5] binder: BINDER_SET_CONTEXT_MGR already set [ 939.990461] binder: 22444:22464 unknown command 1077961580 [ 939.991657] binder_alloc: binder_alloc_mmap_handler: 22448 20001000-20004000 already mapped failed -16 [ 940.001549] binder: 22449:22451 ioctl 40046207 0 returned -16 [ 940.018217] binder: 22444:22464 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x2, 0x1000, 0x7f, 0x7, 0x5, 0x80000001, 0x200, 0x4]}, &(0x7f0000000040)=0x14) 1970/01/01 00:15:40 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x4000) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x5, [@local={0xac, 0x14, 0x14, 0xaa}, @empty, @multicast1=0xe0000001, @empty, @local={0xac, 0x14, 0x14, 0xaa}]}, 0x24) [ 940.025474] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xc00]}}, 0x20) 1970/01/01 00:15:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406303, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 940.057981] binder_alloc: 22448: binder_alloc_buf, no vma [ 940.063729] binder: 22449:22451 transaction failed 29189/-3, size 0-0 line 2971 1970/01/01 00:15:40 executing program 3: r0 = socket$inet6(0xa, 0x800, 0xfff) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x81, 0x2000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000300)=""/172, &(0x7f00000002c0)=0x8c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000180)={0xb22, 0x1, 0xa, 0x2}) 1970/01/01 00:15:40 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x301600, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0), 0x4) getpeername(r0, &(0x7f00000001c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000480)={0x2, [0x9, 0x80000001]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in, 0x4e21, 0x9, 0x4e23, 0xea2c, 0x2, 0x80, 0x0, 0x73, r2, r3}, {0xfffffffffffffffe, 0x9, 0xae4, 0x5, 0x10001, 0x3, 0x0, 0x8}, {0x8, 0x0, 0x37a1, 0xfff}, 0x0, 0x6e6bb5, 0x3, 0x1, 0x1, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d4, 0x2b}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x3507, 0x5, 0x0, 0x7, 0x2, 0x9, 0x5}}, 0xe8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000651ff8)={0x2, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x78) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r4, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 940.162305] binder: 22448:22450 ioctl 40046207 0 returned -16 [ 940.176460] binder: 22487:22488 unknown command 1077961475 1970/01/01 00:15:40 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip6_tables_targets\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2568ba1a3c3d178dbc817d8dff4f96689e5656090ed5743a16d9c4285f28d9a3be3d01a61e4de6ff191113164773096371c4d249b75f4eb929af40013a6988b979fbbca22748b846457113ff9309167bb59e9f3a62b72bed5833ca88c211207654bbfa1a64958036206db0794cb58b7a0767e179acbf5784dcb2edb0e4b740a8a7a15ec3a2845774e445179a717a7be1062efe2c5fa500000000000000000000000000ce3967d5d360929cdae54b890d81a976b9d8da87e277cd6829850fcbc7216665d1"], 0xfffffffffffffe2f) [ 940.214441] binder: 22487:22488 ioctl c0306201 20007000 returned -22 [ 940.231918] binder: BINDER_SET_CONTEXT_MGR already set [ 940.245414] binder_alloc: 22448: binder_alloc_buf, no vma [ 940.251125] binder: 22449:22498 transaction failed 29189/-3, size 0-0 line 2971 1970/01/01 00:15:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xfbffffff]}}, 0x20) 1970/01/01 00:15:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'bcsf0\x00', 0x2}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 940.275957] binder: 22487:22504 unknown command 1077961475 [ 940.297630] binder: 22487:22504 ioctl c0306201 20007000 returned -22 [ 940.302307] binder: 22449:22497 ioctl 40046207 0 returned -16 1970/01/01 00:15:40 executing program 7: prctl$setmm(0x17, 0x0, &(0x7f0000ffa000/0x6000)=nil) sync() [ 940.362587] binder: undelivered TRANSACTION_ERROR: 29189 [ 940.368521] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:15:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00004c4fe4)=ANY=[@ANYBLOB="0c630002"], 0x1, 0x0, &(0x7f0000fedffe)="05"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x1000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x8008]}}, 0x20) 1970/01/01 00:15:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xf000, 0x1000}) 1970/01/01 00:15:41 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8002, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x8500}, {r0, 0x8000}, {r0, 0x100}, {r0, 0x8}, {r0, 0x220}, {r0, 0x408}, {r0, 0x10}], 0x8, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="32513a6ba42d512bee986e68b7ea7598c6cf07b4590b105c03732a6dc917f266798069b7d47f5c1b0acffe57028633e1c0e0406bc87d77d4f32483bd96a962eac73582cdcee04b78f998", 0x4a, 0xffffffffffffffff) keyctl$get_security(0x11, r1, &(0x7f0000000180), 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x200, 0x0, 0x7fffffff, 0x7, [{0x4, 0x8082, 0xfffffffffffffffa, 0x0, 0x0, 0x2000}, {0xfffffffffffffffc, 0x1, 0x6, 0x0, 0x0, 0x206}, {0x2, 0x1, 0x8000, 0x0, 0x0, 0x2004}, {0x1, 0xa05, 0x3, 0x0, 0x0, 0x880}, {0x7e, 0x8, 0x10001, 0x0, 0x0, 0x800}, {0x85, 0x7, 0xfffffffffffffad6, 0x0, 0x0, 0x4}, {0xfffffffffffff001, 0x4, 0xca, 0x0, 0x0, 0x804}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000004c0)={r2, 0x4, &(0x7f00000003c0)=[0xffff, 0x200, 0xfffffffffffffeff, 0xfffffffffffffff7], &(0x7f0000000400)=[0x0, 0x1, 0x5, 0x3, 0x40, 0xdde], 0x72, 0x4, 0x4, &(0x7f0000000440)=[0x8000, 0x7fff, 0xfffffffffffffff7, 0x8], &(0x7f0000000480)=[0x4, 0x200, 0x401, 0x4]}) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000500)={0xcc, 0x1, 0x80, 0x0, 0x3}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x44000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000580)={0x5, 0x1ff, 0x107, 0x2, 0x11, 0x2}) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x35, 0x5}, &(0x7f0000000600)=0x0) timer_getoverrun(r4) connect$llc(r3, &(0x7f0000000640)={0x1a, 0x1b, 0x7, 0x1, 0x40, 0x3}, 0x10) ioctl$KVM_NMI(r3, 0xae9a) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) keyctl$describe(0x6, r1, &(0x7f0000000680)=""/56, 0x38) io_setup(0x380000, &(0x7f00000006c0)=0x0) io_submit(r5, 0x4, &(0x7f00000019c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0xb, 0x329, r0, &(0x7f0000000700)="1e7ba2329b51cf082a27533b6407e91711bb30cd8c614e861e72e4c87daccd91947a9e19b535f8d517d34428a0d02d8a3868522bb6e817e399fd46da139631e68fd1fed2c17483c95d5321c2a0eba4718755622865c2da15014e2b0eb46914e7f96b43a833a106a23b8defa13a9ac03ed696aa2ebea5f0a9d6f4df2599cdb350cb1bad184ab9c814e08ba5110a5a485e4fb3832354e131a26f3ee4cfd6b34809633d359b05b3dee488460c960bd76a130b147b2a2bab161863502b", 0xbb, 0xffffffffffff9f7c, 0x0, 0x0, r0}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000000800)="afbc599a60a56fc4246612bacdb10b0b661b120dd2f99093db93b9532a44351c43de0e139bf1e16b8e203f84c1f44e1af403738358c675fb248c2bb790733ae7fb456fe0165d4a8d2e7578389264e4c403f008d2ffd9c2f1e00794bcd8b52deba798f75125085f96eb8a8b17bcef9ad7e722b127d6111328f1fc2b69667cb1ebb5ba53286c2e723caae6bc8a286101c5753be1cf3f35658b88bb769651660de7b3f93b7d8c914834dd93ad944ce9b64592e8245cb7e53f97bf1a985c925e795b6adfb7380592a16509fa8aceca2627035162443a55d4d90e205a30e8c2ed48c215997970db9b41acec1fc47d14b83d1c9c794cfe043fa772cfe4cce5dba00f9f5a180458fc33415d6b98f5032e3143505c3e05e31c9ca149b55c52697922bfdfe5f085a205c8960ebc8558efc7e8fc59525f4249f29979d6551b95e550520b83971404a726be9b6e534348079bc2fca22fe0a42d1897e13b322027eaa82d1769a8ab673fcab4949ff76ae9daa79a638a34a89d8ac2b5d4d3500a203afa910755f663c5e3c227e11c52195067ce6e65c8fc70eb20b5cd7cf95a1dca8408d52f925af0d9fa85752e3aa35cff9f372293971f1b4c673475a92ccddad988a7e31b9cd563e6f71d2c6808f4133b5afc7e03eae2c042df9dc76db76657259982333a0efdbda6ed6ef6da7b4aae4ad2225cad8698ab44a72f818bea83e0ffea16e16b8de8b7266549be07bc525a89ddf035e86def0e9b27addd65e4cca97cc5d9e2794cb49974a0e8cf7a85d1fb68e874518dd2eaf96cafceb1deaf710cb0a56c3936e94f7e169de3a8a49062eafe70dda5c6f6e6907f12146d6914757d533f8106b8ab5f897b05d2875c05a244daf49bb3397e84bab93a385b476f33b0be141fdcb7a76942bb397ba32063f48f8fe22e49acfb5969e71daa382305a87dd0e0db0855600e6c50017dff5baa6ed3555ce9ec9a328263c2d9d347670e423719d754650d3b2f176d7170940b94b759f2967742ba03bf868abc0831545a05207ca2d7ae69b8a435e9af0d1003189d22e24efb83f9af49de8ce623d3826236c0449b382f446180d429d03978b5697e30754bd3cd27fd750d14de4a8855c7d6ebb61c3b6a90534da646a0b94f426ede577746eb01e6cbaff9d4c974c1de9ae002e42bd6bd13a36c636a474a0f5ecbcf368ac45da956d2629c7d1bdc8a1a74742ed0d910ed45210feae97b4556cbd5ac6b818271c55714ea646c97a174d11161f4ae54175b921e6e095dbf02cf6904f48ba085fd1b360906ab8caed3f479767e8975e0343acd430f5d100ddb45a77649f1856ca3d7aa8540b29969995f3b8ecb95befd8a015542deeaa28d8d67e75e792c12c072b8f042e4cda12f2744675c9fd893ed287e98b066856a4ce4e94da67355884a103c7766298f569e7d89095e3567a7eb232a16539f23d9115b510e25be355f7cbdccc7647dcc3b5e45e2a5834457b91c2eef69fc605c04320bb2904ada1146b39a3e5473148f85e4682706a9c604f0fa79250fe38856e743bf4e3d28482ad406888443ac4fb00b99c9d6fae1acce20a1a6c9373e8a8901c6d9e4476dcffe0cc00ff85a342fab129659aa3a987e29305b64ea120bae5e0455661bfaa20dcadd22a5a52e7d17dbb82b71e17fdb11a5310cbf330486881d486f567884dc607dfa5386fa30b3d38f70257b455a1cf49d3106725b830a0ebcb76cf1f664ddd2a68a5ab1c37fd9fd9724dbe8d5d71a0f3740319d295f59849f061cd348a85ceb2ebac237d47af11a4da2148507eff62444366452669d85d27a91d49ed83478318ac490d7bd5d98b762fcac59c260515dd80db4e1cb07f67beb3eabf251765cdc37ee305fe9f22982eb180d635f0d956b56b41d6204f7f9a9fd3f93f46b3fa3cca952ec7e72d559c2153c0b1742b173e98dc60d36cde5c480798144117e407812211af46ecdc6ad4c9f674b4e2eab1d59861a472ba04ca7da764ccbe69c1819eff66f1b5c4ab6c1048327791745b5daa5f1f6b3dfb9489ae18223033bcfac4e129b698eb615066722063825fa71ecf90b31560a40cb1c409ebc0ab57c461a0787761fa2cbc9706d6e7b5359e0c208c6d281faa1b543e1eee35a5726aa52dacca5afbc3d4dd3336604114dda114dbe26e5610feefc0417894f2a5b7e5a2c7e38e8a9b0da3cfdecde386ce32b33d966ff0ef0884e912d003b825aef8a144121da7d70987f6cd10debc41d1a65f05aad1634702416aff79a59aeec38fcf7b10681ebf3a1c45ad96a2089ff9cbc1cfeca740b7394761694c6757c9b27975d266870a9480a83dafd316390bcd7c627b60185d0cb3d48e3d7c9270951d172fedf78852e9f39b5857f136037605ab4f3ec46de1de0f1e9416c2e3e17ebc7e7c7546efe047af87f372365984bec1becda35b0581d323d1058ee5491f024cc110941dfbbf717f165039aff4cebb0536460b6df9930b7d1848dded51fcc73d0b974da651691b0a3a046e4c0f9c99c86c808292eeb71d6bc7b71515abb834d81a45296291fa3dfb495e92db8eb18bf50d7c4b54972d519af2335c007fb9af0d8d42298b739a5984a39121107fdd3a735d860eb5b3011bea235a9cc2a928bcb39eeae98b69944ee335cea29e8b4a65101bd04e6a82ac52158f42bf75f3d9a1bd43a945176fcffcf046b34742d7dd77948815abd77c648b7fdeb4fe1f4ad4ece67c9179d13ddbcbefb9d32d6014c12225e34d20c74e3dce3bd9cb97c79bd5e76f34f203290128770cc6f5c17c5f05454f6de2979c8578ccb872f4c1de7e611cc312d6a1badc3793727abde1f9ba03058701b3fb45e3941125e1c064f42dac2377c390178d0ce8fa0d32ece43a0d9a3f3ede7ff2ab50a07876483598f7ea17bec9fc197b5784087db