_create_mount.constprop.12+0x190/0x190 [ 251.431785] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.437331] ? _copy_from_user+0xdf/0x150 [ 251.441486] __x64_sys_mq_open+0x165/0x1f0 [ 251.445744] ? mqueue_evict_inode+0x9d0/0x9d0 [ 251.449118] binder: BINDER_SET_CONTEXT_MGR already set [ 251.450253] do_syscall_64+0x1b9/0x820 [ 251.450268] ? finish_task_switch+0x1d3/0x870 [ 251.450284] ? syscall_return_slowpath+0x5e0/0x5e0 05:45:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x7, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) [ 251.450296] ? syscall_return_slowpath+0x31d/0x5e0 [ 251.450314] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 251.477886] binder_alloc: 24029: binder_alloc_buf, no vma [ 251.479174] ? prepare_exit_to_usermode+0x291/0x3b0 [ 251.479191] ? perf_trace_sys_enter+0xb10/0xb10 [ 251.479207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.479226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.479236] RIP: 0033:0x455ba9 [ 251.479245] Code: [ 251.484823] binder: 24029:24040 transaction failed 29189/-3, size 24738-0 line 2967 [ 251.489807] 1d ba fb ff c3 66 2e 0f 1f 84 [ 251.505510] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 251.507733] 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.532156] binder: 24029:24036 ioctl 40046207 0 returned -16 [ 251.547119] RSP: 002b:00007fd8cb927c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 251.547134] RAX: ffffffffffffffda RBX: 00007fd8cb9286d4 RCX: 0000000000455ba9 05:45:29 executing program 7 (fault-call:0 fault-nth:2): mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 251.547140] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000040 [ 251.547148] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 251.547155] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000013 [ 251.547162] R13: 00000000004c0356 R14: 00000000004cfb98 R15: 0000000000000001 [ 251.617220] FAULT_INJECTION: forcing a failure. [ 251.617220] name failslab, interval 1, probability 0, space 0, times 0 [ 251.628644] CPU: 0 PID: 24049 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 251.637051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.646410] Call Trace: [ 251.649010] dump_stack+0x1c9/0x2b4 [ 251.652648] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.657848] should_fail.cold.4+0xa/0x11 [ 251.661919] ? kasan_check_read+0x11/0x20 [ 251.666091] ? fault_create_debugfs_attr+0x1f0/0x1f0 05:45:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:29 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000060a8000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 251.669367] binder: undelivered TRANSACTION_ERROR: 29189 [ 251.671199] ? rcu_read_lock+0x70/0x70 [ 251.671218] ? __unlock_page_memcg+0x72/0x100 [ 251.671237] ? unlock_page_memcg+0x2c/0x40 [ 251.677006] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.680556] ? page_add_file_rmap+0x781/0xe40 [ 251.680575] ? page_add_new_anon_rmap+0x870/0x870 [ 251.680591] ? kasan_check_write+0x14/0x20 [ 251.680607] ? __init_rwsem+0x1cc/0x2a0 [ 251.712663] ? lock_acquire+0x1e4/0x540 [ 251.716652] ? fs_reclaim_acquire+0x20/0x20 [ 251.718165] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 251.720975] ? lock_downgrade+0x8f0/0x8f0 [ 251.720992] ? lock_acquire+0x1e4/0x540 [ 251.721007] ? check_same_owner+0x340/0x340 [ 251.721023] ? rcu_note_context_switch+0x730/0x730 [ 251.721034] ? lock_release+0xa30/0xa30 [ 251.721053] __should_failslab+0x124/0x180 [ 251.755732] should_failslab+0x9/0x14 [ 251.759548] kmem_cache_alloc+0x2af/0x760 [ 251.763700] ? trace_hardirqs_on+0x10/0x10 [ 251.767954] __d_alloc+0xc8/0xd50 [ 251.771500] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 251.776519] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 251.781534] ? filemap_map_pages+0xca2/0x1990 [ 251.786032] ? trace_hardirqs_on+0x10/0x10 [ 251.790268] ? trace_hardirqs_on+0x10/0x10 [ 251.794526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.800063] ? trace_hardirqs_on+0x10/0x10 [ 251.804300] ? lock_acquire+0x1e4/0x540 [ 251.808274] ? trace_hardirqs_on+0x10/0x10 [ 251.812509] d_alloc+0x96/0x380 [ 251.815798] ? __d_alloc+0xd50/0xd50 [ 251.820005] ? trace_hardirqs_on+0x10/0x10 [ 251.824261] d_alloc_parallel+0x15a/0x1ea0 [ 251.828495] ? lock_acquire+0x1e4/0x540 [ 251.832643] ? is_bpf_text_address+0xae/0x170 [ 251.837138] ? lock_downgrade+0x8f0/0x8f0 [ 251.841289] ? lock_release+0xa30/0xa30 [ 251.845266] ? __d_lookup_rcu+0xaa0/0xaa0 [ 251.849414] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 251.854107] ? lock_acquire+0x1e4/0x540 [ 251.858085] ? __d_lookup+0x593/0x9e0 [ 251.861882] ? lock_downgrade+0x8f0/0x8f0 [ 251.866028] ? lock_release+0xa30/0xa30 [ 251.870018] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 251.875048] ? expand_files.part.8+0x571/0x9c0 [ 251.879635] ? iterate_fd+0x4b0/0x4b0 [ 251.883437] ? __lockdep_init_map+0x105/0x590 [ 251.887935] ? __lockdep_init_map+0x105/0x590 [ 251.892428] ? lockdep_init_map+0x9/0x10 [ 251.896484] ? __init_waitqueue_head+0x9e/0x150 [ 251.901146] ? init_wait_entry+0x1c0/0x1c0 [ 251.905475] ? d_alloc_parallel+0x1ea0/0x1ea0 [ 251.909978] ? lock_release+0xa30/0xa30 [ 251.913960] __lookup_slow+0x1e6/0x540 [ 251.917847] ? vfs_unlink+0x510/0x510 [ 251.921735] ? d_lookup+0x221/0x340 [ 251.925370] lookup_one_len+0x1d8/0x220 [ 251.929342] ? lookup_one_len_unlocked+0x100/0x100 [ 251.934272] ? down_write+0x8f/0x130 [ 251.937988] ? do_mq_open+0x28b/0x960 [ 251.941789] ? down_read+0x1d0/0x1d0 [ 251.945509] do_mq_open+0x2d1/0x960 [ 251.949144] ? mq_create_mount.constprop.12+0x190/0x190 [ 251.954509] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.960045] ? _copy_from_user+0xdf/0x150 [ 251.964213] __x64_sys_mq_open+0x165/0x1f0 [ 251.968557] ? mqueue_evict_inode+0x9d0/0x9d0 [ 251.973151] do_syscall_64+0x1b9/0x820 [ 251.977037] ? finish_task_switch+0x1d3/0x870 [ 251.982314] ? syscall_return_slowpath+0x5e0/0x5e0 [ 251.987243] ? syscall_return_slowpath+0x31d/0x5e0 [ 251.992170] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 251.997187] ? prepare_exit_to_usermode+0x291/0x3b0 [ 252.002287] ? perf_trace_sys_enter+0xb10/0xb10 [ 252.006982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.009053] binder: 24056:24058 got transaction to invalid handle [ 252.011840] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.011851] RIP: 0033:0x455ba9 [ 252.011855] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 [ 252.018157] binder: 24056:24058 transaction failed 29201/-22, size 24738-0 line 2852 [ 252.023281] 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.050963] binder_alloc: binder_alloc_mmap_handler: 24056 20001000-20004000 already mapped failed -16 [ 252.055124] RSP: 002b:00007fd8cb927c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 252.055138] RAX: ffffffffffffffda RBX: 00007fd8cb9286d4 RCX: 0000000000455ba9 [ 252.055146] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000040 [ 252.055154] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 252.055162] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000013 [ 252.055169] R13: 00000000004c0356 R14: 00000000004cfb98 R15: 0000000000000002 [ 252.166331] binder: BINDER_SET_CONTEXT_MGR already set [ 252.177931] binder: 24056:24058 ioctl 40046207 0 returned -16 [ 252.185645] binder: 24056:24061 got transaction to invalid handle [ 252.191980] binder: 24056:24061 transaction failed 29201/-22, size 24738-0 line 2852 05:45:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x689, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:30 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./f%le0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:30 executing program 7 (fault-call:0 fault-nth:3): mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000001000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 252.226714] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.232493] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.290283] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 252.295202] FAULT_INJECTION: forcing a failure. [ 252.295202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.311067] CPU: 1 PID: 24087 Comm: syz-executor7 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 252.319474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.328832] Call Trace: [ 252.331444] dump_stack+0x1c9/0x2b4 [ 252.335080] ? dump_stack_print_info.cold.2+0x52/0x52 [ 252.340274] should_fail.cold.4+0xa/0x11 [ 252.344333] ? d_set_d_op+0x31d/0x410 [ 252.348141] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.353252] ? lock_acquire+0x1e4/0x540 [ 252.357227] ? percpu_ref_tryget_live+0x143/0x440 [ 252.362160] ? lock_downgrade+0x8f0/0x8f0 [ 252.366305] ? lock_release+0xa30/0xa30 [ 252.370278] ? trace_hardirqs_on+0x10/0x10 [ 252.374517] ? kasan_check_read+0x11/0x20 [ 252.378664] ? percpu_ref_tryget_live+0x15b/0x440 [ 252.383510] ? mem_cgroup_id_get_many+0x160/0x160 [ 252.388346] ? get_mem_cgroup_from_mm+0x1ea/0x440 [ 252.393185] ? lock_downgrade+0x8f0/0x8f0 [ 252.397330] ? lock_release+0xa30/0xa30 [ 252.401299] ? __wake_up_common_lock+0x1d0/0x330 [ 252.406054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.411591] ? should_fail+0x246/0xd86 [ 252.415493] ? lock_acquire+0x1e4/0x540 [ 252.419468] ? rcu_read_unlock+0x16/0x70 [ 252.423533] __alloc_pages_nodemask+0x36e/0xdb0 [ 252.428199] ? lock_release+0xa30/0xa30 [ 252.432183] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 252.437193] ? __d_lookup_done+0x30e/0x5b0 [ 252.441433] ? rcu_read_unlock+0x35/0x70 [ 252.445491] ? mem_cgroup_handle_over_high+0x130/0x130 [ 252.450760] ? fs_reclaim_acquire+0x20/0x20 [ 252.455081] ? lock_downgrade+0x8f0/0x8f0 [ 252.459335] ? _raw_spin_unlock+0x22/0x30 [ 252.463482] ? lock_release+0xa30/0xa30 [ 252.467453] ? check_same_owner+0x340/0x340 [ 252.471785] cache_grow_begin+0x91/0x710 [ 252.475847] kmem_cache_alloc+0x689/0x760 [ 252.479994] ? __lockdep_init_map+0x105/0x590 [ 252.484492] ? mqueue_i_callback+0x30/0x30 [ 252.488723] mqueue_alloc_inode+0x1b/0x40 [ 252.492868] alloc_inode+0x63/0x190 [ 252.496491] new_inode_pseudo+0x71/0x1a0 [ 252.500561] ? prune_icache_sb+0x1b0/0x1b0 [ 252.504808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.510352] ? __lookup_slow+0x312/0x540 [ 