65739177b87dc1bb727b163e8f3550faeaf460056e57a82375cc1ddebcd0e8f5bb7beda62e7676ed49b9962a5e89baa03a007df4ffea572acddf2a3ab801e0cefcef09dc332fa4d9a54a3c6dbf9cfa54dd306002b338de02cf5ce9821f90d476fb94f118d697aa7e470714fb5085ec871e969834b0b0d8c7035cc27b97f536e0376abc5ccdb8ca69345824c5b4474ee1d4ab94cc2faf394a1e55e6d98d60d77da71776249d02bcfa33104deaa79b861ce6e304228c418c7bec530592e971a0964f622c7e8178a2e89358e46ba07d8eb7800a83a746a5f101cb6ffbb83a8dd87bc8e49c19b07a3b1cec6f264757edaf808a159afd81b8c56bdbb53b6d29ba8400069ca7bf27c98e97d87af6480d9573c4ebbd61e508a9a28ecd7bbdf6fa874c4260ed8f60525907fc88d583fc77ed88ba794859c3c6faea47a7bd94fc41f0395e4081e43eedc986def3d609592629d89d496d416497b77d257ef7e1668c637caee9c65d19eeccf82fd9941132f5f5aa839a3155f9137187825269a0cb34f61e37c131a79f3183570d9f64481eaca9b3d816e036e7ef59840358e2f1db5ef836813dbfd47d80d6003b08223c8e0352812f71d30fd562371e9135c761c4e6a66b8a871b5831a064bbd4fd46117c5831299d829e44212bd0470ab2abf6f7495c3c8a54b3e184f459c750359d7b709c16709618826116d60ef12e6b0ca1b659df5e7cf0e62c5feed50cbc49052e04c5b6850c2f53b98fa53895bfc44395a40b87cd9a6fcaddfd86380112aa0d301c2f3c9aaa5f663dd13b14918436894e53cb078e5be8488bfa9c69eed72ea6e8490648779de29a1063e069b6269f8b8b8199ad043e10dbe5fae15973efa19536709bdd5d66a24acccc7096f06dfbf773cd03deea65ff88d783708a5ed13ce994ff55ef9658383e25a78a89ae24edca9e001f8c77afc820bc6a179333294e944fb177584d13b19ec187b55fd8d097f1a55b1ed8c97dc463ebe66d0cb665994ac3b149d32e8a20204f08e1782bbf30c0c2a9728e1260073ffb11daf53a7b63d670aa3f983d1135e97f10332da4e6a61b7608d0739418ae8ea6fe199308243fb9f74852dffb455ff509b9a17a51f8104f971776654cd46e5cd13b0748212818a8af35229a3f4ea5f37123a27839cc81a5c56aaa08b8628ffc7fed4c76317df35cd1a6417b88187083450db262d4ca8c6a1411048b497e398959382c6e008fa195d399170c72f0fc72c0eda383e8406b5f8b31f8e720bd5432ab1e26779378427ef4eabb8b9863ae594b9d7e5bd2068ed1e5d5ef8f4ed6d91c7d12711067a2fbf623c529f82ac11d0984542194b8b1212ffadc14f40637d90fb7af54ad8eb264a8249a51c85b63ae195dff57f58f08ce3916f8a8670af0bbc8c0808b3986cb2378de6f53256728403e26ea6b5ef9925e54b1cea375197bd0096600e63368ac09e2aa7a5b51a306ecbd64093637243eeca07ddeefbd6a8360b727aa1d5d4e4f3e22ccef499f02cf72b27dfc0b4e52d3d30ea0f9925e2494018677667d69c86f69fd1562811b9ed0e4f01256fb3da59c8a95132b859ff779ff9de333e3be1e1ecfbb6fd9c7899879d1f319ff70c22ec4d2363adf21e5a7e1bad96f4726a496934d9c7bba6d929280239204e632b7fcc90291d2c0f249e781ac3a53e7076c3301ad771bec1e672c3070e97f5d7b2737062d8678bd722e363a9c020366ae94845a4657a095ba715ba981a5db2846441b8aa9d77628793b2e5beb869dce8ab6c6ccf262386be73ec0422ee0704a093a5e7395c279fefbcad52f48fca93e7d9e874727ae052926f089cb1992911c5fbf04009eae3ec95224ce676ad8a4d115ec9cbe88af52c7b11e488ba3afbf0922491c7f0f01cb3e7e5bff0a0e6dc457f246cab5aa44b8e091d06f597d8096ab9321506e8be005e6d516344c5e8bef2cea0461e45682de650b81e5566f095685ae35b62e6e67d2e53f145e06d5a32f214892eb466d826c5c7960344cd42cfc11bf60701839130726c225f5217ca37f505c6335ef26d337133b7b625804f1480549dc36c06cc1881f7767e566baca21accb7cb7d89c011f90c9e41f32ad5df0a6e996d5f0b9d288997dda2fb0db2cc401a0dabc5e099ec231b4119fddb536241b295dbc559dd83828fa3515995fabf3e15b71dc596ab987a3f6268bf339cd51cad33650a977218b1a1e2d2763dbd142e5caee7168a8c2498f91ae877d81c7d8fbc6a5f56bf79ea7fa2fbc0e035364304b42a8153ff8ed701f64e6844049345830b6ebd8290a5c125b56ab4b4063e4817ddefccd5951355b6137781c210ac29426630f424d84d360cd237504450e96b374e2fc84f5503a561c8442e3d0b953a03b709a66bf540e7bffbb9df535d24c92797b87cfda154f75884161f5da128ffa7b8d0100c0853afebdb232f461f5e7252cc468fb067bdb9b50a90fe1b75ad3ca926ffa408a0fd7e0407570c6da0b1ca4164b7f2a238c348cf62c0f5a5242df13f6b99ca4bfefdb5eb57a9b924b18091e2b875c5e6accb8c4568f27668683df096f09927809dfe376fad12c6028f53d33ff5f5791970018b7458b79d6a909b6f98929e5791b401eeac2cbc00a73031e9563b28d71e8ce300a8f39effe3ce4c3ae3985a01cab0271eb6ce93916cd3cf273d6cf3d33ffd71086394bdf7664d2f400e03ce2fc6b0790ffae8506e087f9ae94aa1300cdcafdd69b12ec6b00a8f5ce9fd5befe7b93f71c78d577834cf13e7eaa92813a4f11030dee0ccf2bf772b669f7269bccf65bbb1b354b9e76ae536601bbe47fefe5564263a0093e9889636a4c6cd4617a96696d4ec0da650716b65b8af412255a41ae0c7c335aa1a9bd9b06072e6477bb", 0x1000, 0x40000000800, 0x0, 0x1, r3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x8, 0x80000001, r3, &(0x7f0000001840)="55d83bbe758e2051a58bd4ebc06b140aff7340def15e0e86e5e41d9634474a6989b13420ba29b2d5cdb899", 0x2b, 0x2, 0x0, 0x0, r3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000018c0)="0aab61f986648914e292752d4f9a8ebc460d1fe7ab21632aa4677342513515dacacfae4ba52e5120905d0c84614ed1aa5b4f086bc469a5d1cacefa6f540c251ae27ed33e7381673bddbbfcc3952696af607d5a645a6d166844b81b6b5a5737e6d62368254891167c6dc4bb97b816fa281ff3c23d6a2aa331c47f43dd98fa1dc14ed1e670e6a3c46a441c49d8d009fbc564ad8b1a95bc877beef896df8fe79981aaec4796ad", 0xa5, 0xffff, 0x0, 0x0, r3}]) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000001a00)) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000001a40)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001a80)={0x0, 0x7fd9d164, 0x3, [0xffffffffffffff38, 0x89fd, 0x1]}, &(0x7f0000001ac0)=0xe) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001b00)={r6, 0x8000, 0xa0, 0x1000, 0x2, 0x4}, 0x14) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000001b40)=0xfffffffffffffffb) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001b80)={0x5, 0x9, 0x6, 0x1, 0x4, 0x6, 0x5, 0x0, 0x4, 0x6, 0x7, 0x2f7c}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001bc0)="1823b920d42dd990c50174a4429067ab", 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c00)) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001c40)={@mcast2={0xff, 0x2, [], 0x1}, 0x3f, 0x2, 0x3, 0x7, 0x5, 0x1, 0x8}, 0x20) clock_settime(0x7, &(0x7f0000001c80)={0x77359400}) 1970/01/01 00:15:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) [ 941.447071] binder: 22533:22534 ERROR: BC_REGISTER_LOOPER called without request [ 941.450517] binder: 22539:22548 ioctl c0306201 20007000 returned -14 [ 941.454730] binder: 22533:22534 unknown command 0 [ 941.467390] binder: BINDER_SET_CONTEXT_MGR already set [ 941.473326] binder: 22533:22534 ioctl c0306201 20007000 returned -22 [ 941.473424] binder: 22541:22542 ioctl 40046207 0 returned -16 [ 941.488874] binder: 22541:22542 unknown command 33579788 [ 941.496205] binder: 22541:22542 ioctl c0306201 20008fd0 returned -22 [ 941.504446] binder_alloc: binder_alloc_mmap_handler: 22541 20001000-20004000 already mapped failed -16 [ 941.525391] binder: 22533:22554 ERROR: BC_REGISTER_LOOPER called without request [ 941.533076] binder: 22533:22554 unknown command 0 [ 941.534982] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xfbffffff]}}, 0x20) 1970/01/01 00:15:41 executing program 3: r0 = socket$inet(0x2, 0x8, 0x3) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 941.538269] binder: 22541:22552 unknown command 33579788 [ 941.554407] binder_alloc: binder_alloc_mmap_handler: 22539 20001000-20004000 already mapped failed -16 [ 941.575739] binder: 22541:22542 ioctl 40046207 0 returned -16 1970/01/01 00:15:41 executing program 6: r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/1, 0x1) syz_emit_ethernet(0x83, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x4d, 0xffffff88, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a82f7ae1cd16d2e29ec370b17de075025dd0d40c29be46586985ea5d7b"}}}}}}}, &(0x7f00000016c0)={0x0, 0x1}) [ 941.596798] binder: 22533:22554 ioctl c0306201 20007000 returned -22 [ 941.604554] binder: BINDER_SET_CONTEXT_MGR already set [ 941.625070] binder: 22541:22552 ioctl c0306201 20008fd0 returned -22 [ 941.635415] binder: 22539:22548 ioctl 40046207 0 returned -16 1970/01/01 00:15:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x78]}}, 0x20) [ 941.667918] binder: 22539:22553 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:41 executing program 6: r0 = open(&(0x7f0000000580)='./file0\x00', 0x1000040080, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x7, 0x20, 0x2, 0x1}, &(0x7f0000000380)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@get={0xe8, 0x13, 0x8, 0x70bd2a, 0x25dfdbff, {{'lrw-serpent-avx\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0x943e}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00003c1000), 0x0) r4 = accept$alg(r2, 0x0, 0x0) recvfrom(r4, &(0x7f0000000000)=""/201, 0xc9, 0x0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x6f3000) 1970/01/01 00:15:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40400a00, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:41 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000280)={'syz0', "bc362c5e9b1c9065aa9665b56bd20c937716c43c0aba7221835877d156b85909ca9155478fae7c8d0033c2cf6e06d08ceb7473150192c45eb88bc07044df1cda3e7849ed27b3e451e98e6dc7ae1d10286929bd05b16202721fdccf4faec2e813ad955c0fd896c22af6b0adf2cbf61931df03b196ae6a17"}, 0x7b) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/170) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x400000) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats\x00') preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 1970/01/01 00:15:41 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x8, 0x4) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xa040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x400, 0x30) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xf8}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x9, 0x0, 0x8001, 0x8, 0x20, 0x2, 0x9, 0x0, r2}, 0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0900030000011f00080004a0c01b5dbb4c26b1c9c6336e083776d9dd1c63d76d01240871eb2350e5e82071750dc87047f0f218c1c701eaf4cb858e14b8e857ef272ab0b9a3f4cbcbcfb1404d78fa59422b1f2cbec50a017c21e3caf94f669a4421658e44e07a9e855c7b"], 0xe) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000380)={'sit0\x00', @random="b8f46b7eca79"}) recvfrom$ax25(r0, &(0x7f0000000200)=""/133, 0x85, 0x40000000, &(0x7f0000000100)={0x3, {"d5f8f8807c7253"}}, 0x10) [ 941.752973] binder: release 22541:22542 transaction 1102 out, still active [ 941.760262] binder: undelivered TRANSACTION_COMPLETE 1970/01/01 00:15:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x2000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 941.813486] binder: send failed reply for transaction 1102, target dead [ 941.835776] binder: 22587:22593 unknown command 1077938688 [ 941.871918] binder: 22587:22593 ioctl c0306201 20007000 returned -22 [ 941.899823] binder: 22596:22598 ioctl c0306201 20007000 returned -14 [ 941.935540] binder: 22587:22603 unknown command 1077938688 [ 941.944970] binder: 22587:22603 ioctl c0306201 20007000 returned -22 [ 941.954738] binder_alloc: binder_alloc_mmap_handler: 22596 20001000-20004000 already mapped failed -16 [ 941.967536] binder: BINDER_SET_CONTEXT_MGR already set [ 941.973148] binder: 22596:22606 ioctl c0306201 20007000 returned -14 [ 941.973611] binder: 22596:22598 ioctl 40046207 0 returned -16 1970/01/01 00:15:42 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4, &(0x7f0000000180)="0009000000000000000000ae192659dd17d9cdd5b64196c3ed79349c68aad24cdca8ff421e504dee749fbf9cd013ab9086a5e2bf9fbc7981a6fb724cd5710118152e7a5042c506cfa90576b2558e2768cbe5894f5f81a7a55b9c64735d5fa6fca11d") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000740)={'nouuid,', {[{@mtpt='mtpt', 0x2c}]}}) 1970/01/01 00:15:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0xffffffffffffb01b) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x204ca7bcb552b54e) 1970/01/01 00:15:42 executing program 6: r0 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="b34c9ac38559ec973fb8105fcb0cc619edc97602e86a1a57a1403a2a875a3d4532587d52fe734a239d4485853cb98f423763b78c1565d691ae3662cf3d9043f817df9c28088eeb1ace7a9c5a9e63e302996193901d0d55ced6e30ebaf9fda2640cea56f2a17048fbe0ff6214883e5a36f89f5496f916935213648b58e95d9060fb7da0ab656c0e15fd087cdef4155830b5729455ebea7ca2bc9a9381736226c721a0dcc87f7ced112366fbb8fe48f69d61c40e0da5cab20db0d63955444336ebb72f545235adf83cc2b597fe189e362ec94dd2c4ccc38a958f8e1c10923c28", 0xdf, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x200) r1 = socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x9, &(0x7f0000000000), 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000012c0)=ANY=[@ANYBLOB="01d50800000000000000c47ceaeffbf0a568de85da8684dd162e63eaeccde48818ceffffffff00000000901305ffc90b1585a772120d12b1606a918dbfbc0aac0325a7e552cf674da17f6f", @ANYRES32=0x0], &(0x7f0000000080)=0x8) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x7f, @rand_addr=0xfffffffffffff000, 0x4e20, 0x2, 'wrr\x00', 0x2f, 0x1, 0x13}, 0x2c) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x280000) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000280)="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") ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000001280)='vcan0\x00') 1970/01/01 00:15:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x3, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pread64(r0, &(0x7f00000001c0)=""/153, 0x99, 0x0) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xd4]}}, 0x20) 1970/01/01 00:15:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f0000000180)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x339, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) [ 942.792161] binder: 22630:22631 got reply transaction with no transaction stack [ 942.795597] XFS (loop7): mtpt option not allowed on this system [ 942.799742] binder: 22630:22631 transaction failed 29201/-71, size 536870912-0 line 2763 [ 942.808342] binder: 22618:22619 unknown command 64 1970/01/01 00:15:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10, 0x80000) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1209100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x600, 0x70bd2a, 0x25dfdbfe, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) 1970/01/01 00:15:42 executing program 6: set_mempolicy(0x4002, &(0x7f0000000080)=0x4, 0x7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2801, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) accept$alg(r0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x40000) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x18000000000000, 0x80) sendto$llc(r1, &(0x7f0000000140)="b0f87517b349ab5eb9c84451221308531126587912de73b38de4ac8a28f2e438c4781c4868b1b5f289e8309edda7795c793c1f6c83e2fa49ccdeee82a154742f95d46c6c1e05a930ffb46e14c376944cedb8d02f542ed06545a519b6aaaca597ad50aa599db178697bf7c9e0e1bb4804b68da242f6463ae58392dc1bf1184914dded02be0f15281fd4410a493950e315a40f7c05d3de94c0750073ce653ffb6de44f5a790c7aea1c0c2e3650dbb603e3fa47a1f1c1f9bcec5e906e7c27bca33bb1fd17f6ed4f", 0xc6, 0x8000, &(0x7f0000000240)={0x1a, 0x31f, 0x3, 0xffff, 0x8, 0x3, @random="b011cb4813a1"}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 942.844961] XFS (loop7): mtpt option not allowed on this system [ 942.860312] binder: 22630:22643 got reply transaction with no transaction stack [ 942.865637] binder: 22618:22619 ioctl c0306201 20007000 returned -22 [ 942.867921] binder: 22630:22643 transaction failed 29201/-71, size 536870912-0 line 2763 1970/01/01 00:15:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf300000000000000]}}, 0x20) [ 942.903320] binder_alloc: binder_alloc_mmap_handler: 22618 20001000-20004000 already mapped failed -16 1970/01/01 00:15:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x4, &(0x7f0000000080), 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40400, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000140)=""/128) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="015b5e474e5b00000000fb034deb4b0000320e8e02e3a380a080a654fba92d4737722ed049b64f2a96b25bd4c3237968aee340ba4c17e888e8fad94d23e49bdbe253d6f97c6cc4ad9f7a4fa4ab4849353624837a67a8bd0edfbbf4b73cc91c82c8ff4c7e7e33de4a07912fe36336fd76349ff3c1a858e41eddcf204cacfaed8395618a9f21064941fde01a59fd2698caf7585a77d5444b599a8731dc8d"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x40000000002, 0x0, [0x40000106]}) [ 942.962436] binder: BINDER_SET_CONTEXT_MGR already set [ 942.977176] binder: 22618:22619 ioctl 40046207 0 returned -16 [ 943.004169] binder: 22618:22646 unknown command 64 [ 943.018745] binder: 22618:22646 ioctl c0306201 20007000 returned -22 [ 943.068906] binder: undelivered TRANSACTION_ERROR: 29201 [ 943.077300] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:15:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0xaa}, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000021000f000600100000000630000000000035a6000000000000"], 0x1d}, 0x1}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, &(0x7f0000000000)={"62726964676530000200"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x801, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 1970/01/01 00:15:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x1000000000000000]}}, 0x20) 1970/01/01 00:15:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x6c000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:43 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001240)={0x7c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09631040", @ANYRES64=r2, @ANYBLOB="030000000000000012634840000000000000000000000000000000000000000001000000000000000000000040000000000000001800000000000000", @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYBLOB="856064660000f3ff070000000000fcff04000000000000002d00000000000000856164660000000002000000000000000300000000000000400000000000000060ef417c9ce9315972d435e0"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000020000000000000003800000000000000"], @ANYBLOB="090000000000000003630840", @ANYRES64=r3, @ANYBLOB="04630440010000000d6300000d630000"], 0x1000, 0x0, &(0x7f0000000240)="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"}) pread64(r1, &(0x7f00000000c0)=""/34, 0xfed3, 0x0) r4 = semget(0x1, 0x7, 0x4) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000001280)=[0x8000, 0xc47d, 0x10001, 0x2, 0x100, 0x7, 0x3ff]) 1970/01/01 00:15:43 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pread64(r0, &(0x7f00000001c0)=""/153, 0x99, 0x0) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 943.954935] binder: 22685:22687 ioctl c0306201 20007000 returned -14 [ 943.971082] binder: 22690:22697 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 943.975629] Unknown ioctl 35083 [ 943.978313] binder: 22690:22697 unknown command 0 [ 943.993627] binder: 22690:22697 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002dc0)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYRES16=r0, @ANYBLOB="3fe2020000001490"], 0x1a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000100)=""/255) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'nr0\x00'}, 0x18) write$rdma_cm(r0, &(0x7f0000000240)=@query={0x13, 0x10, 0x10f, {&(0x7f0000000380), 0xffffffff, 0x2}}, 0x18) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000280)=0x4) [ 944.005066] binder_alloc: binder_alloc_mmap_handler: 22685 20001000-20004000 already mapped failed -16 [ 944.015587] Unknown ioctl 1074291200 [ 944.027310] binder: BINDER_SET_CONTEXT_MGR already set [ 944.048207] binder: 22685:22687 ioctl 40046207 0 returned -16 1970/01/01 00:15:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 944.061146] binder: 22690:22707 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 944.066815] binder: 22685:22704 ioctl c0306201 20007000 returned -14 [ 944.068388] binder: 22690:22707 unknown command 0 [ 944.084172] Unknown ioctl 1074291200 [ 944.084177] Unknown ioctl 35083 1970/01/01 00:15:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x6000000000000000]}}, 0x20) 1970/01/01 00:15:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x2000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:44 executing program 6: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) splice(r0, &(0x7f0000000400), r1, &(0x7f0000000440), 0x5, 0x8) r2 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x8, 0x2000) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000004c0)=0x20, 0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000500)={0x7, 0x5, 0x0, [{0x0, 0x472c, 0x10001, 0x5, 0xffffffff, 0x5, 0xb46a}, {0x8, 0x9, 0x0, 0xe5, 0x5, 0x2ff06c74, 0x6}, {0x800, 0x4000, 0x6, 0xfffffffffffff7e5, 0x1000, 0x9, 0x4}, {0x100000000, 0x0, 0x20, 0x7, 0x6, 0x14, 0x6}, {0xa03e, 0x6, 0xfffffffffffffff8, 0x1, 0x1000, 0x0, 0x8}]}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000006c0)={{0xff, 0x1, 0x2c1829ca, 0x1ff, "2e8c7d7787bb3b5e143d36b3c052268d6a5c9c315056a51c0f5af9c37b261605c46c4ae39e63aafd97091a56", 0x50}, 0x8, [0x6, 0x7, 0x400, 0x1, 0x5, 0x20, 0x7, 0x151, 0xc5, 0x3, 0x3, 0x2, 0xffff, 0x7, 0x1157, 0x2000000000, 0xffff, 0xd56, 0x0, 0x1, 0x0, 0x8, 0x7, 0x101, 0x200, 0x4, 0x8, 0xdf, 0x7, 0xc23, 0x200, 0x4, 0xff, 0xc000000000000000, 0x6, 0x1f, 0x5, 0x4, 0x200, 0xfffffffffffffff8, 0x0, 0x9, 0x1f, 0x8, 0x8, 0x2, 0x6, 0x9, 0x400, 0x1, 0xf03, 0x9f3, 0x0, 0x8001, 0xfff, 0x2, 0x7, 0x7f, 0x10001, 0x10000, 0x0, 0x7fe0000000000, 0x2, 0x7, 0x8, 0x188f, 0x8001, 0x200, 0x40, 0x8, 0x81, 0x0, 0x3ff, 0x1000, 0x0, 0x6, 0x0, 0x6, 0xb8c, 0x2, 0x5c5, 0x0, 0x9da1, 0x80000000, 0x3, 0x7fffffff, 0x8, 0x95e0, 0x9, 0x4, 0x1, 0x29, 0x5e, 0x1, 0x81, 0x3, 0x0, 0x6, 0x7f, 0x2, 0x6, 0x8000, 0x80000000, 0x1000, 0xa63c, 0x7, 0xf2, 0xffffffff, 0x9, 0x4, 0x20, 0xa, 0x62a75455, 0x4, 0x9, 0x1000, 0x401, 0x8, 0x1, 0x4, 0x3, 0x5, 0x9, 0x6, 0x6, 0x80, 0x2, 0xffffffff], {r3, r4+30000000}}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000bc0)=0x6) ioctl$void(r1, 0xc0045878) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000c80)={0x7, 0x1, [{0x100, 0x0, 0x6}, {0x4, 0x0, 0x338b}, {0x20c5, 0x0, 0x9}, {0x3, 0x0, 0x8}, {0x0, 0x0, 