252.514440] new_inode+0x1c/0x40 [ 252.517805] mqueue_get_inode+0xfd/0xf30 [ 252.521863] ? lock_acquire+0x1e4/0x540 [ 252.525834] ? mqueue_create_attr+0x1ce/0x430 [ 252.530329] ? mqueue_read_file+0x3e0/0x3e0 [ 252.534648] ? kasan_check_read+0x11/0x20 [ 252.538790] ? do_raw_spin_unlock+0xa7/0x2f0 [ 252.543191] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 252.547772] ? kasan_check_write+0x14/0x20 [ 252.552011] ? do_raw_spin_lock+0xc1/0x200 [ 252.556250] mqueue_create_attr+0x1ff/0x430 [ 252.560575] vfs_mkobj+0x337/0x560 [ 252.564111] ? mqueue_get_inode+0xf30/0xf30 [ 252.568432] do_mq_open+0x753/0x960 [ 252.572085] ? mq_create_mount.constprop.12+0x190/0x190 [ 252.577465] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.583003] ? _copy_from_user+0xdf/0x150 [ 252.587156] __x64_sys_mq_open+0x165/0x1f0 [ 252.591392] ? mqueue_evict_inode+0x9d0/0x9d0 [ 252.595896] do_syscall_64+0x1b9/0x820 [ 252.599778] ? syscall_slow_exit_work+0x500/0x500 [ 252.604615] ? syscall_return_slowpath+0x5e0/0x5e0 [ 252.609542] ? syscall_return_slowpath+0x31d/0x5e0 [ 252.614470] ? prepare_exit_to_usermode+0x291/0x3b0 [ 252.619482] ? perf_trace_sys_enter+0xb10/0xb10 [ 252.624149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.628991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.634191] RIP: 0033:0x455ba9 [ 252.637366] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.656642] RSP: 002b:00007fd8cb927c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 252.664348] RAX: ffffffffffffffda RBX: 00007fd8cb9286d4 RCX: 0000000000455ba9 [ 252.671612] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000040 [ 252.678873] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:45:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='threaded\x00', 0x9) [ 252.686138] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000013 [ 252.693406] R13: 00000000004c0356 R14: 00000000004cfb98 R15: 0000000000000003 [ 252.705362] binder: 24075:24086 transaction failed 29201/-28, size 24738-0 line 2967 [ 252.713369] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:31 executing program 7 (fault-call:0 fault-nth:4): mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x300000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 252.748319] binder_alloc: binder_alloc_mmap_handler: 24075 20001000-20004000 already mapped failed -16 [ 252.759908] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 252.766239] binder: BINDER_SET_CONTEXT_MGR already set 05:45:31 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./f\nle0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1800, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:31 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 252.795684] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 252.820908] binder_alloc: 24075: binder_alloc_buf, no vma [ 252.826672] binder: 24075:24095 transaction failed 29189/-3, size 24738-0 line 2967 [ 252.833215] binder: 24075:24086 ioctl 40046207 0 returned -16 [ 252.876163] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 252.906821] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 252.913624] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.928498] binder: undelivered TRANSACTION_ERROR: 29201 05:45:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:31 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x608, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:31 executing program 7: mq_open(&(0x7f0000000040)='.eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000a0000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:31 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi#e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 253.614492] binder: 24129:24130 got transaction to invalid handle [ 253.620812] binder: 24129:24130 transaction failed 29201/-22, size 24738-0 line 2852 [ 253.638706] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 253.650846] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:31 executing program 7: mq_open(&(0x7f0000000040)='/eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x400000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 253.651539] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 253.667693] FAT-fs (loop1): Filesystem has been set read-only [ 253.694222] binder_alloc: binder_alloc_mmap_handler: 24129 20001000-20004000 already mapped failed -16 05:45:31 executing program 7: mq_open(&(0x7f0000000040)='\'/th1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threaded\x00', 0x9) 05:45:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x200000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 253.708075] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 253.722690] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 253.727931] binder: BINDER_SET_CONTEXT_MGR already set 05:45:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:32 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi*e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 253.758096] binder: 24129:24150 got transaction to invalid handle [ 253.764542] binder: 24129:24150 transaction failed 29201/-22, size 24738-0 line 2852 [ 253.820489] binder: 24129:24130 ioctl 40046207 0 returned -16 [ 253.824160] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 253.867734] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.873503] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.875884] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 253.881307] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 253.886604] FAT-fs (loop1): Filesystem has been set read-only 05:45:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:32 executing program 7: mq_open(&(0x7f0000000040)='\'e/h1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8906, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000070000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:32 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi/e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='%hreaded\x00', 0x9) 05:45:32 executing program 7: mq_open(&(0x7f0000000040)='\'et/1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:32 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi0e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 254.506960] binder: 24183:24190 got transaction to invalid handle [ 254.513305] binder: 24183:24190 transaction failed 29201/-22, size 24738-0 line 2852 [ 254.530107] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:32 executing program 7: mq_open(&(0x7f0000000040)='\'eth/em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 254.595035] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 254.602575] FAT-fs (loop1): Filesystem has been set read-only [ 254.605616] binder: BINDER_SET_CONTEXT_MGR already set [ 254.610521] binder_alloc: binder_alloc_mmap_handler: 24183 20001000-20004000 already mapped failed -16 [ 254.624194] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 254.643650] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 254.650407] binder: 24183:24208 got transaction to invalid handle [ 254.659133] binder: 24183:24208 transaction failed 29201/-22, size 24738-0 line 2852 [ 254.673460] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 254.695161] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 254.728504] binder: 24183:24190 ioctl 40046207 0 returned -16 [ 254.758724] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.764257] binder: undelivered TRANSACTION_ERROR: 29201 05:45:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673ff", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:33 executing program 7: mq_open(&(0x7f0000000040)='\'eth1/m0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffdd86, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:33 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fiLe0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040007a000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='\nhreaded\x00', 0x9) 05:45:33 executing program 7: mq_open(&(0x7f0000000040)='\'eth1e/0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8906000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 255.468985] binder: 24243:24244 got transaction to invalid handle [ 255.475374] binder: 24243:24244 transaction failed 29201/-22, size 24738-0 line 2852 [ 255.490488] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:33 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em/vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 255.554215] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 255.562114] FAT-fs (loop1): Filesystem has been set read-only [ 255.576624] binder_alloc: binder_alloc_mmap_handler: 24243 20001000-20004000 already mapped failed -16 [ 255.583514] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:33 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0/mnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfeffffff00000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 255.618847] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 255.636364] binder: BINDER_SET_CONTEXT_MGR already set [ 255.655794] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 255.661189] binder: 24243:24244 ioctl 40046207 0 returned -16 [ 255.689549] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 255.706290] binder: 24243:24263 got transaction to invalid handle [ 255.712672] binder: 24243:24263 transaction failed 29201/-22, size 24738-0 line 2852 [ 255.781171] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.786959] binder: undelivered TRANSACTION_ERROR: 29201 05:45:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:34 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi-e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:34 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0v/net1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='t\nreaded\x00', 0x9) 05:45:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf0ffffffffffff, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000480000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:34 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vm/et1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 256.364909] binder: 24291:24292 transaction failed 29201/-28, size 24738-0 