0x3}, {0x6}, {0x1, 0x0, 0x7c6}]}) readv(r0, &(0x7f00000021c0)=[{&(0x7f0000000d00)=""/81, 0x51}, {&(0x7f0000000d80)=""/226, 0xe2}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/249, 0xf9}, {&(0x7f0000001f80)=""/167, 0xa7}, {&(0x7f0000002040)=""/196, 0xc4}, {&(0x7f0000002140)=""/113, 0x71}], 0x7) recvfrom$ipx(r2, &(0x7f0000002240)=""/34, 0x22, 0x40012002, &(0x7f0000002280)={0x4, 0x101, 0x3, "e26d5bb83070", 0x2}, 0x10) modify_ldt$read(0x0, &(0x7f00000022c0)=""/174, 0xae) mount(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)='devtmpfs\x00', 0x2000, &(0x7f0000002440)="aa8c49733ed08d545b328bdbf4bc46eb9c10aac260cb710ab850a66530436fce7b20f5ba7695d00da6cbe0eb2f23f1b9") ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000002480)={0x6}) r5 = memfd_create(&(0x7f00000024c0)='/dev/adsp#\x00', 0x1) r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000002500)={0x0, 0x8}, &(0x7f0000002540)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000002580)={r7, 0xf2, "8dd0dd2f1cd63c7533e0eb723d774030726a714c11026c99f78376039f4771d2887061df9c4941b4d5cadcf74f983662e93d6efe5fd6aee50e2881c29b6d7b992e520b50c14670f417899809693d06b1ebf4078018db58e9bf88ddeb7983c3940b3b23f167ba4199a395331c4e2b8f04c0f96522f40d975a7f7d0a6a60079fc75972a3f13e57ec886888463a466b05144c1d58310f7446ac11851892874d48ce84e204b19dcccccf265fbf155ca36908ac1052f309aebe2724957dc55a1432a4d66212fcfae39630f14199dd54b20057dcca923d0008d1fed5022cd3b139606f0580a13c435705cfd41f076a5df8acfad065"}, &(0x7f0000002680)=0xfa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000026c0)={0x1, [0x0]}, &(0x7f0000002700)=0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002740)) signalfd4(r2, &(0x7f0000002780)={0x1000}, 0x8, 0x800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000027c0)=0x1, 0x4) shutdown(r5, 0x1) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000002800)) execve(&(0x7f0000002840)='./file0\x00', &(0x7f0000002a00)=[&(0x7f0000002880)='.$nodevselfppp1\\mime_typekeyring@\x00', &(0x7f00000028c0)='\x00', &(0x7f0000002900)='devtmpfs\x00', &(0x7f0000002940)='\x00', &(0x7f0000002980)='cpuset]cgroup-\x00', &(0x7f00000029c0)='devtmpfs\x00'], &(0x7f0000002c80)=[&(0x7f0000002a40)='mime_type\x00', &(0x7f0000002a80)='/dev/adsp#\x00', &(0x7f0000002ac0)='cgroup.threads\x00', &(0x7f0000002b00)='\x00', &(0x7f0000002b40)='devtmpfs\x00', &(0x7f0000002b80)='vboxnet1trustedlovboxnet0\x00', &(0x7f0000002bc0)='/dev/adsp#\x00', &(0x7f0000002c00)='cgroup.threads\x00', &(0x7f0000002c40)='\x00']) r8 = accept4$inet(r2, 0x0, &(0x7f0000002d00), 0x800) setsockopt$inet_dccp_buf(r8, 0x21, 0xe, &(0x7f0000002d40)="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", 0x1000) 1970/01/01 00:15:44 executing program 7: r0 = socket(0xa, 0x1, 0x0) write(r0, &(0x7f0000000280)="548bb41bc8418e01e8dd0decc9d5fcef1b5db624aadb6f961cd6e865123b1a3ffdbb8f3043ff4018dca2d80eca5ba93ac96a0f3e0c9f898e17da2aa6221acd057752d97dafb937d377575cfec099f0ffb4a8ad0c73cc0e6533f72300c49e539f310c625d833060a53d6e00ac53a65095a39b7c1379c5bfe922a59d566d2f8a8a81362c7eec8dcdecbca1402b859ba83902fc1a0405d151e83be46b75022b32f06b3b175e18a48431115910d5c14f2362d56ad5131656680fe5b0e4ddb8961077f91758846e705e4a4d9596ee76e307a731b5034c", 0xd4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006740)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000006780)={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @empty, 0x2, 0x4, 0x3, 0x100, 0x3, 0x100200, r1}) acct(0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1970/01/01 00:15:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "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"}, 0x1004) [ 944.127974] binder: 22690:22707 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:44 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)='F\b\x00\x00\x00\x00\x00\x00\x00\x00\x00') prctl$setmm(0x23, 0xf, &(0x7f0000ffb000/0x4000)=nil) [ 944.248486] binder: 22724:22729 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f00000000c0)=""/238, &(0x7f00000001c0)=0xee) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) [ 944.303801] binder: 22739:22740 BC_INCREFS_DONE u0000000000000000 no match [ 944.310959] binder: 22739:22740 unknown command 0 [ 944.320374] binder_alloc: binder_alloc_mmap_handler: 22724 20001000-20004000 already mapped failed -16 [ 944.358577] binder: BINDER_SET_CONTEXT_MGR already set [ 944.372364] binder: 22739:22740 ioctl c0306201 20007000 returned -22 [ 944.379644] binder: 22724:22729 ioctl 40046207 0 returned -16 [ 944.386572] binder: 22724:22742 ioctl c0306201 20007000 returned -14 [ 944.401056] binder: 22739:22749 BC_INCREFS_DONE u0000000000000000 no match [ 944.408192] binder: 22739:22749 unknown command 0 [ 944.440073] binder: 22739:22749 ioctl c0306201 20007000 returned -22 [ 944.525008] Unknown ioctl 21540 1970/01/01 00:15:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x6000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x3f00]}}, 0x20) 1970/01/01 00:15:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x50) io_setup(0x5, &(0x7f0000000000)=0x0) ftruncate(r0, 0x1) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)="9e", 0x1}]) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0xa0, 0x80, 0xff, r2, r3}, {0x0, 0x0, 0x0, 0x200, 0x5, 0x8, 0x1, 0x6}, {0x100, 0x3, 0x200, 0x7d}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x3, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0xff}, 0x2, @in=@broadcast=0xffffffff, 0x34ff, 0x3, 0x0, 0x5, 0x0, 0x200, 0xaf56}}, 0xe8) 1970/01/01 00:15:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x256) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406306, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x7, [0x2, 0x8, 0x5, 0x6, 0x0, 0x9, 0x6]}, &(0x7f00000001c0)=0x12) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:45 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pread64(r0, &(0x7f00000001c0)=""/153, 0x99, 0x0) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:45 executing program 6: r0 = socket(0x10, 0x802, 0x0) gettid() fcntl$getownex(r0, 0x10, &(0x7f0000001dc0)) fcntl$getownex(r0, 0x10, &(0x7f0000001e00)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001ec0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001f00)={0x0}, &(0x7f0000001f40)=0xc) r2 = getpgrp(r1) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r2, r3, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x4}) clock_gettime(0x0, &(0x7f0000000080)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r4, &(0x7f0000000080), 0x162) r5 = memfd_create(&(0x7f0000000000)='\x00', 0x1) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000680)={{0x0, 0x8}, 0x20}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000140)={{0x1ff, 0x7, 0xe8, 0x5, "448cc22f2f30e043070d4c0ef6e69f5e20bd608615c99464782bf80eac6931648325c4a9279633594f5bc810", 0x4}, 0x100, [0x8000, 0x9, 0x2, 0x2, 0x5, 0x5, 0x8, 0x1ff, 0x5, 0x9, 0x401, 0x1ff, 0x94aa, 0x1000, 0x5, 0x9, 0xffffffff, 0x80000000, 0x2, 0x5, 0x1000, 0x3, 0x3, 0x9, 0x7275, 0x8, 0x8, 0x6, 0x3, 0x646, 0x100, 0xd50, 0x1, 0x6, 0x7, 0x1000, 0x7, 0xfff, 0xd113, 0x8, 0x2, 0x58b, 0x0, 0x80000000, 0x10000, 0x6, 0x0, 0x5, 0x73ce, 0x9, 0x1, 0x1, 0x7, 0x7aa, 0xfffffffffffffffb, 0x80000000, 0x4800000000, 0x9, 0x800, 0xff, 0x6, 0xffffffffffffff05, 0x79cf1fe9, 0x3139, 0x800000000, 0x5, 0x487a, 0x1ff, 0xf0, 0x2, 0xd672, 0x4fbf, 0x1000, 0x1, 0x1, 0xfffffffffffffffd, 0x7, 0x3, 0x8, 0x2, 0x4, 0x3, 0x5, 0x8, 0xf8df, 0x4, 0x0, 0x4, 0x5, 0x79, 0x7, 0x4ef, 0xfffffffffffff94e, 0x3, 0xb3c8, 0x5, 0x1000, 0x138c, 0x101, 0x0, 0x500000000000, 0x4, 0x800, 0x7e1, 0x80000000, 0x8001, 0x6, 0x200, 0xee6, 0x0, 0x2, 0x80000001, 0x3, 0x3, 0xf3a, 0x81, 0x3, 0x10000, 0x2, 0x1, 0x6, 0x0, 0x5, 0x8000, 0xfffffffffffffff7, 0xfff, 0x9, 0x2], {0x0, 0x1c9c380}}) process_vm_readv(r2, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000880)=""/232, 0xe8}, {&(0x7f0000000980)=""/113, 0x71}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001c00)=[{&(0x7f0000001a80)=""/6, 0x6}, {&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000001bc0)=""/40, 0x28}], 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040)=""/125) write(r0, &(0x7f0000000100)="220000001a00070300bed09a0005000f80ff0000000000f6feb16f040000fbe80000", 0x7) mount(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)='rootfs\x00', 0x1, &(0x7f0000001d00)="29eb941a943041d3d7455fa0b89255259ae45ba39a407a54beae484fd899479a633589c9c55bdea0e932ddb242b11a52ece44dea55522404164b49cb8f963986c491b6be67462282652d1bdaa25509608673f96f993203495a5dc4c8e3f7b002de084cba934b1628d525a5dc06150be4af77c479e0e5200ede56cab1544103ad2e888cd29e245ade06d0e551304882d9575bfc1c6e0a5b921cad9121ce1f47e0eb6e56f45f0b72d2fb45b4e87cacd5f9bfe19e005fdfdff60b86799e51c4") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)={&(0x7f00000000c0)='./file0\x00', r5}, 0x10) [ 945.129547] binder: 22768:22770 unknown command 1077961478 [ 945.131619] binder: 22769:22773 ioctl c0306201 20007000 returned -14 [ 945.158196] binder: 22768:22770 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:45 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x80000000c8, &(0x7f00000001c0)=0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffc01}}, [0x5, 0x7ff, 0x9, 0xfff, 0x2, 0x2, 0x200, 0x9, 0x200, 0x3, 0x1, 0x6, 0x1, 0x3, 0xff]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x4}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000a42fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000bcf3f)}]) io_getevents(r0, 0x0, 0x1, &(0x7f0000e72fe0)=[{}], &(0x7f00009ca000)) 1970/01/01 00:15:45 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x101000) getpeername$ax25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 945.188680] FAT-fs (loop7): Directory bread(block 128) failed [ 945.208380] binder: 22768:22790 unknown command 1077961478 [ 945.229405] binder_alloc: binder_alloc_mmap_handler: 22769 20001000-20004000 already mapped failed -16 [ 945.238107] binder: 22768:22790 ioctl c0306201 20007000 returned -22 [ 945.256542] FAT-fs (loop7): Directory bread(block 129) failed [ 945.267534] binder: BINDER_SET_CONTEXT_MGR already set [ 945.273349] FAT-fs (loop7): Directory bread(block 130) failed 1970/01/01 00:15:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xe]}}, 0x20) 1970/01/01 00:15:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 945.284526] binder: 22769:22773 ioctl 40046207 0 returned -16 [ 945.292079] FAT-fs (loop7): Directory bread(block 131) failed [ 945.299149] binder: 22769:22793 ioctl c0306201 20007000 returned -14 [ 945.306163] FAT-fs (loop7): Directory bread(block 132) failed [ 945.313493] FAT-fs (loop7): Directory bread(block 133) failed 1970/01/01 00:15:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x1200, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 945.340320] FAT-fs (loop7): Directory bread(block 134) failed [ 945.372555] FAT-fs (loop7): Directory bread(block 135) failed 1970/01/01 00:15:45 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a00130700000000000000000000000000000000000000000000000000000000000000000000ffffac20ffaa00000000000000000000000000000000ab4b0a291c77004c794b54040f6f24eb3d340828b3b3ba4f0471", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009effffff"], 0x138}, 0x1}, 0x0) 1970/01/01 00:15:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendto$ipx(r1, &(0x7f0000000080)="d0e87ef23b090d926d8b9584a332f52cd7877e669fab058164c11a2627d618cbd90556f49c6e98c12320c11abbc1441cdf85d88f2b5b6906d40bc0b240527228b26c9a58aa7654b0c145f8f3eea98a9d769f45d6e18162d776836757cb9963dace1eac2125fbfc072df4944c29ef8b602a93dd69cb88b304d3cde5b7ba1b100aedb2f4dbd94fa7a67c23df1b55b3df255ff4", 0x92, 0x40000, 0x0, 0x0) [ 945.408163] FAT-fs (loop7): Directory bread(block 136) failed [ 945.420710] binder: BC_ACQUIRE_RESULT not supported [ 945.437256] FAT-fs (loop7): Directory bread(block 137) failed [ 945.448000] binder: 22815:22816 ioctl c0306201 20007000 returned -14 [ 945.458944] binder: 22812:22813 ioctl c0306201 20007000 returned -22 [ 945.476984] binder_alloc: binder_alloc_mmap_handler: 22815 20001000-20004000 already mapped failed -16 [ 945.481357] attempt to access beyond end of device [ 945.491579] loop7: rw=2049, want=290, limit=128 [ 945.496541] netlink: 72 bytes leftover after parsing attributes in process `syz-executor6'. [ 945.509129] binder: BINDER_SET_CONTEXT_MGR already set [ 945.514833] binder: BC_ACQUIRE_RESULT not supported [ 945.524643] binder: 22812:22824 ioctl c0306201 20007000 returned -22 [ 945.532158] binder: 22815:22816 ioctl 40046207 0 returned -16 [ 945.550672] attempt to access beyond end of device [ 945.555781] loop7: rw=2049, want=290, limit=128 [ 945.580545] binder: 22815:22831 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x7900]}}, 0x20) 1970/01/01 00:15:46 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pread64(r0, &(0x7f00000001c0)=""/153, 0x99, 0x0) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x17fe, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:46 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x3, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000a0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x2) 1970/01/01 00:15:46 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x6002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) flistxattr(r1, &(0x7f0000000040)=""/89, 0x59) pread64(r1, &(0x7f0000000100)=""/204, 0xcc, 0x0) 1970/01/01 00:15:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x600000000000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="1797cca9c9affdc228663cbfc0381b9f274b4244c313beae4957cc720b054b8dc565ef82c8ebc765fa7438a920d830689b564c9f74489f8d39db25cbfff756ce3e150550ad3725cb958f744e6584caf60061fda15185fddcc0685d84a1cafc3cdf72c89dce2a5905dcbb135712ab9e035a92b312b153829e693b8e7cf66346122a79b52039ed26de4f0984edab93d7fdd9600d4a54b25d0d2c178e1e5c8098662342cdddcf68e0aee815a52df8d346b197499b6f71f4a2ad258018682ddfb82d19ea17169a661b3644f47d06f322", @ANYPTR64, @ANYBLOB="f5f28475dd27462198e9101ecdd2b64f7ca52826e0a8dfb7cfaf3b937d856d7d73abf2f13d61b4c8b201dbb446fa3a20a4b1cdc3663920ae7d1e3e2f2125a563763ea4d7cd7ef8c324abe473da479c11df884a306669029c301ed9eedb5e2fe4685dba0e90dc45f2bf39e213ada7477bc27942691ee862d0a44d81222376dc208750b217c3ab", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR, @ANYRES16, @ANYRES64=r0, @ANYRES32=r0, @ANYPTR, @ANYRES16=r0], @ANYBLOB="b425bf7d95f10e69239838336d65d2d25d102135ce79f99479e08537f5cbfb9ace44fc597024d589bb25a862c3f4bb212cedef722dadf966d06875d0ed9cb4bbcfd05bc349ba596ac37d2d85ed2c7c42315cbfa031ee2aa34a818764", @ANYRES64=r0, @ANYRES16=r1], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="c8568dcca995da28cfbcd05ce7eb233bbfa774c69c43871da8bab94563abcee88fd06a7f79daf123c8764b7e8790c23b7d3fac2475d9ce217f5b29f57e81822bcca79e0b82ff05df9edfa8df39fa247e0ffafd396064d7b816", @ANYRES32, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYPTR64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR, @ANYBLOB="24dc5aba34ce037d6d221c2677f60fa5f6bafe67b488a3ca47383736afab6b1b23741760e424528ce228d8fb9b59a451e7b1911c1c55ab8e8de67a5178bbda678757f559369099132431c0f988f524016efb07bee28c930bb6f6c6ef2d68d12d2f1057d1b42a04ac1498846d3cb852cf0e41e10fb32ec57db355f59cb54d3d997bc56b40d885bc5b47cc4d8e021571f9c1cdc638f177686f8a95f801aa6cada78f1272aae1fe591535d442513658d8fa5d4ed2480d3baf39b58bc5325bebebe37c6fa39669a3bbc5f828221961fd6e4e5f2409d0297fee0a9d464b93"]], @ANYPTR], 0xffffff26) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) [ 946.511309] binder: BC_ATTEMPT_ACQUIRE not supported [ 946.525857] binder: 22853:22857 ioctl c0306201 20007000 returned -14 [ 946.543409] IPv6: Can't replace route, no match found 1970/01/01 00:15:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$netrom(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 946.566792] binder: 22849:22851 ioctl c0306201 20007000 returned -22 [ 946.579976] IPv6: Can't replace route, no match found [ 946.593673] binder_alloc: binder_alloc_mmap_handler: 22853 20001000-20004000 already mapped failed -16 [ 946.610724] binder: BC_ATTEMPT_ACQUIRE not supported 1970/01/01 00:15:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x8]}}, 0x20) [ 946.622523] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:46 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) 1970/01/01 00:15:46 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1006, 0x88001) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280), 0xfffffcda}], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0x8, 0x4, 0x80, 0x6, 0x3, 0x1}, 0x7fffffff, 0x7, 0x1000, 0xcdd, 0x9, "3affe59911fb567686ca1b81a7e45cc4834ea16c0e43114aec8f2edce4f7af6f98831f2ca29677734279b10e0e120f25094e477bf949eb18f4c9d7ec35b34484ec16fc6a2265acd325005f6239aba16aec3348dad9fdeeb7b9fc999c891bd958ae7b15854d9e07826cee50673a7e563f0c31b7ec333df1ebd8bd32f62cecfdd3"}) [ 946.659616] binder: 22849:22864 ioctl c0306201 20007000 returned -22 [ 946.684734] binder: 22853:22857 ioctl 40046207 0 returned -16 1970/01/01 00:15:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x0, 0x70bd28, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x5, 0x8, 0x100000001, 0x44, 0x0, 0x8, 0x28400, 0x2, 0xfffffffffffffffc, 0xfff, 0x10000, 0x1, 0xfffffffffffffffd, 0x8, 0x0, 0x4, 0x7d3, 0x1, 0x6, 0x8, 0x6, 0x9, 0x200000, 0x2, 0x2, 0x4, 0x100, 0x3, 0x1, 0x8, 0x800, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6f9aca0f, 0x3}, 0x1081a, 0x3, 0x4, 0x7, 0x200, 0x4, 0x8}, r1, 0x0, r4, 0x3) [ 946.738122] binder: 22853:22878 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 946.873130] binder: 22894:22895 unknown command 0 [ 946.904707] binder: 22894:22895 ioctl c0306201 20007000 returned -22 [ 946.937390] binder: 22894:22899 unknown command 0 [ 946.942432] binder: 22894:22899 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x10000000000000]}}, 0x20) 1970/01/01 00:15:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0xffffff7f00000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:47 executing program 7: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vcan0\x00'}, 0x2bf) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000000), 0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fedbdf25080000002c0001000800060077727200080004004e210000080002007f000000080009007d000000080006007772720014000200080002004e21000008000400000000000800040001800000080005000100000008000500000400000800050001000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x8001, 0x2, 0x100, 0x80}, 0x8) 1970/01/01 00:15:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x440000, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000680)=@generic={0x1000, 0x7, 0x3ff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8b) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setgroups(0x2, &(0x7f0000000300)=[r3, r4]) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)={r2}) r5 = socket$netlink(0x10, 0x3, 0x5) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d06073641ba74787f63a06ae767e3da8e3368cb48c937ae1b208cc6695e20a3b2ce84e8e4d4a1eac798e7c1ffa3a083567f172159b4aec908b3a5a00a153be59330c59128271a5c93f02f7e161c5918f281fe0bf48960f65000691541351e36e390057e9f2b1363f4cfa21073ba16641ba2951dc7ce65065646a9c55d6d61012923432ae753e2068a79ac06136ea", 0x8e}, {&(0x7f0000000480)="c99067f560a93f62fe47e2a081", 0xd}, {&(0x7f00000004c0)="52c86e4722a90a2a6cbd7cebfe8cc821fe795ccf8e6572ac32b49622da6869010bdb84845ff9aca88741defebbeb95da0f3fb19631ebe1c691f91a34ac3dd94c27badb8448eaa5960260792021bf3d3175d86321b5ceb239", 0x58}, {&(0x7f0000000540)="f6bfee5a99a1b5cd2dae772a999d91cb25eec64fcbafb454ad047b4dfeec30c5df620b77cc24ff8f014d157b71abb160849d2c5ab4f6dc84f22b70391de288966147891dd686d722db6fb848c22985831e92c376623e68137c16f66c577305f59fd1cfa3e6c9acc629cc4eda364c1f6fc8788f1972097265e973938cad485690", 0x80}], 0x4, &(0x7f0000000600)=[@rights={0x30, 0x1, 0x1, [r0, r1, r5, r0, r0, r1, r1]}], 0x30, 0x24040894}, 0x4040800) 1970/01/01 00:15:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d2e73797374656d2e706f7369785f6163d2fd61736365737300"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0xff0a, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) socket(0x5, 0x801, 0x1) 1970/01/01 00:15:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000140)={0x34, 0x2c}) r1 = getpgid(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='setgroups\x00') getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000001b40)={'filter\x00'}, &(0x7f0000001bc0)=0x78) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ipddp0\x00', 0x200}) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getgroups(0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff]) getresuid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b00)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) getresgid(&(0x7f0000000c40), &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)) lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001640), &(0x7f0000001680)=0x0, &(0x7f00000016c0)) fstat(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)="f7850ef5b554da6af69365dfcc0157c0c4dacf2e413738948cccc4c7d7e9a163d24857f44166392d06e961a5cc51ae3d9a5cf0892f6b9fa1d5f593e19fc725ac7e269ebb7b21224dec524de0dcff8d9a83176bd753c55d373bd8d5a90eb0563a8d0b3129c2197ef05444f9c52b5fa984aa6f2693e8808ef3b75f61ab937963aa94c484af4c8d9deb2f3879d78a3300e8800360b85bbe0b6cd625f4f7aef481ac2d05fe4515", 0xa5}, {&(0x7f0000000200)="148b70", 0x3}], 0x2, &(0x7f0000000640)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r3, r0]}, @rights={0x20, 0x1, 0x1, [r0, r3, r3]}, @cred={0x20, 0x1, 0x2, r2, r4, r5}, @cred={0x20, 0x1, 0x2, r1, r6, r7}], 0x88, 0x20000000}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000780)="183ca20b7b5052df882507fc85901f81cf5c28cddbd608fa39e5ec988c2c5595daf797f24ad73c5f0e7006e7c42a1fce4f23194622f64b5a197ce1982fd2853e94684a779acc434de3c501a7da63cbed6f0cdc742110620333d10cf79da280e8c9ccac630047edefb6b7b49c42c067517a4ed95bffaecc18ab0fff71e26c81f8a7515349250528ff71469ab538c10b4dfc73fa1dea4996dde7e808a44aab45de348775fc26abee12f4855b9c522977c08bf60d6f07b95468b74b79e8da11f1e94288cabc00fa611e6844eba6058a8df5d8735ab3e74f0d67ff96683d168c8badc54b9a", 0xe3}, {&(0x7f0000000880)="08cde50d4d63a363855afb8d97260fa2b225b88822f114867c9169dc38", 0x1d}], 0x2, &(0x7f0000000e80)=[@cred={0x20, 0x1, 0x2, r1, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r0, r3, r3]}, @cred={0x20, 0x1, 0x2, r1, r10, r11}, @cred={0x20, 0x1, 0x2, r1, r12, r13}, @cred={0x20, 0x1, 0x2, r2, r14, r15}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xd0, 0x40000}, {&(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001000)="0a63e3d4029911db268ccb108f9d3aaa7a204452cc7a74907a5daef96e6a863ff7e7879e61c01485d223264c4346d822a1fc39081044419134db9166c8414a68", 0x40}, {&(0x7f0000001040)="40f4214d4840759ecc872c5ea44463a0e69215b0e86d07f1d7ce81d56a39e63c96840367ac2b173f7e270022816528dd866b2eba00ffb73b31b6f020e535c18c46fecad66382afe2bd2e2cd1a056477e6645eff0cc9cef6355bf794fc071fae218881d590f6b3a272598a6924276bd0a3894250203a75b52b78517e27499cc8406c6171f1cbd1f3c83aefd0072defb9e1e76", 0x92}, {&(0x7f0000001100)="c2ae43b1437f59df49ac93a1d699c39504910321ceed4d834e5a8ef67448ad390c633d32fbdf4c5c2aaadb8850047d8a0ee234c74b89192488dd09d61047d44a870191de40685350048c24c8fa9f517b478c3b895d20dbdbec7fe6483bd1c466e814f719bddc850452251e14f657f35adb1f781de336b07387299da8083c1acc3b5a34fbfa69da55d565cf5aae569acf055024526bbfa892c6547c6e065384fdc9ca945b2a24", 0xa6}, {&(0x7f00000011c0)="b0773e9b3739527dc867fe4da36ecd7cac92fa0c27821bd2a44890fd456192b22b9be3dfa575e8a115842412546a45f5e1294e3298af2493ae4245df700868cf4be87078a5aabe7ef63d0605f3624cf8a2481dfbcdfbf13391d0e59457289f2e234e81cc4c0a434774927331ee4cbedecf424a110628187a171cb0e3759927df271cf017a026f9750c3813", 0x8b}, {&(0x7f0000001280)="4d35645a5288d4c499184070667949381fa662452f648d1edecd237ec73e2972f59230958249776999588765eb7991a70ee9f8d579a9b75ba79adac1550d2f8cb73b4170cd9aae6f7103d15ad05d0a99643ea5b4918c817c0bd62ca862e6000b8a061500508614ad7bd10e5f7fadd34bda292fd2be3b040d681399839beebaa86e6a06ad517378a4487e940ffc428fb36bb017e5cd253a0148cf64131ae75c8572bf37f68f3cca72ba26d00e1c75fce0d53fb02fc765e4b79b16d0bfc582c306702be935", 0xc4}, {&(0x7f0000001380)="f7e3d364be7dad7837bbe383312e63d564f998d255b641b2a2c383f93f856acce8113cfa0fe464f5c9f1679c7e4fc925629a248127e65243d67c1b2c6a56e52629acc628fd1d678aca4bdc30a9fd27d78e9adcb835fe8fa3fcf7351f194141ce8204b0858fd1c17882a8cbd4dbdc292420102d2f5c18680d477ff4913753646f1e0009e1a63efe88080ed91466ec4b55eab3ecfc11b38e98a894b288c683bd689cc851555d2d3a4027695eda0aa1241981b4fef6189b9b080af327b616afb90677d6d1cffb", 0xc5}, {&(0x7f0000001480)="b5ac962d73bc2ccc666acf97a259b3881925c664df374082762d761b150bbf4815e2c55fc7959cc6eaea200d8a2b21336ee1bc89680604ab366c373c99df9b5321ade734fcdc60730ffd3136512c267cfb1ba688602fc42870fde6156a769e463ff804553624da6949725dfadd0f9309764a33365c7da79efbbe", 0x7a}], 0x7, &(0x7f0000001800)=[@cred={0x20, 0x1, 0x2, r1, r16, r17}, @cred={0x20, 0x1, 0x2, r1, r18, r19}, @rights={0x28, 0x1, 0x1, [r3, r0, r3, r0, r0]}], 0x68, 0x8000}, {&(0x7f0000001880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001900)="b8751f1983cb2d6c772dd8d1c83b15cef6e74b867b9575d3256b63b31dfb8f708dea9c831a0c865c04142daf18dc1f8b8f5970611f71ab9050bba94163d16fe38ac67bd6dcd268fc2a1193b28a040993c8cd04f3394c47be6da649216ccb74c8e623da9766f21beaaacf06babbe6", 0x6e}, {&(0x7f0000001980)="c440b043d54ad51c7b890ec91b513aaa2ed4ebb345afca6029690cae8756a046fde9627145b57a7e9085a3c46ac38c2cb41633bc2d84caec2c09", 0x3a}], 0x2, &(0x7f0000001a00)=[@rights={0x20, 0x1, 0x1, [r3, r0, r0, r3]}, @rights={0x18, 0x1, 0x1, [r3, r0]}], 0x38, 0x20000040}], 0x4, 0x14) write$cgroup_pid(r3, &(0x7f0000000280)={[0x0]}, 0x1) 1970/01/01 00:15:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pread64(r0, &(0x7f00000001c0)=""/153, 0x99, 0x0) 1970/01/01 00:15:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 947.799439] binder: 22912:22914 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 947.807410] binder: 22912:22914 unknown command 0 [ 947.815261] binder: 22918:22919 ioctl c0306201 20007000 returned -14 [ 947.836306] binder: 22912:22914 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:47 executing program 7: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000140)=0x1c) lseek(r0, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x11, &(0x7f0000000080)=""/17}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x100, 0x2, 0x6, 0xb, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000180), &(0x7f0000000080), 0x3}, 0x20) 1970/01/01 00:15:47 executing program 3: r0 = socket$inet(0x2, 0x8000f, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf0]}}, 0x20) [ 947.876382] binder_alloc: binder_alloc_mmap_handler: 22918 20001000-20004000 already mapped failed -16 [ 947.884477] binder: 22912:22936 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 947.894133] binder: 22912:22936 unknown command 0 1970/01/01 00:15:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f5e170fe4ce6be4fa6c4389d54fca508e98bd9fc89e0d112a9e7b6c29d66cf79d55691b102986ed3b959004baf63b002bfc1a29cf07e754560fc4695037012547959eed0b7ff1d66b99b10aacb049699fc5115caca3a91472f0ff77716b0018e98ed9c4b81a78385b2fdfb02ec3d8e41c8bc2ba276413ca8d51300800000000000000cd") getsockopt$sock_buf(r0, 0x1, 0xe, &(0x7f0000002500)=""/4096, &(0x7f00000000c0)=0x1000) [ 947.938128] binder: 22912:22936 ioctl c0306201 20007000 returned -22 [ 947.948299] binder: BINDER_SET_CONTEXT_MGR already set [ 947.965377] binder: 22918:22919 ioctl 40046207 0 returned -16 [ 947.975835] QAT: Invalid ioctl 1970/01/01 00:15:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 947.995767] binder: 22918:22934 ioctl c0306201 20007000 returned -14 [ 948.012329] QAT: Invalid ioctl [ 948.020390] sock: process `syz-executor6' is using obsolete getsockopt SO_BSDCOMPAT 1970/01/01 00:15:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0xffffffff) 1970/01/01 00:15:48 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0xa00000000000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:48 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x4) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="4750696ce34203101352b5658c4df8467e2932c7bce054c62ee7bb93db4e3dfd58b379da4137f731df9c8c5fd80f8f3ad66c64a7d79a3dc3ddc871a03a4a1094a6a82618f1ddbd5e466b3b8287e32408516155187c9cdd579019dde43695fec0a8e4440e075c513f00a9e561ed86bd0b83a69f233738f5d4c7b3f3466c4d3622eb9c26613349ea18376461f58856ccd9781e26bf9df153a06461e54711f68c1dd841f96d649fefc39e26a7f9952b7d2b7c075bd9da5e36c8d2fdee0689d3cbfbdfe6d459a4f9dc6a54b4", 0xca, 0x7}, {&(0x7f0000000200)="dcd4bf1878058d7b89eae1fa4bb597bf915d15aa390895231fce49608f8d68e0bacdfb4f99e7c42c762479dd330e023ec467f1216b9e50264cb389f33f298d63c5cf2b616e0b7d95d86319b041d559835114fdc2609aa536c454d63fd59c14f5f2ee0fffa2db5f858ba14cb71f28d6bb3a546386701523be6c426134a955b9eea795a508fc6ac573047e0587c4adc50b95da042bf9ee2af6af230cd28023ccff8b4a463101810dc84a66b763c9ac5270986daf3d1a0a311ac9e0dc369f4a04226de7dfe36172c88607b4518231b8f3319ee096", 0xd3, 0x5}, {&(0x7f0000000300)="56571654a04c376202af45c34d2911dee49285d244eaa07cfed1858b9cdbfd2cea8d5745fc4fcf9e20ed7bae45bdfd52972f05b1afbcbdab55f6b7212c51fa97f90fa2d42409eca20157913451d396cab9013b33199f82084bce80887401081ee310c28d54953b", 0x67, 0xfffffffffffff000}, {&(0x7f0000000380)="f331b71dbcc654f1265afdb1f8a98ebaa0b8a25b029481016ae26328362f0e25627ea900fc4fd22260fe3fcbaaf5a9be9f5faf42f2f0b6921b2387751d638652b6412902dd1f003f1101894b007bd9c6bae391d4bcf44435c8a1c00b4eb458de6bb6e821be2124b205248768f8b2ed65d7c6907258e729dcfd1486d857cd0ee33a801780afdfaaca94ffd1c11fd00ef24336d96556c14592f4f812a8c3699314453b8eab5260f51ba610b7a1148c2abbc446800b904f6e461b2108bd8170a2b11f30faa57c1f3a6bc58221c5985df462b38db85b7e8834dbd21594a874cdb65c7d4021986141e22e9c6fbc30231472bd71b29667", 0xf4, 0x5}, {&(0x7f0000000480)="a8debe3dd3060ce99995585074226c622c983b38c34db0ea1720c790a328b13fd3033e7333", 0x25, 0x9}], 0x20021, &(0x7f0000000540)={[{@errors_continue='errors=continue', 0x2c}]}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x27, "90d66ccd377d92be4430b41e843d8e25c544b039dcaa80528f40e5d06a737095c896533ddf6a25"}, &(0x7f00000005c0)=0x2f) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={r1, 0xdbdc}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={r1, @in6={{0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80000001}}}, &(0x7f0000000740)=0x84) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000780)=0x0) fcntl$lock(r0, 0x0, &(0x7f00000007c0)={0x2, 0x4, 0xffffffffffffb28f, 0x0, r2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000800)=0x3f) fcntl$setownex(r0, 0xf, &(0x7f0000000840)={0x0, r2}) uname(&(0x7f0000000880)=""/238) execve(&(0x7f0000000980)='./file1\x00', &(0x7f0000000b80)=[&(0x7f00000009c0)='/dev/vcs\x00', &(0x7f0000000a00)='errors=continue', &(0x7f0000000a40)='errors=continue', &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='/dev/vcs\x00', &(0x7f0000000b40)='errors=continue'], &(0x7f0000000c80)=[&(0x7f0000000bc0)='\x00', &(0x7f0000000c00)='jfs\x00', &(0x7f0000000c40)='mime_type\x00']) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000cc0)=0xffffffffffffff6d) ioctl(r0, 0x1, &(0x7f0000000d00)="5be9b145b9bc69be94642f95e527ee9510e7107155388a5b7c") ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x5) r3 = syz_open_dev$usbmon(&(0x7f0000000d40)='/dev/usbmon#\x00', 0x4, 0x40000) fadvise64(r3, 0x0, 0x1, 0x3) r4 = syz_open_dev$vcsn(&(0x7f0000000d80)='/dev/vcs#\x00', 0x400, 0x84200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000dc0)={0x10}) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000e00)={0xfc, 0x90a, 0x40, 0xffffffffffffffff}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000e40)={0x3, 0x3, 0x1, 0x0, r2}) ioctl$TCSBRKP(r3, 0x5425, 0x3) r5 = shmget(0x0, 0x2000, 0x54000080, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r5, 0xb) ioctl$sock_netrom_TIOCINQ(r4, 0x541b, &(0x7f0000000e80)) connect$nfc_raw(r0, &(0x7f0000000ec0)={0x27, 0x0, 0x0, 0x6}, 0x10) openat$cgroup_ro(r4, &(0x7f0000000f00)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000f40)) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000f80)=""/245, &(0x7f0000001080)=0xf5) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x10010, r3, 0x0) [ 948.059660] binder: 22955:22956 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 948.066768] binder: 22955:22956 unknown command 0 [ 948.093157] binder: 