line 2967 [ 256.377293] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 256.386963] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 256.394749] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 256.403784] FAT-fs (loop1): Filesystem has been set read-only 05:45:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x80350000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 256.435491] binder_alloc: binder_alloc_mmap_handler: 24291 20001000-20004000 already mapped failed -16 [ 256.450614] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 256.464659] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 256.477563] binder: BINDER_SET_CONTEXT_MGR already set 05:45:34 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmn/t1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='t%readed\x00', 0x9) [ 256.482979] binder_alloc: 24291: binder_alloc_buf, no vma [ 256.488613] binder: 24291:24307 transaction failed 29189/-3, size 24738-0 line 2967 [ 256.502399] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 256.533582] binder: 24291:24292 ioctl 40046207 0 returned -16 [ 256.609859] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 256.617741] FAT-fs (loop1): Filesystem has been set read-only [ 256.631509] binder: undelivered TRANSACTION_ERROR: 29189 [ 256.637296] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.650131] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 05:45:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:35 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmne/1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:35 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fiue0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x89060000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000070000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='tdreaded\x00', 0x9) 05:45:35 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet/\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x86ddffff, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 257.294942] binder: 24339:24340 transaction failed 29201/-28, size 24738-0 line 2967 [ 257.305078] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 257.319511] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 257.326373] binder_alloc: binder_alloc_mmap_handler: 24339 20001000-20004000 already mapped failed -16 [ 257.339757] binder: BINDER_SET_CONTEXT_MGR already set [ 257.364251] binder: 24339:24340 ioctl 40046207 0 returned -16 [ 257.376626] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 257.377453] binder_alloc: 24339: binder_alloc_buf, no vma [ 257.384552] FAT-fs (loop1): Filesystem has been set read-only [ 257.390143] binder: 24339:24356 transaction failed 29189/-3, size 24738-0 line 2967 [ 257.400507] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:35 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)="7265697365726673e0", &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:35 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi+e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 257.414849] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 257.492681] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 257.506552] binder: undelivered TRANSACTION_ERROR: 29189 [ 257.513358] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.523702] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 257.566141] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 05:45:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:36 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x80ffffff, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\a', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='th\neaded\x00', 0x9) 05:45:36 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi.e0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000740000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 258.221472] binder: 24404:24410 got transaction to invalid handle [ 258.227802] binder: 24404:24410 transaction failed 29201/-22, size 24738-0 line 2852 [ 258.242263] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 258.262732] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 05:45:36 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffca88, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 258.270620] FAT-fs (loop1): Filesystem has been set read-only [ 258.284340] binder_alloc: binder_alloc_mmap_handler: 24404 20001000-20004000 already mapped failed -16 [ 258.306902] binder: BINDER_SET_CONTEXT_MGR already set 05:45:36 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='th%eaded\x00', 0x9) [ 258.322063] binder: 24404:24410 ioctl 40046207 0 returned -16 [ 258.328774] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 258.340141] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 258.343462] binder: 24404:24416 got transaction to invalid handle [ 258.355450] binder: 24404:24416 transaction failed 29201/-22, size 24738-0 line 2852 05:45:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:36 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fi\ne0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000010000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd00000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 258.427090] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 258.447233] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.453040] binder: undelivered TRANSACTION_ERROR: 29201 05:45:36 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:36 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 258.471959] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 05:45:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 258.534486] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 258.544976] binder: 24448:24450 transaction failed 29201/-28, size 24738-0 line 2967 [ 258.576467] FAULT_INJECTION: forcing a failure. [ 258.576467] name failslab, interval 1, probability 0, space 0, times 0 [ 258.587784] CPU: 0 PID: 24462 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 258.596183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.605665] Call Trace: [ 258.608275] dump_stack+0x1c9/0x2b4 [ 258.611912] ? dump_stack_print_info.cold.2+0x52/0x52 [ 258.617168] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 258.622190] should_fail.cold.4+0xa/0x11 [ 258.626250] ? trace_hardirqs_on+0x10/0x10 [ 258.630584] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.635755] ? lock_acquire+0x1e4/0x540 [ 258.639753] ? trace_hardirqs_on+0x10/0x10 [ 258.643991] ? trace_hardirqs_on+0x10/0x10 [ 258.648504] ? find_get_entries_tag+0x1410/0x1410 [ 258.653526] ? lock_acquire+0x1e4/0x540 [ 258.657497] ? fs_reclaim_acquire+0x20/0x20 [ 258.661928] ? lock_downgrade+0x8f0/0x8f0 [ 258.666087] ? trace_hardirqs_on+0x10/0x10 [ 258.670378] ? check_same_owner+0x340/0x340 [ 258.674707] ? shrink_dcache_sb+0x350/0x350 [ 258.679207] ? rcu_note_context_switch+0x730/0x730 [ 258.684134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.689687] __should_failslab+0x124/0x180 [ 258.689949] binder_alloc: binder_alloc_mmap_handler: 24448 20001000-20004000 already mapped failed -16 [ 258.693939] should_failslab+0x9/0x14 [ 258.693957] kmem_cache_alloc+0x2af/0x760 [ 258.693969] ? may_expand_vm+0x1eb/0x8d0 [ 258.693985] ? copy_vma+0xe20/0xe20 [ 258.718195] binder: BINDER_SET_CONTEXT_MGR already set [ 258.719025] __split_vma+0x122/0x810 [ 258.727999] ? _parse_integer+0x13b/0x190 [ 258.729849] binder_alloc: 24448: binder_alloc_buf, no vma [ 258.732158] ? find_vma_prev+0x140/0x140 [ 258.732171] ? find_vma+0x34/0x190 [ 258.732184] do_munmap+0x2fe/0xf90 [ 258.732205] ? __check_object_size+0x9d/0x5f2 [ 258.737774] binder: 24448:24466 transaction failed 29189/-3, size 24738-0 line 2967 [ 258.742494] mmap_region+0x798/0x1d10 [ 258.742510] ? lock_acquire+0x1e4/0x540 [ 258.742526] ? __x64_sys_brk+0x7a0/0x7a0 [ 258.773638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.775095] binder: 24448:24450 ioctl 40046207 0 returned -16 [ 258.779182] ? pid_task+0x115/0x200 [ 258.779195] ? find_vpid+0xf0/0xf0 [ 258.779213] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 258.779227] ? mpx_unmapped_area_check+0xd8/0x108 [ 258.779249] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 258.807338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 258.812893] ? arch_get_unmapped_area+0x770/0x770 [ 258.817751] ? lock_acquire+0x1e4/0x540 [ 258.821750] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 258.824216] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 258.826778] ? cap_mmap_addr+0x52/0x130 [ 258.826797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.826810] ? security_mmap_addr+0x80/0xa0 [ 258.826829] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.834631] FAT-fs (loop1): Filesystem has been set read-only [ 258.838594] ? get_unmapped_area+0x292/0x3b0 [ 258.838608] do_mmap+0xa10/0x1220 [ 258.838626] ? mmap_region+0x1d10/0x1d10 [ 258.853159] binder: undelivered TRANSACTION_ERROR: 29189 [ 258.854003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.863454] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.864274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.864292] ? vmacache_update+0x10e/0x140 [ 258.898039] __x64_sys_remap_file_pages+0x884/0xb10 [ 258.903073] ? __ia32_sys_remap_file_pages+0xaf0/0xaf0 [ 258.908364] do_syscall_64+0x1b9/0x820 [ 258.911758] binder: 24473:24474 transaction failed 29201/-28, size 24738-0 line 2967 [ 258.912252] ? finish_task_switch+0x1d3/0x870 05:45:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:37 executing program 7: mq_open(&(0x7f0000000040)="2765746831656d30766d6e657431fe", 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000740000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8847000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:37 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 258.912270] ? syscall_return_slowpath+0x5e0/0x5e0 [ 258.912284] ? syscall_return_slowpath+0x31d/0x5e0 [ 258.912301] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 258.940112] ? prepare_exit_to_usermode+0x291/0x3b0 [ 258.945226] ? perf_trace_sys_enter+0xb10/0xb10 [ 