22955:22956 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x14e]}}, 0x20) [ 948.191510] binder: 22955:22977 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 948.196720] binder: 22969:22974 ioctl c0306201 20007000 returned -14 [ 948.198724] binder: 22955:22977 unknown command 0 [ 948.243176] binder_alloc: binder_alloc_mmap_handler: 22969 20001000-20004000 already mapped failed -16 [ 948.259972] binder: 22955:22977 ioctl c0306201 20007000 returned -22 [ 948.291237] binder: BINDER_SET_CONTEXT_MGR already set [ 948.298481] binder: 22969:22974 ioctl 40046207 0 returned -16 [ 948.300421] binder: 22969:22985 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:49 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000008000/0x4000)=nil, 0x4000) madvise(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x65) 1970/01/01 00:15:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 1970/01/01 00:15:49 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000005c0)={0x7f, @multicast1=0xe0000001, 0x4e24, 0x0, 'none\x00', 0x2, 0x7, 0x78}, 0x2c) accept4$unix(r0, 0x0, &(0x7f0000000240)=0xfffffea9, 0x800) write(r0, &(0x7f0000000400)="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", 0x103) r1 = memfd_create(&(0x7f0000000080)='/dev/vcs\x00', 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000300)=0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$key(r0, &(0x7f0000000280)={0x2000000, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x80000000000000a, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r2 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r2) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="0eb312d4cc0b95886daad7d169430e", 0xf, 0x1}, {&(0x7f0000000140)="b11095ba7511a86cf275497c177cf74afd9f013a77906238c8a23420d2bad69558abe98d82b48fcebc0ce44bfd6c63dc72d0eb8ff9d9b9e9218f58c557036f92d99d199f39951364dfa8f422a9296147c63e745a802015085d1e2a7a2fecbfe7afbc449b13c00148710b480bb290b092099e38fa95f0cdf8c2c8cbaac3b3dcc42fd9", 0x82, 0x5}, {&(0x7f0000000200)="e6aec6f62b4d0889292bf43c3cbbe37b35041d6a76182fa81b4fc3e42d12101eab95dabd1e57f19539280974", 0x2c, 0x3}], 0x901000, &(0x7f0000000540)={[{@expose_privroot='expose_privroot', 0x2c}, {@balloc_test4='block-allocator=test4', 0x2c}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation', 0x2c}]}) 1970/01/01 00:15:49 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630a, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x800000000000000]}}, 0x20) 1970/01/01 00:15:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='system.system.posix_acl_access@'], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000180)={0x4, 0x7}) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x500000000000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:49 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:49 executing program 3: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000078030000b0010000ffffffffffffffffb0010000ffffffffe0020000ffffffffffffffbdeaffe0020000ffffffff0300000013ba2e2fea0d510609f3b2abe41ac3c1fa61d001c4ab2c0f70bfa0410578adfdff7f3df041bf69684157d890412ad1005c185a07a9ba486e9dd799c75ed276a51adb1fab1e77a36cd2811beccf9e48c0160b413f341cc6b1048b790a97d05adc3e4b758bd4c3f9084c9ab26a2f9243", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x3d8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0)=0x8, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000180)={r4, 0x1}) [ 949.180940] binder: 23010:23012 unknown command 1077961482 [ 949.187863] binder: 23005:23006 ioctl c0306201 20007000 returned -14 [ 949.219353] binder_alloc: binder_alloc_mmap_handler: 23005 20001000-20004000 already mapped failed -16 1970/01/01 00:15:49 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000001c0)) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x20000000002) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c62626478523be012cf66f") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5101}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=r1], @ANYRES64=r0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="766572992cf26a1b8db4e3328f7bf519d61cfa56aecd675025d4192edf0fc8d43498f9404dcd356746e5a159bb2755a6a799c33d2de8bf4f05c40f83b2d8e0b528a6cc140380ae5a9e42518eb84b7655575209dc778e170a1cab266405b08e194ecae0f7c787b3d48de421c3f5ea2c82b503b72e991a1b5bc3217defa7a90296887baa6f7baf3ee778bddd58e41deb4af771028fa7d5d371ea", @ANYRES64=r3, @ANYRES32=r1, @ANYRES64, @ANYRES32=r3, @ANYRES64=r2, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r1]]], 0x3) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x5c, @empty, 0x4e20, 0x4, 'sh\x00', 0x0, 0x900, 0x10}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4e24, 0x0, 0x6, 0xffffffff, 0x40}}, 0x44) [ 949.241096] binder: 23010:23012 ioctl c0306201 20007000 returned -22 [ 949.252056] binder: BINDER_SET_CONTEXT_MGR already set [ 949.271018] binder: 23005:23006 ioctl 40046207 0 returned -16 1970/01/01 00:15:49 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000005c0)={0x7f, @multicast1=0xe0000001, 0x4e24, 0x0, 'none\x00', 0x2, 0x7, 0x78}, 0x2c) accept4$unix(r0, 0x0, &(0x7f0000000240)=0xfffffea9, 0x800) write(r0, &(0x7f0000000400)="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", 0x103) r1 = memfd_create(&(0x7f0000000080)='/dev/vcs\x00', 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000300)=0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$key(r0, &(0x7f0000000280)={0x2000000, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x80000000000000a, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r2 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r2) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="0eb312d4cc0b95886daad7d169430e", 0xf, 0x1}, {&(0x7f0000000140)="b11095ba7511a86cf275497c177cf74afd9f013a77906238c8a23420d2bad69558abe98d82b48fcebc0ce44bfd6c63dc72d0eb8ff9d9b9e9218f58c557036f92d99d199f39951364dfa8f422a9296147c63e745a802015085d1e2a7a2fecbfe7afbc449b13c00148710b480bb290b092099e38fa95f0cdf8c2c8cbaac3b3dcc42fd9", 0x82, 0x5}, {&(0x7f0000000200)="e6aec6f62b4d0889292bf43c3cbbe37b35041d6a76182fa81b4fc3e42d12101eab95dabd1e57f19539280974", 0x2c, 0x3}], 0x901000, &(0x7f0000000540)={[{@expose_privroot='expose_privroot', 0x2c}, {@balloc_test4='block-allocator=test4', 0x2c}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation', 0x2c}]}) 1970/01/01 00:15:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x4e01000000000000]}}, 0x20) 1970/01/01 00:15:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x10000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0xec03, 0x40, &(0x7f0000000500)="fa67bd6485706fe1dcb5b81d9064f32c3d2bb036fd8b23a415b330733222507aa2a25a597b9d6f5aa386468e6475a66b5df3c32a885615389e4bf1d1dcdcdd8845141a3fe9f3df2eaa1b256e4fa526a5b7e0056b043fddd6a8ebb258030c9218ccb5d37e572980fb3d82c2d84dc6b152b393aca138df06564291b3b2e015c9958c49d6f7af2b62e31d91c73bfdac0439d6f29fd2cb3028b475ce1919a41df22d608648b12b1b9ddd383379031c2807c171e2fedb9981600177b2a504027b4628e76cfbdb252b3263b5438f94cee0e08c38b0e761", 0x8, 0x40, 0xf4, 0x4, 0x0, 0x6, 0x7, "5e7b397320a7154c377fb64571f1bd2144d7acdc6eb5d58dd761dada36d01fb3a039ef2ebbc110420fd84701edaa97cd8de85041c3a133d26356f24fa05ad8b88db1190cee88e53c05e8952ef31f42e35ebff2e6ba8fa876a33b5abcba351a089efea54d88f7ef6b92f544ffa01b76457f11f36e9db7e47c172ae8279112c9"}) r2 = semget(0x1, 0x3, 0x5177c2c648d2795) semctl$IPC_RMID(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xc000, r3, r5, 0x8000, 0x10000, 0x400) openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) [ 949.302195] binder: 23010:23031 unknown command 1077961482 [ 949.338531] binder: 23010:23031 ioctl c0306201 20007000 returned -22 [ 949.372978] binder: 23005:23038 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:49 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406368, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x6800000000000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 949.503625] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 sh [ 949.534917] binder: 23058:23059 unknown command 1077961576 [ 949.546736] binder: 23056:23060 ioctl c0306201 20007000 returned -14 [ 949.568912] binder: 23058:23059 ioctl c0306201 20007000 returned -22 [ 949.569050] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 sh [ 949.585369] binder_alloc: binder_alloc_mmap_handler: 23056 20001000-20004000 already mapped failed -16 [ 949.611100] binder: 23058:23065 unknown command 1077961576 [ 949.622093] binder: 23058:23065 ioctl c0306201 20007000 returned -22 [ 949.628875] binder: BINDER_SET_CONTEXT_MGR already set [ 949.628899] binder: 23056:23063 ioctl c0306201 20007000 returned -14 [ 949.634417] binder: 23056:23060 ioctl 40046207 0 returned -16 1970/01/01 00:15:50 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x900000000000000]}}, 0x20) 1970/01/01 00:15:50 executing program 6: r0 = socket(0x11, 0xffffffffffffffff, 0x40000000000000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001080)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071008000100feffffff0800000000000000", 0x24) 1970/01/01 00:15:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x7a000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:50 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r0, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:50 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file1\x00', 0xac, 0x4, &(0x7f0000000500)=[{&(0x7f0000000280)="e50c1bfad9d832ff9365d4522e35d49d9bf5f04ca3c2f80847d04d53a7298d9e58c232c4241bfba7fdfa1167df6b981f631cb87c3a06bd52e08e00ced1d14b0402e474dffda13e0366899fe4bcb865ea89ba0ead4e50da8cd178d14a9ea3172040a589ea7bb35e6b", 0x68}, {&(0x7f0000000300)="f4369da79aea94c524e2cfd934f6b9cd42800caf392858da04c5ef84196b8ed4", 0x20}, {&(0x7f0000000340)="05fd284589e1f84b467a2833c8d552be99d7d494a77fc1eab9c66a7f98236ead2c25bb5870d330cf17bbbfd7297ec959e984fd7ce8cdff2ea24075d8b216682a7692200cc353e472fe7262c6d7f0f6daaa47978f21897f9ba93e0e9b00c9a12bba4ef5b2dcc8d795241900ad94da63bc645b45cb0128594d390002666d1c728c7d37010facfc399a31afc3c6275302e6528cd728b1da8b5711ef93e10c1163b0768ae7a8bcd5f4af3012c4fd40b7ec1a144e909415b0aa43e45f318143f01870c1e619b3c11f9a012a56a7abfee6592abe90625f4f332579dae83ff445c3", 0xde, 0x8001}, {&(0x7f0000000440)="dfd10d9ecd6b34823ad688c616a13d8ae9096d9c58c53cea4265c88daa2c890101bcc8c7642af201d0169895a69ee9c53bb4067b9531d2c67a9f4690c73f279dc3c18bd53daffeaa17dd4ae40a376f9bbc576029858c8c7e3d00e4f8f7feadc9b2f6ecde6c1b69442a9576e03e79bffa7e20b13e5a096e7a645f5f98c971982c3dda01e8f95b62c2436ee3062cb115f60c13fdd1c383396b01106c1a91c1169c1ef88a31abc18d06df51cc7331bf67d524b44ecc25d09f70350e80", 0xbb, 0x8001}], 0x80000, &(0x7f0000000580)={[{@fmask={'fmask', 0x3d, [0x31, 0x35, 0x33, 0x34, 0x36]}, 0x2c}, {@discard='discard', 