258.949999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.954863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.955666] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 258.960051] RIP: 0033:0x455ba9 [ 258.960054] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.971957] binder_alloc: binder_alloc_mmap_handler: 24473 20001000-20004000 already mapped failed -16 [ 258.990265] RSP: 002b:00007fdb8abbfc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 258.990279] RAX: ffffffffffffffda RBX: 00007fdb8abc06d4 RCX: 0000000000455ba9 [ 258.990285] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020002000 05:45:37 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 258.990291] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 258.990298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 258.990304] R13: 00000000004c0bb7 R14: 00000000004d0af8 R15: 0000000000000000 [ 259.054185] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 259.065733] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 259.069942] binder_alloc: 24473: binder_alloc_buf, no vma [ 259.075302] FAULT_INJECTION: forcing a failure. [ 259.075302] name failslab, interval 1, probability 0, space 0, times 0 [ 259.080406] binder: 24473:24479 transaction failed 29189/-3, size 24738-0 line 2967 [ 259.091610] CPU: 1 PID: 24486 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 259.107919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.117374] Call Trace: [ 259.119974] dump_stack+0x1c9/0x2b4 [ 259.123604] ? dump_stack_print_info.cold.2+0x52/0x52 [ 259.128794] ? __kernel_text_address+0xd/0x40 [ 259.133288] ? unwind_get_return_address+0x61/0xa0 [ 259.138225] should_fail.cold.4+0xa/0x11 [ 259.142289] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.147395] ? save_stack+0xa9/0xd0 [ 259.151024] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.156561] ? uprobe_mmap+0x198/0xd20 [ 259.160449] ? __vma_adjust+0x6c3/0x1840 [ 259.164521] ? lock_downgrade+0x8f0/0x8f0 [ 259.168668] ? uprobe_apply+0x140/0x140 [ 259.172639] ? lock_release+0xa30/0xa30 [ 259.176716] ? check_same_owner+0x340/0x340 [ 259.181037] ? lock_acquire+0x1e4/0x540 [ 259.185180] ? fs_reclaim_acquire+0x20/0x20 [ 259.189504] ? lock_downgrade+0x8f0/0x8f0 [ 259.193649] ? up_read+0x110/0x110 [ 259.197187] ? check_same_owner+0x340/0x340 [ 259.201856] ? __vma_link_rb+0x26d/0x370 [ 259.205914] ? rcu_note_context_switch+0x730/0x730 [ 259.210842] __should_failslab+0x124/0x180 [ 259.215075] should_failslab+0x9/0x14 [ 259.218882] kmem_cache_alloc+0x2af/0x760 [ 259.223037] __split_vma+0x122/0x810 [ 259.226751] ? _parse_integer+0x13b/0x190 [ 259.230899] ? find_vma_prev+0x140/0x140 [ 259.234953] ? vmacache_update+0x10e/0x140 [ 259.239183] ? find_vma+0x34/0x190 [ 259.242724] do_munmap+0x377/0xf90 [ 259.246262] ? __check_object_size+0x9d/0x5f2 [ 259.250755] mmap_region+0x798/0x1d10 [ 259.254551] ? lock_acquire+0x1e4/0x540 [ 259.258524] ? __x64_sys_brk+0x7a0/0x7a0 [ 259.262580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.268113] ? pid_task+0x115/0x200 [ 259.271739] ? find_vpid+0xf0/0xf0 [ 259.275278] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 259.280117] ? mpx_unmapped_area_check+0xd8/0x108 [ 259.284968] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 259.290415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 259.295952] ? arch_get_unmapped_area+0x770/0x770 [ 259.300791] ? lock_acquire+0x1e4/0x540 [ 259.304765] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 259.309776] ? cap_mmap_addr+0x52/0x130 [ 259.313772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.319303] ? security_mmap_addr+0x80/0xa0 [ 259.323621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.329152] ? get_unmapped_area+0x292/0x3b0 [ 259.333556] do_mmap+0xa10/0x1220 [ 259.337011] ? mmap_region+0x1d10/0x1d10 [ 259.341072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.346610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.352141] ? vmacache_update+0x10e/0x140 [ 259.356375] __x64_sys_remap_file_pages+0x884/0xb10 [ 259.361916] ? __ia32_sys_remap_file_pages+0xaf0/0xaf0 [ 259.367213] do_syscall_64+0x1b9/0x820 [ 259.371103] ? finish_task_switch+0x1d3/0x870 [ 259.375598] ? syscall_return_slowpath+0x5e0/0x5e0 [ 259.380715] ? syscall_return_slowpath+0x31d/0x5e0 [ 259.385642] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 259.390659] ? prepare_exit_to_usermode+0x291/0x3b0 [ 259.395669] ? perf_trace_sys_enter+0xb10/0xb10 [ 259.400333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.405183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.410369] RIP: 0033:0x455ba9 05:45:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='thr%aded\x00', 0x9) 05:45:37 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 259.413680] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.433118] RSP: 002b:00007fdb8abbfc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 259.440933] RAX: ffffffffffffffda RBX: 00007fdb8abc06d4 RCX: 0000000000455ba9 [ 259.448195] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020002000 [ 259.455588] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 259.462850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 259.470121] R13: 00000000004c0bb7 R14: 00000000004d0af8 R15: 0000000000000001 05:45:37 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fil\n0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:37 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb00000000000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000120000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) [ 259.540786] binder: undelivered TRANSACTION_ERROR: 29189 [ 259.549275] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.564014] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 259.568897] FAULT_INJECTION: forcing a failure. [ 259.568897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.571912] FAT-fs (loop1): Filesystem has been set read-only 05:45:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 259.583681] CPU: 0 PID: 24498 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 259.583691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.583695] Call Trace: [ 259.583740] dump_stack+0x1c9/0x2b4 [ 259.583760] ? dump_stack_print_info.cold.2+0x52/0x52 [ 259.618743] should_fail.cold.4+0xa/0x11 [ 259.622827] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.627940] ? lock_acquire+0x1e4/0x540 [ 259.631913] ? percpu_ref_tryget_live+0x143/0x440 [ 259.636765] ? lock_downgrade+0x8f0/0x8f0 05:45:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='thr\naded\x00', 0x9) [ 259.638606] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 259.640918] ? lock_release+0xa30/0xa30 [ 259.640932] ? trace_hardirqs_on+0x10/0x10 [ 259.640951] ? vma_interval_tree_remove+0x8b5/0x13f0 [ 259.662009] ? do_raw_spin_lock+0xc1/0x200 [ 259.666246] ? percpu_ref_tryget_live+0x15b/0x440 [ 259.671092] ? mem_cgroup_id_get_many+0x160/0x160 [ 259.675938] ? get_mem_cgroup_from_mm+0x1ea/0x440 [ 259.680961] ? lock_downgrade+0x8f0/0x8f0 [ 259.685378] ? lock_release+0xa30/0xa30 05:45:37 executing program 7: mq_open(&(0x7f0000000040)="2765746831656d30766d6e657431ff", 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 259.689351] ? __save_stack_trace+0x8d/0xf0 [ 259.693670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.699214] ? lock_acquire+0x1e4/0x540 [ 259.703185] ? rcu_read_unlock+0x16/0x70 [ 259.707248] __alloc_pages_nodemask+0x36e/0xdb0 [ 259.711913] ? lock_release+0xa30/0xa30 [ 259.715975] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 259.720987] ? uprobe_apply+0x140/0x140 [ 259.724960] ? rcu_read_unlock+0x35/0x70 [ 259.729016] ? mem_cgroup_handle_over_high+0x130/0x130 [ 259.734290] ? fs_reclaim_acquire+0x20/0x20 [ 259.738615] ? lock_downgrade+0x8f0/0x8f0 [ 259.742771] ? lock_release+0xa30/0xa30 [ 259.746745] ? up_read+0x110/0x110 [ 259.750293] ? check_same_owner+0x340/0x340 [ 259.754641] cache_grow_begin+0x91/0x710 [ 259.758716] kmem_cache_alloc+0x689/0x760 [ 259.762871] __split_vma+0x122/0x810 [ 259.766590] ? _parse_integer+0x13b/0x190 [ 259.770755] ? find_vma_prev+0x140/0x140 [ 259.774825] ? vmacache_update+0x10e/0x140 [ 259.779071] ? find_vma+0x34/0x190 [ 259.782614] do_munmap+0x377/0xf90 [ 259.786158] ? __check_object_size+0x9d/0x5f2 05:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88470000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 259.786909] binder: BINDER_SET_CONTEXT_MGR already set [ 259.790651] mmap_region+0x798/0x1d10 [ 259.790668] ? lock_acquire+0x1e4/0x540 [ 259.790682] ? __x64_sys_brk+0x7a0/0x7a0 [ 259.790707] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.813308] ? pid_task+0x115/0x200 [ 259.816941] ? find_vpid+0xf0/0xf0 [ 259.820486] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 259.825341] ? mpx_unmapped_area_check+0xd8/0x108 [ 259.830198] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 259.835657] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 259.836938] binder: 24506:24507 ioctl 40046207 0 returned -16 [ 259.841196] ? arch_get_unmapped_area+0x770/0x770 [ 259.841212] ? lock_acquire+0x1e4/0x540 [ 259.841233] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 259.841247] ? cap_mmap_addr+0x52/0x130 [ 259.841266] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.870403] ? security_mmap_addr+0x80/0xa0 [ 259.874741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.880285] ? get_unmapped_area+0x292/0x3b0 [ 259.884802] do_mmap+0xa10/0x1220 [ 259.888265] ? mmap_region+0x1d10/0x1d10 [ 259.892335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.897877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.903419] ? vmacache_update+0x10e/0x140 [ 259.905223] binder_alloc: 24473: binder_alloc_buf, no vma [ 259.907668] __x64_sys_remap_file_pages+0x884/0xb10 [ 259.907687] ? __ia32_sys_remap_file_pages+0xaf0/0xaf0 [ 259.907712] do_syscall_64+0x1b9/0x820 [ 259.913454] binder: 24506:24507 transaction failed 29189/-3, size 24738-0 line 2967 [ 259.918489] ? finish_task_switch+0x1d3/0x870 [ 259.918505] ? syscall_return_slowpath+0x5e0/0x5e0 [ 259.918523] ? syscall_return_slowpath+0x31d/0x5e0 [ 259.949745] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 259.954771] ? prepare_exit_to_usermode+0x291/0x3b0 [ 259.961444] ? perf_trace_sys_enter+0xb10/0xb10 [ 259.966129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.970983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.976193] RIP: 0033:0x455ba9 05:45:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:38 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:38 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:38 executing program 7: mq_open(&(0x7f0000000040)="2765746831656d30766d6e65743102", 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 259.979373] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.998672] RSP: 002b:00007fdb8abbfc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 260.006412] RAX: ffffffffffffffda RBX: 00007fdb8abc06d4 RCX: 0000000000455ba9 [ 260.009486] binder_alloc: binder_alloc_mmap_handler: 24506 20001000-20004000 already mapped failed -16 [ 260.013682] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020002000 [ 260.013702] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 260.013710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 260.013717] R13: 00000000004c0bb7 R14: 00000000004d0af8 R15: 0000000000000002 [ 260.053179] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 260.090133] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 260.103711] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 260.103827] binder_alloc: 24506: binder_alloc_buf, no vma [ 260.118412] binder: 24506:24524 transaction failed 29189/-3, size 24738-0 line 2967 05:45:38 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./fil%0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:38 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffa888, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:38 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000680000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 260.139933] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 260.158321] binder: undelivered TRANSACTION_ERROR: 29189 [ 260.164656] binder: undelivered TRANSACTION_ERROR: 29189 [ 260.207607] FAULT_INJECTION: forcing a failure. [ 260.207607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.218676] binder: 24542:24555 got transaction to invalid handle [ 260.219507] CPU: 1 PID: 24552 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 260.225733] binder: 24542:24555 transaction failed 29201/-22, size 24738-0 line 2852 [ 260.234083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.234090] Call Trace: [ 260.234115] dump_stack+0x1c9/0x2b4 [ 260.234140] ? dump_stack_print_info.cold.2+0x52/0x52 [ 260.246040] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 260.251377] should_fail.cold.4+0xa/0x11 [ 260.251396] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.251419] ? lock_acquire+0x1e4/0x540 [ 260.253993] FAT-fs (loop1): Filesystem has been set read-only [ 260.257599] ? find_get_entry+0xa6d/0x1120 [ 260.257612] ? lock_downgrade+0x8f0/0x8f0 [ 260.257630] ? lock_release+0xa30/0xa30 [ 260.281288] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 260.283676] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 260.283691] ? gup_pgd_range+0x40f/0x3410 [ 260.283708] ? lock_acquire+0x1e4/0x540 [ 260.283726] ? fs_reclaim_acquire+0x20/0x20 [ 260.292226] binder_alloc: binder_alloc_mmap_handler: 24542 20001000-20004000 already mapped failed -16 [ 260.293841] ? lock_downgrade+0x8f0/0x8f0 [ 260.293860] ? check_same_owner+0x340/0x340 [ 260.293874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 260.293892] ? rcu_note_context_switch+0x730/0x730 [ 260.304303] binder: BINDER_SET_CONTEXT_MGR already set [ 260.309786] __alloc_pages_nodemask+0x36e/0xdb0 [ 260.309803] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 260.309819] ? trace_hardirqs_on+0x10/0x10 [ 260.309838] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 260.335316] binder: 24542:24559 got transaction to invalid handle [ 260.336780] ? percpu_counter_add_batch+0xf2/0x150 [ 260.336797] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 260.336817] ? __vm_enough_memory+0x590/0x980 [ 260.341117] binder: 24542:24559 transaction failed 29201/-22, size 24738-0 line 2852 [ 260.345483] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.345503] alloc_pages_vma+0xdd/0x540 [ 260.367739] binder: 24542:24555 ioctl 40046207 0 returned -16 [ 260.370319] shmem_alloc_page+0xa8/0x190 [ 260.370333] ? shmem_swapin+0x230/0x230 [ 260.370347] ? __lookup_slow+0x1e6/0x540 [ 260.370371] shmem_alloc_and_acct_page+0x1f1/0x820 [ 260.402980] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.408079] ? shmem_getattr+0x2c0/0x2c0 [ 260.408096] ? lock_downgrade+0x8f0/0x8f0 [ 260.408115] ? lock_release+0xa30/0xa30 [ 260.422486] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.423473] shmem_getpage_gfp+0x6ea/0x3ec0 [ 260.423494] ? shmem_writepage+0x13a0/0x13a0 [ 260.472228] ? trace_hardirqs_on+0x10/0x10 [ 260.476741] ? trace_hardirqs_on+0x10/0x10 [ 260.480977] ? trace_hardirqs_on+0x10/0x10 [ 260.485212] ? __d_alloc+0xc8/0xd50 [ 260.488834] ? d_alloc+0x96/0x380 [ 260.492284] ? d_alloc_parallel+0x15a/0x1ea0 [ 260.496702] ? lookup_open+0x54f/0x1b40 [ 260.500672] ? path_openat+0x246e/0x5620 [ 260.504727] ? do_filp_open+0x255/0x380 [ 260.508693] ? do_sys_open+0x584/0x720 [ 260.512581] ? do_syscall_64+0x1b9/0x820 [ 260.517162] ? trace_hardirqs_on+0x10/0x10 [ 260.521400] ? trace_hardirqs_on+0x10/0x10 [ 260.525636] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 260.530401] ? __page_frag_cache_drain+0x1f0/0x1f0 [ 260.535333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.540869] ? xas_start+0x23d/0x740 [ 260.544581] ? xas_find_tagged+0x1440/0x1440 [ 260.548990] ? trace_hardirqs_on+0x10/0x10 [ 260.553227] ? lock_acquire+0x1e4/0x540 [ 260.557217] ? mem_cgroup_id_get_many+0x160/0x160 [ 260.562067] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.567711] ? xas_load+0x43/0x1e0 [ 260.571252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.576790] ? filemap_map_pages+0xca2/0x1990 [ 260.581282] ? lock_downgrade+0x8f0/0x8f0 [ 260.585431] ? xa_set_tag+0x40/0x40 [ 260.589052] ? trace_hardirqs_on+0x10/0x10 [ 260.593291] ? filemap_map_pages+0xccb/0x1990 [ 260.597787] ? kasan_check_read+0x11/0x20 [ 260.601934] ? find_get_entries_tag+0x1410/0x1410 [ 260.606774] ? kasan_check_write+0x14/0x20 [ 260.611006] ? do_raw_spin_lock+0xc1/0x200 [ 260.615239] ? follow_page_pte+0x4af/0x1810 [ 260.619564] ? undo_dev_pagemap+0x440/0x440 [ 260.623882] ? __inode_attach_wb+0x273/0x13e0 [ 260.628391] ? trace_hardirqs_on+0x10/0x10 [ 260.632632] shmem_fault+0x25f/0x960 [ 260.636347] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 260.641620] ? __rb_insert_augmented+0x3b6/0x18b0 [ 260.646462] ? trace_hardirqs_on+0x10/0x10 [ 260.650689] ? vmacache_find+0x2e0/0x2e0 [ 260.654746] ? rb_insert_color_cached+0x14c0/0x14c0 [ 260.659759] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 260.664341] __do_fault+0xee/0x450 [ 260.667887] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 260.672999] ? pmd_val+0x88/0x100 [ 260.676448] ? add_mm_counter_fast+0xd0/0xd0 [ 260.680851] ? pmd_val+0x88/0x100 [ 260.684300] ? add_mm_counter_fast+0xd0/0xd0 [ 260.688720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.694257] __handle_mm_fault+0x2cc1/0x4480 [ 260.698843] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 260.703772] ? follow_page_mask+0x188/0x1d90 [ 260.708382] ? lock_acquire+0x1e4/0x540 [ 260.712375] ? handle_mm_fault+0x417/0xc80 [ 260.716606] ? lock_downgrade+0x8f0/0x8f0 [ 260.720751] ? lock_release+0xa30/0xa30 [ 260.724731] ? lock_downgrade+0x8f0/0x8f0 [ 260.728887] ? mem_cgroup_from_task+0xcb/0x1f0 [ 260.733464] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 260.738216] ? uprobe_apply+0x140/0x140 [ 260.742193] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.747741] handle_mm_fault+0x53e/0xc80 [ 260.751811] ? __handle_mm_fault+0x4480/0x4480 [ 260.756387] ? check_same_owner+0x340/0x340 [ 260.760708] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 260.765733] __get_user_pages+0x823/0x1ad0 [ 260.769973] ? follow_page_mask+0x1d90/0x1d90 [ 260.774468] ? __x64_sys_brk+0x7a0/0x7a0 [ 260.778527] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.784064] ? lock_acquire+0x1e4/0x540 [ 260.788033] ? __mm_populate+0x362/0x520 [ 260.792109] ? lock_release+0xa30/0xa30 [ 260.796256] ? check_same_owner+0x340/0x340 [ 260.800574] ? rcu_note_context_switch+0x730/0x730 [ 260.805517] populate_vma_page_range+0x2db/0x3d0 [ 260.810359] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 260.815283] ? find_vma+0x34/0x190 [ 260.818906] __mm_populate+0x2ce/0x520 [ 260.822800] ? populate_vma_page_range+0x3d0/0x3d0 [ 260.827742] __x64_sys_remap_file_pages+0xaf5/0xb10 [ 260.832761] ? __ia32_sys_remap_file_pages+0xaf0/0xaf0 [ 260.838060] do_syscall_64+0x1b9/0x820 [ 260.841942] ? finish_task_switch+0x1d3/0x870 [ 260.846440] ? syscall_return_slowpath+0x5e0/0x5e0 [ 260.851370] ? syscall_return_slowpath+0x31d/0x5e0 [ 260.856299] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.861315] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.866333] ? perf_trace_sys_enter+0xb10/0xb10 [ 260.871017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.875866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.881049] RIP: 0033:0x455ba9 [ 260.884247] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:45:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='thre\nded\x00', 0x9) 05:45:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000030000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 260.903692] RSP: 002b:00007fdb8abbfc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 260.911403] RAX: ffffffffffffffda RBX: 00007fdb8abc06d4 RCX: 0000000000455ba9 [ 260.918760] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020002000 [ 260.926024] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 260.933297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 260.940652] R13: 00000000004c0bb7 R14: 00000000004d0af8 R15: 0000000000000003 05:45:39 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) 05:45:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x300, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) [ 260.970570] binder: 24562:24565 got transaction to invalid handle [ 260.973979] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 260.976996] binder: 24562:24565 transaction failed 29201/-22, size 24738-0 line 2852 [ 260.998401] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 261.007605] binder_alloc: binder_alloc_mmap_handler: 24562 20001000-20004000 already mapped failed -16 05:45:39 executing program 0 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:39 executing program 7: mq_open(&(0x7f0000000040)='\'eth1em0vmnet1\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 261.042781] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 261.049419] binder: BINDER_SET_CONTEXT_MGR already set [ 261.050682] FAT-fs (loop1): Filesystem has been set read-only [ 261.062309] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 261.079205] binder: 24562:24569 got transaction to invalid handle 05:45:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1400, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 261.085632] binder: 24562:24569 transaction failed 29201/-22, size 24738-0 line 2852 [ 261.086465] binder: 24562:24565 ioctl 40046207 0 returned -16 [ 261.093700] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 261.121929] FAULT_INJECTION: forcing a failure. [ 261.121929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.133820] CPU: 1 PID: 24586 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 261.142224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.144384] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 261.151575] Call Trace: [ 261.151602] dump_stack+0x1c9/0x2b4 [ 261.151621] ? dump_stack_print_info.cold.2+0x52/0x52 [ 261.151636] ? trace_hardirqs_on+0x10/0x10 [ 261.151658] should_fail.cold.4+0xa/0x11 [ 261.169852] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.170865] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 261.170882] ? lock_acquire+0x1e4/0x540 [ 261.170901] ? find_get_entry+0xa6d/0x1120 [ 261.175495] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.179249] ? lock_downgrade+0x8f0/0x8f0 [ 261.179267] ? lock_release+0xa30/0xa30 [ 261.179281] ? trace_hardirqs_on+0x10/0x10 [ 261.179300] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 261.220745] ? gup_pgd_range+0x40f/0x3410 [ 261.224905] ? lock_acquire+0x1e4/0x540 [ 261.228884] ? fs_reclaim_acquire+0x20/0x20 [ 261.233216] ? lock_downgrade+0x8f0/0x8f0 [ 261.237362] ? check_same_owner+0x340/0x340 [ 261.241685] ? rcu_note_context_switch+0x730/0x730 [ 261.246613] __alloc_pages_nodemask+0x36e/0xdb0 [ 261.251280] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 261.256296] ? trace_hardirqs_on+0x10/0x10 [ 261.260522] ? xas_store+0x52f/0x1720 [ 261.264323] ? shmem_add_to_page_cache+0xd71/0x1450 [ 261.269337] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 261.274360] ? percpu_counter_add_batch+0xf2/0x150 [ 261.279288] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 261.284311] ? __vm_enough_memory+0x590/0x980 [ 261.288810] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 261.294348] alloc_pages_vma+0xdd/0x540 [ 261.298322] shmem_alloc_page+0xa8/0x190 [ 261.302378] ? shmem_swapin+0x230/0x230 [ 261.306360] shmem_alloc_and_acct_page+0x1f1/0x820 [ 261.311287] ? shmem_getattr+0x2c0/0x2c0 [ 261.315342] ? do_raw_spin_unlock+0xa7/0x2f0 [ 261.319745] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 261.324325] ? kasan_check_write+0x14/0x20 [ 261.328559] shmem_getpage_gfp+0x6ea/0x3ec0 [ 261.332886] ? shmem_writepage+0x13a0/0x13a0 [ 261.337306] ? trace_hardirqs_on+0x10/0x10 [ 261.341537] ? trace_hardirqs_on+0x10/0x10 [ 261.345771] ? trace_hardirqs_on+0x10/0x10 [ 261.349999] ? save_stack+0xa9/0xd0 [ 261.353624] ? trace_hardirqs_on+0x10/0x10 [ 261.357851] ? __d_alloc+0xc8/0xd50 [ 261.361472] ? d_alloc+0x96/0x380 [ 261.364919] ? d_alloc_parallel+0x15a/0x1ea0 [ 261.369322] ? lookup_open+0x54f/0x1b40 [ 261.373288] ? path_openat+0x246e/0x5620 [ 261.377346] ? do_filp_open+0x255/0x380 [ 261.381322] ? do_sys_open+0x584/0x720 [ 261.385205] ? do_syscall_64+0x1b9/0x820 [ 261.389265] ? trace_hardirqs_on+0x10/0x10 [ 261.393499] ? trace_hardirqs_on+0x10/0x10 [ 261.397736] ? lock_acquire+0x1e4/0x540 [ 261.401706] ? alloc_set_pte+0x1133/0x1790 [ 261.405941] ? lock_release+0xa30/0xa30 [ 261.409910] ? xas_find_tagged+0x1440/0x1440 [ 261.414315] ? trace_hardirqs_on+0x10/0x10 [ 261.418545] ? pmd_val+0x88/0x100 [ 261.421994] ? add_mm_counter_fast+0xd0/0xd0 [ 261.426403] ? kasan_check_write+0x14/0x20 [ 261.430719] ? do_raw_spin_lock+0xc1/0x200 [ 261.434966] ? _raw_spin_lock+0x32/0x40 [ 261.438939] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.444472] ? alloc_set_pte+0xaf6/0x1790 [ 261.448623] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.454162] ? filemap_map_pages+0xca2/0x1990 [ 261.458742] ? lock_downgrade+0x8f0/0x8f0 [ 261.462884] ? unlock_page+0x1d1/0x2c0 [ 261.466766] ? xa_set_tag+0x40/0x40 [ 261.470389] ? lock_page_memcg+0xf2/0x300 [ 261.474539] ? filemap_map_pages+0xccb/0x1990 [ 261.479035] ? find_get_entries_tag+0x1410/0x1410 [ 261.483897] ? kasan_check_write+0x14/0x20 [ 261.488127] ? do_raw_spin_lock+0xc1/0x200 [ 261.492373] ? follow_page_pte+0x4af/0x1810 [ 261.498603] ? undo_dev_pagemap+0x440/0x440 [ 261.502944] ? __inode_attach_wb+0x273/0x13e0 [ 261.507442] ? lock_release+0xa30/0xa30 [ 261.511418] shmem_fault+0x25f/0x960 [ 261.515237] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 261.520511] ? alloc_set_pte+0xaf6/0x1790 [ 261.524684] ? lock_downgrade+0x8f0/0x8f0 [ 261.528913] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 261.533491] ? __handle_mm_fault+0x3637/0x4480 [ 261.538068] __do_fault+0xee/0x450 [ 261.541608] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 261.546706] ? do_raw_spin_unlock+0xa7/0x2f0 [ 261.551198] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 261.555778] ? add_mm_counter_fast+0xd0/0xd0 [ 261.560188] __handle_mm_fault+0x2cc1/0x4480 [ 261.564612] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 261.569456] ? follow_page_mask+0x188/0x1d90 [ 261.573869] ? lock_acquire+0x1e4/0x540 [ 261.577839] ? handle_mm_fault+0x417/0xc80 [ 261.582075] ? lock_downgrade+0x8f0/0x8f0 [ 261.586223] ? lock_release+0xa30/0xa30 [ 261.590191] ? lock_downgrade+0x8f0/0x8f0 [ 261.594345] ? mem_cgroup_from_task+0xcb/0x1f0 [ 261.598923] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 261.603679] ? uprobe_apply+0x140/0x140 [ 261.607650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.613191] handle_mm_fault+0x53e/0xc80 [ 261.617253] ? __handle_mm_fault+0x4480/0x4480 [ 261.621831] ? check_same_owner+0x340/0x340 [ 261.626158] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 261.631179] __get_user_pages+0x823/0x1ad0 [ 261.635517] ? follow_page_mask+0x1d90/0x1d90 [ 261.640009] ? __x64_sys_brk+0x7a0/0x7a0 [ 261.644067] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.649631] ? lock_acquire+0x1e4/0x540 [ 261.653603] ? __mm_populate+0x362/0x520 [ 261.657668] ? lock_release+0xa30/0xa30 [ 261.661638] ? check_same_owner+0x340/0x340 [ 261.665954] ? rcu_note_context_switch+0x730/0x730 [ 261.670885] populate_vma_page_range+0x2db/0x3d0 [ 261.675641] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 261.680564] ? find_vma+0x34/0x190 [ 261.684097] __mm_populate+0x2ce/0x520 [ 261.687980] ? populate_vma_page_range+0x3d0/0x3d0 [ 261.692916] __x64_sys_remap_file_pages+0xaf5/0xb10 [ 261.697932] ? __ia32_sys_remap_file_pages+0xaf0/0xaf0 [ 261.703207] do_syscall_64+0x1b9/0x820 [ 261.707085] ? finish_task_switch+0x1d3/0x870 [ 261.711578] ? syscall_return_slowpath+0x5e0/0x5e0 [ 261.716505] ? syscall_return_slowpath+0x31d/0x5e0 [ 261.721430] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 261.726445] ? prepare_exit_to_usermode+0x291/0x3b0 [ 261.731455] ? perf_trace_sys_enter+0xb10/0xb10 [ 261.736118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.740961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.746148] RIP: 0033:0x455ba9 [ 261.749327] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.768592] RSP: 002b:00007fdb8abbfc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 261.776297] RAX: ffffffffffffffda RBX: 00007fdb8abc06d4 RCX: 0000000000455ba9 [ 261.783561] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020002000 05:45:40 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./filed\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@resize_auto='resize=auto', 0x2c}]}) 05:45:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400012000000000000000000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) 05:45:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='thre%ded\x00', 0x9) 05:45:40 executing program 0 (fault-call:3 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 05:45:40 executing program 7: mq_open(&(0x7f0000000040)="2765746831656d30766d6e65743104", 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x3}) [ 261.790820] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 261.798090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 261.805349] R13: 00000000004c0bb7 R14: 00000000004d0af8 R15: 0000000000000004 [ 261.871993] binder: 24596:24598 got transaction to invalid handle [ 261.878432] binder: 24596:24598 transaction failed 29201/-22, size 24738-0 line 2852 [ 261.889372] FAULT_INJECTION: forcing a failure. [ 261.889372] name failslab, interval 1, probability 0, space 0, times 0 [ 261.900600] CPU: 1 PID: 24604 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 261.909003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.918361] Call Trace: [ 261.918487] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 261.920951] dump_stack+0x1c9/0x2b4 [ 261.920968] ? dump_stack_print_info.cold.2+0x52/0x52 [ 261.920988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 261.928782] FAT-fs (loop1): Filesystem has been set read-only [ 261.932386] ? kernel_poison_pages+0x136/0x220 [ 261.932403] should_fail.cold.4+0xa/0x11 [ 261.932424] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 261.949825] binder_alloc: binder_alloc_mmap_handler: 24596 20001000-20004000 already mapped failed -16 [ 261.953563] ? trace_hardirqs_on+0x10/0x10 [ 261.953578] ? rb_erase_cached+0xc82/0x32c0 [ 261.953600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 261.969393] binder: BINDER_SET_CONTEXT_MGR already set [ 261.972169] ? kernel_poison_pages+0x136/0x220 [ 261.972184] ? kasan_unpoison_shadow+0x35/0x50 [ 261.972203] ? trace_hardirqs_on+0x10/0x10 [ 261.997325] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 262.000642] ? trace_hardirqs_on+0x10/0x10 [ 262.000660] __should_failslab+0x124/0x180 [ 262.000680] should_failslab+0x9/0x14 [ 262.007698] binder: 24596:24611 got transaction to invalid handle [ 262.012764] kmem_cache_alloc+0x47/0x760 [ 262.012784] xas_alloc+0x38a/0x490 [ 262.012803] ? minmax_running_min+0x690/0x690 [ 262.017126] binder: 24596:24611 transaction failed 29201/-22, size 24738-0 line 2852 [ 262.021323] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 262.021336] ? gup_pgd_range+0x40f/0x3410 [ 262.021356] xas_create+0x716/0x1150 [ 262.064089] ? fs_reclaim_acquire+0x20/0x20 [ 262.068425] ? xas_descend+0x5f0/0x5f0 [ 262.072318] ? lock_acquire+0x1e4/0x540 [ 262.077013] ? percpu_ref_tryget_live+0x143/0x440 [ 262.081877] ? lock_downgrade+0x8f0/0x8f0 [ 262.086033] ? lock_release+0xa30/0xa30 [ 262.090009] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 262.094758] binder: 24596:24598 ioctl 40046207 0 returned -16 [ 262.094856] ? trace_hardirqs_on+0xd/0x10 [ 262.104861] ? try_charge+0xbc2/0x1680 [ 262.108756] xas_store+0xce/0x1720 [ 262.112296] ? xas_find_tagged+0x1440/0x1440 [ 262.116709] ? lock_acquire+0x1e4/0x540 [ 262.120686] ? shmem_add_to_page_cache+0x8b9/0x1450 [ 262.125704] ? xa_find_after+0x9a0/0x9a0 [ 262.129765] ? percpu_ref_put_many+0x119/0x240 [ 262.134348] ? lock_downgrade+0x8f0/0x8f0 [ 262.138504] ? xas_find_conflict+0x360/0x8d0 [ 262.142918] ? kasan_check_write+0x14/0x20 [ 262.147160] ? do_raw_spin_lock+0xc1/0x200 [ 262.151426] shmem_add_to_page_cache+0x98e/0x1450 [ 262.156283] ? shmem_write_end+0x9a0/0x9a0 [ 262.160535] ? mem_cgroup_try_charge+0x548/0xa70 [ 262.165298] ? mem_cgroup_protected+0xa60/0xa60 [ 262.168196] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.169973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.169993] ? shmem_alloc_and_acct_page+0x31a/0x820 [ 262.182040] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.186068] ? shmem_getattr+0x2c0/0x2c0 [ 262.186086] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 262.200159] ? kasan_check_write+0x14/0x20 [ 262.204406] shmem_getpage_gfp+0xaad/0x3ec0 [ 262.208745] ? shmem_writepage+0x13a0/0x13a0 [ 262.213251] ? trace_hardirqs_on+0x10/0x10 [ 262.217518] ? trace_hardirqs_on+0x10/0x10 [ 262.221762] ? trace_hardirqs_on+0x10/0x10 [ 262.224648] binder: BINDER_SET_CONTEXT_MGR already set [ 262.225994] ? save_stack+0xa9/0xd0 [ 262.226012] ? trace_hardirqs_on+0x10/0x10 [ 262.226025] ? __d_alloc+0xc8/0xd50 [ 262.226041] ? d_alloc+0x96/0x380 [ 262.246304] ? d_alloc_parallel+0x15a/0x1ea0 [ 262.249064] binder: 24631:24632 ioctl 40046207 0 returned -16 [ 262.250714] ? lookup_open+0x54f/0x1b40 [ 262.250728] ? path_openat+0x246e/0x5620 [ 262.250741] ? do_filp_open+0x255/0x380 [ 262.250757] ? do_sys_open+0x584/0x720 [ 262.272479] ? do_syscall_64+0x1b9/0x820 [ 262.276543] ? trace_hardirqs_on+0x10/0x10 [ 262.280074] binder: 24631:24632 transaction failed 29189/-22, size 24738-0 line 2852 [ 262.280783] ? trace_hardirqs_on+0x10/0x10 [ 262.280801] ? lock_acquire+0x1e4/0x540 [ 262.296848] ? alloc_set_pte+0x1133/0x1790 [ 262.299686] binder_alloc: binder_alloc_mmap_handler: 24631 20001000-20004000 already mapped failed -16 [ 262.301089] ? lock_release+0xa30/0xa30 [ 262.301101] ? xas_find_tagged+0x1440/0x1440 [ 262.301120] ? trace_hardirqs_on+0x10/0x10 [ 262.323144] ? pmd_val+0x88/0x100 [ 262.323617] binder_alloc: 24631: binder_alloc_buf, no vma [ 262.326595] ? add_mm_counter_fast+0xd0/0xd0 [ 262.326613] ? kasan_check_write+0x14/0x20 [ 262.326631] ? do_raw_spin_lock+0xc1/0x200 [ 262.332185] binder: 24631:24634 transaction failed 29189/-3, size 24738-0 line 2967 [ 262.336543] ? _raw_spin_lock+0x32/0x40 [ 262.336558] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.336576] ? alloc_set_pte+0xaf6/0x1790 [ 262.366480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.372111] ? filemap_map_pages+0xca2/0x1990 [ 262.375725] binder: undelivered TRANSACTION_ERROR: 29189 [ 262.376609] ? lock_downgrade+0x8f0/0x8f0 [ 262.376622] ? unlock_page+0x1d1/0x2c0 [ 262.376633] ? xa_set_tag+0x40/0x40 [ 262.376649] ? lock_page_memcg+0xf2/0x300 [ 262.384478] binder: undelivered TRANSACTION_ERROR: 29189 [ 262.386253] ? find_get_entries_tag+0x1410/0x1410 [ 262.386273] ? kasan_check_write+0x14/0x20 [ 262.412529] ? do_raw_spin_lock+0xc1/0x200 [ 262.416768] ? follow_page_pte+0x4af/0x1810 [ 262.421089] ? undo_dev_pagemap+0x440/0x440 [ 262.425419] ? __inode_attach_wb+0x273/0x13e0 [ 262.429915] ? lock_release+0xa30/0xa30 [ 262.433891] shmem_fault+0x25f/0x960 [ 262.437608] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 262.442882] ? alloc_set_pte+0xaf6/0x1790 [ 262.447032] ? lock_downgrade+0x8f0/0x8f0 [ 262.451191] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 262.455772] ? __handle_mm_fault+0x3637/0x4480 [ 262.460356] __do_fault+0xee/0x450 [ 262.463901] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 262.469000] ? do_raw_spin_unlock+0xa7/0x2f0 [ 262.473422] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 262.478001] ? add_mm_counter_fast+0xd0/0xd0 [ 262.482413] __handle_mm_fault+0x2cc1/0x4480 [ 262.486824] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 262.491669] ? follow_page_mask+0x188/0x1d90 [ 262.496084] ? lock_acquire+0x1e4/0x540 [ 262.500054] ? handle_mm_fault+0x417/0xc80 [ 262.504286] ? lock_downgrade+0x8f0/0x8f0 [ 262.508459] ? lock_release+0xa30/0xa30 [ 262.512444] ? lock_downgrade+0x8f0/0x8f0 [ 262.516590] ? mem_cgroup_from_task+0xcb/0x1f0 [ 262.521172] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 262.525926] ? uprobe_apply+0x140/0x140 [ 262.529901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.535439] handle_mm_fault+0x53e/0xc80 [ 262.539504] ? __handle_mm_fault+0x4480/0x4480 [ 262.544079] ? check_same_owner+0x340/0x340 [ 262.548402] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 262.553419] __get_user_pages+0x823/0x1ad0 [ 262.557656] ? follow_page_mask+0x1d90/0x1d90 [ 262.562150] ? __x64_sys_brk+0x7a0/0x7a0 [ 262.566213] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.571750] ? lock_acquire+0x1e4/0x540 [ 262.575720] ? __mm_populate+0x362/0x520 [ 262.579782] ? lock_release+0xa30/0xa30 [ 262.583759] ? check_same_owner+0x340/0x340 [ 262.588080] ? rcu_note_context_switch+0x730/0x730 [ 262.593011] populate_vma_page_range+0x2db/0x3d0 [ 262.597768] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 262.602696] ? find_vma+0x34/0x190 [ 262.606235] __mm_populate+0x2ce/0x520 [ 262.610126] ? populate_vma_page_range+0x3d0/0x3d0 [ 262.615055] __x64_sys_remap_file_pages+0xaf5/0xb10 [ 262.620071] ? __ia32_sys_remap_file_pages+0xaf0/0xaf0 [ 262.625349] do_syscall_64+0x1b9/0x820 [ 262.629245] ? finish_task_switch+0x1d3/0x870 [ 262.633737] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.638662] ? syscall_return_slowpath+0x31d/0x5e0 [ 262.643609] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.648632] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.653649] ? perf_trace_sys_enter+0xb10/0xb10 [ 262.658318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.663162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.668360] RIP: 0033:0x455ba9 [ 262.671537] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.690804] RSP: 002b:00007fdb8abbfc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 262.698510] RAX: ffffffffffffffda RBX: 00007fdb8abc06d4 RCX: 0000000000455ba9 [ 262.705781] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020002000 [ 262.713049] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:45:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd000000, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3580, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000600)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="91"], 0x1) write$cgroup_type(r1, &(0x7f00000005c0)='threahed\x00', 0x9) 05:45:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x2f, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 05:45:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) close(r2) close(r1) 05:45:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000600000000000a32c0bce039b6969aea99bf9671fc7a20f8da260"], 0x0, 0x0, &(0x7f00000004c0)}) [ 262.720314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 262.727578] R13: 00000000004c0bb7 R14: 00000000004d0af8 R15: 0000000000000005 [ 262.750332] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 262.758525] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 262.766531] page:ffffea0006d87200 count:2 mapcount:0 mapping:ffff8801a7c2b838 index:0xff2 [ 262.776641] flags: 0x2fffc0000000068(uptodate|lru|active) [ 262.782208] raw: 02fffc0000000068 ffffea0006ec36c8 ffffea0006d87248 ffff8801a7c2b838 [ 262.790138] raw: 0000000000000ff2 0000000000000000 00000002ffffffff ffff8801b4c32e40 [ 262.798032] page dumped because: VM_BUG_ON_PAGE(page_to_pgoff(page) != index) [ 262.805334] page->mem_cgroup:ffff8801b4c32e40 [ 262.809937] ------------[ cut here ]------------ [ 262.814685] kernel BUG at mm/shmem.c:815! [ 262.818866] invalid opcode: 0000 [#1] SMP KASAN [ 262.823537] CPU: 1 PID: 24604 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 262.831929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.841310] RIP: 0010:shmem_undo_range+0xdaa/0x29a0 [ 262.846309] Code: 00 0f 85 bd 19 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a5 f0 d6 ff 48 c7 c6 e0 32 f1 87 4c 89 e7 e8 16 10 05 00 <0f> 0b e8 8f f0 d6 ff 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 80 3c 18 [ 262.865567] RSP: 0018:ffff88019372e158 EFLAGS: 00010246 [ 262.870940] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 262.878205] RDX: 0000000000000000 RSI: ffffffff81aaab95 RDI: ffffed00326e5c18 [ 262.885467] RBP: ffff88019372e8d0 R08: ffff8801d7ec6080 R09: fffffbfff11f1260 [ 262.892730] R10: fffffbfff11f1260 R11: ffffffff88f89303 R12: ffffea0006d87200 [ 262.899990] R13: ffff88019372e8a8 R14: 0000000000000001 R15: 0000000000000ff2 [ 262.907254] FS: 00007fdb8abc0700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 262.915470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.921344] CR2: 00000000004e9238 CR3: 00000001afb11000 CR4: 00000000001406e0 [ 262.928609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.935868] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.943125] Call Trace: [ 262.945717] ? shmem_get_link+0x690/0x690 [ 262.949861] ? lock_acquire+0x1e4/0x540 [ 262.953834] ? rb_erase+0x3550/0x3550 [ 262.957637] ? trace_hardirqs_on+0xd/0x10 [ 262.961782] ? trace_hardirqs_on+0x10/0x10 [ 262.966011] ? __page_frag_cache_drain+0x1f0/0x1f0 [ 262.970939] ? trace_hardirqs_on+0x10/0x10 [ 262.975168] ? percpu_ref_put_many+0x131/0x240 [ 262.979747] ? trace_hardirqs_on+0x10/0x10 [ 262.983983] ? trace_hardirqs_on+0x10/0x10 [ 262.988214] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.992970] ? __debug_object_init+0x581/0x12e0 [ 262.997639] ? lock_downgrade+0x8f0/0x8f0 [ 263.001782] ? lock_downgrade+0x8f0/0x8f0 [ 263.005928] ? kasan_check_read+0x11/0x20 [ 263.010067] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.014472] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 263.019483] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 263.024240] ? lock_acquire+0x1e4/0x540 [ 263.028209] ? lock_downgrade+0x8f0/0x8f0 [ 263.032357] ? lock_release+0xa30/0xa30 [ 263.036330] ? kasan_check_read+0x11/0x20 [ 263.040471] ? rcu_is_watching+0x8c/0x150 [ 263.044613] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 263.049280] ? trace_hardirqs_on+0x10/0x10 [ 263.053512] ? trace_hardirqs_on+0x10/0x10 [ 263.057758] ? unwind_get_return_address+0x61/0xa0 [ 263.062697] ? trace_hardirqs_on+0x10/0x10 [ 263.066931] ? save_stack+0x43/0xd0 [ 263.070556] ? __kasan_slab_free+0x11a/0x170 [ 263.074974] ? kasan_slab_free+0xe/0x10 [ 263.078941] ? kmem_cache_free+0x86/0x2d0 [ 263.083083] ? sock_destroy_inode+0x56/0x70 [ 263.087404] ? destroy_inode+0x159/0x200 [ 263.091458] ? evict+0x5d5/0x990 [ 263.094818] ? iput+0x635/0xaa0 [ 263.098090] ? dentry_unlink_inode+0x4ae/0x640 [ 263.102667] ? __dentry_kill+0x44c/0x7a0 [ 263.106721] ? dentry_kill+0xc9/0x5a0 [ 263.110523] ? dput+0x15/0x20 [ 263.113630] shmem_truncate_range+0x27/0xa0 [ 263.117961] shmem_evict_inode+0x3b2/0xcb0 [ 263.122213] ? do_raw_spin_lock+0xc1/0x200 [ 263.126456] ? shmem_truncate_range+0xa0/0xa0 [ 263.130958] ? debug_check_no_obj_freed+0x30b/0x595 [ 263.135978] ? integrity_inode_free+0x5d/0x320 [ 263.140559] ? lock_acquire+0x1e4/0x540 [ 263.144529] ? inode_wait_for_writeback+0x2f/0x40 [ 263.149365] ? lock_downgrade+0x8f0/0x8f0 [ 263.153505] ? evict+0x468/0x990 [ 263.156871] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.162401] ? __inode_wait_for_writeback+0x2cf/0x380 [ 263.167590] ? kasan_check_read+0x11/0x20 [ 263.171729] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.176134] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.180713] ? kasan_check_write+0x14/0x20 [ 263.184938] ? do_raw_spin_lock+0xc1/0x200 [ 263.189172] ? shmem_truncate_range+0xa0/0xa0 [ 263.193672] evict+0x4ae/0x990 [ 263.196868] ? destroy_inode+0x200/0x200 [ 263.200923] ? do_raw_spin_lock+0xc1/0x200 [ 263.205155] ? lock_downgrade+0x8f0/0x8f0 [ 263.209303] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.214836] ? kasan_check_read+0x11/0x20 [ 263.218986] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.223655] iput+0x635/0xaa0 [ 263.226759] ? fsnotify_final_mark_destroy+0xc0/0xc0 [ 263.231956] ? inode_add_lru+0x2a0/0x2a0 [ 263.236014] ? fsnotify_destroy_marks+0x2e7/0x5c0 [ 263.240859] ? kasan_check_read+0x11/0x20 [ 263.245003] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.249407] ? fsnotify_clear_marks_by_group+0x640/0x640 [ 263.254857] ? debug_object_active_state+0x2f5/0x4d0 [ 263.259960] dentry_unlink_inode+0x4ae/0x640 [ 263.264470] ? kasan_check_read+0x11/0x20 [ 263.268609] ? d_lru_add+0x120/0x120 [ 263.272320] ? kasan_check_write+0x14/0x20 [ 263.276551] ? do_raw_spin_lock+0xc1/0x200 [ 263.280785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.286315] ? lockref_mark_dead+0xef/0x170 [ 263.290627] ? lockref_get_not_dead+0x90/0x90 [ 263.295121] ? lock_acquire+0x1e4/0x540 [ 263.299090] __dentry_kill+0x44c/0x7a0 [ 263.302976] ? d_drop+0x70/0x70 [ 263.306255] ? do_raw_spin_lock+0x200/0x200 [ 263.310568] ? lock_release+0xa30/0xa30 [ 263.314543] ? check_same_owner+0x340/0x340 [ 263.318863] dentry_kill+0xc9/0x5a0 [ 263.322498] dput.part.26+0x66b/0x7a0 [ 263.326298] ? shrink_dcache_sb+0x350/0x350 [ 263.330617] ? rcu_note_context_switch+0x730/0x730 [ 263.335540] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 263.340551] dput+0x15/0x20 [ 263.343475] __fput+0x558/0x930 [ 263.346750] ? fput+0x1a0/0x1a0 [ 263.350021] ? check_same_owner+0x340/0x340 [ 263.354335] ? kasan_check_write+0x14/0x20 [ 263.358566] ? do_raw_spin_lock+0xc1/0x200 [ 263.362794] ____fput+0x15/0x20 [ 263.366069] task_work_run+0x1ec/0x2a0 [ 263.369958] ? task_work_cancel+0x250/0x250 [ 263.374277] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.379822] ? switch_task_namespaces+0xa2/0xd0 [ 263.384484] do_exit+0x1b08/0x2750 [ 263.388032] ? plist_add+0x790/0x790 [ 263.391743] ? mm_update_next_owner+0x9a0/0x9a0 [ 263.396407] ? check_same_owner+0x340/0x340 [ 263.400722] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.405124] ? rcu_note_context_switch+0x730/0x730 [ 263.410047] ? lock_acquire+0x1e4/0x540 [ 263.414022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.419558] ? futex_wait_queue_me+0x553/0x830 [ 263.424151] ? lock_acquire+0x1e4/0x540 [ 263.428120] ? futex_wait+0x300/0xa20 [ 263.431927] ? lock_downgrade+0x8f0/0x8f0 [ 263.436072] ? kasan_check_write+0x14/0x20 [ 263.440302] ? __unqueue_futex+0x1f8/0x2e0 [ 263.444530] ? trace_hardirqs_on+0x10/0x10 [ 263.448756] ? kasan_check_read+0x11/0x20 [ 263.452894] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.457298] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.461878] ? kasan_check_write+0x14/0x20 [ 263.466113] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 263.471471] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.477010] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 263.482207] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.487738] ? futex_wait+0x5d2/0xa20 [ 263.491537] ? futex_wait_setup+0x410/0x410 [ 263.495858] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 263.501132] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 263.506231] ? futex_wake+0x304/0x760 [ 263.510030] ? memset+0x31/0x40 [ 263.513302] ? __dequeue_signal+0xf9/0x7d0 [ 263.517534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.523069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.528604] ? recalc_sigpending_tsk+0x180/0x180 [ 263.533353] ? get_signal+0x918/0x1970 [ 263.537243] ? lock_downgrade+0x8f0/0x8f0 [ 263.541390] do_group_exit+0x177/0x440 [ 263.545276] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.549956] ? __ia32_sys_exit+0x50/0x50 [ 263.554013] ? kasan_check_write+0x14/0x20 [ 263.558240] ? do_raw_spin_lock+0xc1/0x200 [ 263.562471] get_signal+0x88e/0x1970 [ 263.566182] ? ptrace_notify+0x130/0x130 [ 263.570242] ? kasan_check_read+0x11/0x20 [ 263.574405] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.578810] ? mntput_no_expire+0x18e/0xbc0 [ 263.583129] ? _raw_spin_unlock+0x22/0x30 [ 263.587283] ? dput.part.26+0x276/0x7a0 [ 263.591253] do_signal+0x9c/0x21c0 [ 263.594793] ? lock_acquire+0x1e4/0x540 [ 263.598761] ? task_work_run+0x1b3/0x2a0 [ 263.602817] ? lock_downgrade+0x8f0/0x8f0 [ 263.606961] ? setup_sigcontext+0x7d0/0x7d0 [ 263.611281] ? kasan_check_read+0x11/0x20 [ 263.615455] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.619856] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.624433] ? kasan_check_write+0x14/0x20 [ 263.628663] ? do_raw_spin_lock+0xc1/0x200 [ 263.632901] ? __x64_sys_futex+0x47f/0x6a0 [ 263.637132] exit_to_usermode_loop+0x2e0/0x370 [ 263.641731] ? syscall_slow_exit_work+0x500/0x500 [ 263.646573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.652107] do_syscall_64+0x6be/0x820 [ 263.655987] ? finish_task_switch+0x1d3/0x870 [ 263.660487] ? syscall_return_slowpath+0x5e0/0x5e0 [ 263.665410] ? syscall_return_slowpath+0x31d/0x5e0 [ 263.670334] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 263.675345] ? prepare_exit_to_usermode+0x291/0x3b0 [ 263.680353] ? perf_trace_sys_enter+0xb10/0xb10 [ 263.685015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.689862] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.695129] RIP: 0033:0x455ba9 [ 263.698305] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.717558] RSP: 002b:00007fdb8abbfce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 263.725263] RAX: fffffffffffffe00 RBX: 000000000072bec0 RCX: 0000000000455ba9 [ 263.732528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec0 [ 263.739788] RBP: 000000000072bec0 R08: 0000000000000036 R09: 000000000072bea0 [ 263.747062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.754333] R13: 00007fffcc26877f R14: 00007fdb8abc09c0 R15: 0000000000000000 [ 263.761598] Modules linked in: [ 263.764783] Dumping ftrace buffer: [ 263.768306] (ftrace buffer empty) [ 263.772189] ---[ end trace f6e23213ae369427 ]--- [ 263.777010] RIP: 0010:shmem_undo_range+0xdaa/0x29a0 [ 263.782061] Code: 00 0f 85 bd 19 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a5 f0 d6 ff 48 c7 c6 e0 32 f1 87 4c 89 e7 e8 16 10 05 00 <0f> 0b e8 8f f0 d6 ff 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 80 3c 18 [ 263.801371] RSP: 0018:ffff88019372e158 EFLAGS: 00010246 [ 263.806757] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 263.814043] RDX: 0000000000000000 RSI: ffffffff81aaab95 RDI: ffffed00326e5c18 [ 263.821336] RBP: ffff88019372e8d0 R08: ffff8801d7ec6080 R09: fffffbfff11f1260 [ 263.828627] R10: fffffbfff11f1260 R11: ffffffff88f89303 R12: ffffea0006d87200 [ 263.835918] R13: ffff88019372e8a8 R14: 0000000000000001 R15: 0000000000000ff2 [ 263.843231] FS: 00007fdb8abc0700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 263.851474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.857384] CR2: 00000000004e9238 CR3: 00000001afb11000 CR4: 00000000001406e0 [ 263.864685] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.871983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.879714] Kernel panic - not syncing: Fatal exception [ 263.885629] Dumping ftrace buffer: [ 263.889146] (ftrace buffer empty) [ 263.892833] Kernel Offset: disabled [ 263.896436] Rebooting in 86400 seconds..