0x2c}]}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x8) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000001c0)) dup3(r2, r1, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@remote, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x6, 0x8, 0x2}, 0xc) 1970/01/01 00:15:50 executing program 0: accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 950.797256] binder: 23084:23086 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 950.804741] binder: 23084:23086 unknown command 0 [ 950.808790] binder: 23081:23082 ioctl c0306201 20007000 returned -14 [ 950.814349] binder: 23084:23086 ioctl c0306201 20007000 returned -22 [ 950.834307] binder_alloc: binder_alloc_mmap_handler: 23081 20001000-20004000 already mapped failed -16 1970/01/01 00:15:50 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0xfffffffffffffd49) r1 = accept4(r0, 0x0, &(0x7f0000000040)=0x11e, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$rds(r1, &(0x7f0000003200)={&(0x7f0000000400)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/138, 0x8a}], 0x3, &(0x7f0000003000)}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0xc9b, &(0x7f0000000080)=0x4) r3 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000007c0)={0x0, 0xce, "c369a72e881401649d81ea5091b28839371f6340d978bbbf98963dbd40b6d08d3f3c3121d0c5919312d8485ca0fbf9ac7a81d58300231886f52c79bfc4c4908549d3b9d0e12d5161485a4bf642c20e5eb9b4dbcac3689d24db9f8decfb15e2737e7bfd28484178cf5aaf344b3e26d55406c7cd31cde1bc782202375297218abc61849393f6d765999074e807f79ca4bdef0e02d7a8089e37ca783d6bc0803c1f1daddfbad5c22bd52644a5a357609a08dded2c616d97bd14737598dc7d951002f74bab66368eed075c635229d0ee"}, &(0x7f00000008c0)=0xd6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000900)={r4, 0x354}, &(0x7f0000000940)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @loopback}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@ipv6_newroute={0x110, 0x18, 0x302, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x30, 0x100000000, 0xff, 0x0, 0xff, 0xb, 0x3200}, [@RTA_MARK={0x8, 0x10}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_EXPIRES={0x8, 0x10}, @RTA_METRICS={0x9c, 0x8, "44ad0f8c147c1ff5116088f9b40337960c03d49aa822865d4b698e93c675a229a96342363ccaa76d0441de0b285df025f41e58354d727d6608f205ebff7b52395fc5cc6bb89cba693832b3852265b5bc5f96bad4e467c65d6f159c6e2db4d35fe9614cb7cee6db51ed2c4f538e871839659ef74c8b5da3bc3a68fb1168eea41aa322560a7af98b9dd429adb5f2ef4be3c808353a08"}, @RTA_OIF={0x8, 0x4, r6}, @RTA_GATEWAY={0x14, 0x5, @mcast2={0xff, 0x2, [], 0x1}}, @RTA_ENCAP={0x10, 0x16, @typed={0xc, 0x0, @u64=0x2}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8004}, 0x40) [ 950.891005] binder: BINDER_SET_CONTEXT_MGR already set [ 950.896051] binder: 23084:23100 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 950.904153] binder: 23084:23100 unknown command 0 [ 950.913110] binder: 23081:23082 ioctl 40046207 0 returned -16 1970/01/01 00:15:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:50 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x79000000]}}, 0x20) [ 950.946314] binder: 23081:23094 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:51 executing program 6: socket$inet(0x2, 0x1, 0x7) r0 = memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xffffffffbffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80100, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d02}]}) 1970/01/01 00:15:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0xa000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 951.022741] binder: 23084:23100 ioctl c0306201 20007000 returned -22 [ 951.118412] binder: 23128:23129 ioctl c0306201 20007000 returned -14 [ 951.169935] binder_alloc: binder_alloc_mmap_handler: 23128 20001000-20004000 already mapped failed -16 [ 951.211835] binder: 23128:23134 ioctl c0306201 20007000 returned -14 [ 951.215120] binder: BINDER_SET_CONTEXT_MGR already set [ 951.225126] binder: 23128:23129 ioctl 40046207 0 returned -16 1970/01/01 00:15:51 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:51 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:51 executing program 3: r0 = socket$inet(0x2, 0x9, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x8004]}}, 0x20) 1970/01/01 00:15:51 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r2, 0x200, 0x70bd29, 0x25dfdbfc, {0xb}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 1970/01/01 00:15:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x3000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0xfffffffffffffff9, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fcntl$setsig(r1, 0xa, 0x17) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x801) fallocate(r1, 0x1, 0x0, 0xb7c) syz_open_procfs(r2, &(0x7f0000000240)='fdinfo/3\x00') [ 951.676248] binder: 23150:23151 transaction failed 29189/-22, size 536870912-0 line 2856 [ 951.696895] binder: 23155:23160 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:51 executing program 6: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) 1970/01/01 00:15:51 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 951.735202] binder_alloc: binder_alloc_mmap_handler: 23155 20001000-20004000 already mapped failed -16 [ 951.759179] binder: BINDER_SET_CONTEXT_MGR already set [ 951.767790] binder_alloc: 23155: binder_alloc_buf, no vma [ 951.773617] binder: 23150:23169 transaction failed 29189/-3, size 536870912-0 line 2971 [ 951.777987] binder: 23155:23160 ioctl 40046207 0 returned -16 1970/01/01 00:15:51 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000040)) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:51 executing program 7: unshare(0x200) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x28440, 0x0) 1970/01/01 00:15:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x8800000]}}, 0x20) 1970/01/01 00:15:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 951.862885] binder: 23155:23168 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6c, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:51 executing program 6: lookup_dcookie(0x9, &(0x7f0000000040)=""/143, 0x8f) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000005, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 1970/01/01 00:15:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x6, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 951.938353] binder: undelivered TRANSACTION_ERROR: 29189 [ 951.949823] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:15:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x10, 0x829, 0x70bd2d, 0x0, {0x4}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @str='\x00'}]}]}, 0x20}, 0x1}, 0x0) r1 = dup3(r0, r0, 0x80000) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x7530}}) 1970/01/01 00:15:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x341000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x469a) socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x401, @mcast2={0xff, 0x2, [], 0x1}, 0x80000001}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x10) [ 952.017470] binder: 23201:23202 got transaction to invalid handle [ 952.023895] binder: 23201:23202 transaction failed 29201/-22, size 536870912-0 line 2856 [ 952.038825] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 952.061251] binder: 23207:23209 unknown command 0 1970/01/01 00:15:52 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x201, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x7, 0x80000000, 0x7f, 0x80}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'yam0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000020010040000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626f6e643000000000000000000020006263f9c8fe28d6dbdfd10c0004000000000000000000"], 0x40}, 0x1}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x4, 0x8, 0x2, 0x1, 0xfffffffeffffffff, 0x1, 0x101, 0x3, 0x5, 0x202, 0xfffffffffffffffb, 0x800}) getrandom(&(0x7f0000000340)=""/218, 0xda, 0x1) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000040)=""/147, &(0x7f0000000100)=0x93) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440)) [ 952.097593] binder: 23207:23209 ioctl c0306201 20007000 returned -22 [ 952.114986] binder: 23201:23216 got transaction to invalid handle [ 952.121390] binder: 23201:23216 transaction failed 29201/-22, size 536870912-0 line 2856 [ 952.130204] binder_alloc: binder_alloc_mmap_handler: 23207 20001000-20004000 already mapped failed -16 [ 952.156486] binder: BINDER_SET_CONTEXT_MGR already set [ 952.168176] binder: 23207:23209 ioctl 40046207 0 returned -16 [ 952.198308] binder: 23207:23218 unknown command 0 [ 952.212513] binder: 23207:23218 ioctl c0306201 20007000 returned -22 [ 952.235914] binder: undelivered TRANSACTION_ERROR: 29201 [ 952.246135] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:15:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x7fffffffffffffff]}}, 0x20) 1970/01/01 00:15:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socketpair(0x4, 0x1, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0xffffffff, 0x100000000}, 0x8}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x35, &(0x7f0000000080)="85709d9c8c85069e87824920d4cd23cfae30d969eea946827164f7e93e8b861e628c73ebfa89fbde092e118a3e4e6ea1ab13b7831c1a545f3915d763b7f9568ab56efb3dd5889d46b9fc6ac71a5241943ff0c5bebdaa4d6781e3d869ab47e4bd4ffd8058316a103b05c95dab0e01423c143a66e2f5f8", 0x76) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 1970/01/01 00:15:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x74, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x5, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newroute={0x30, 0x18, 0xe0b, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xfe80000000000000, 0x1}}]}, 0xfffffffffffffdfa}, 0x1}, 0x2) poll(&(0x7f0000000040)=[{r0, 0x400}, {r0, 0x80}], 0x2, 0x0) 1970/01/01 00:15:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7, 0x10081) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:52 executing program 6: r0 = socket(0xa, 0x0, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$setsig(0x4203, r1, 0x1, &(0x7f00000000c0)={0x3, 0x3, 0x32f000000}) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup2(r0, r2) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x326}) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/220, 0xdc) openat$cgroup_subtree(r3, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) 1970/01/01 00:15:52 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 952.887487] binder: 23246:23249 unknown command 0 [ 952.895404] binder: 23245:23248 got transaction to invalid handle [ 952.901863] binder: 23245:23248 transaction failed 29201/-22, size 536870912-0 line 2856 [ 952.903387] binder: 23246:23249 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:52 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00008c9ff6)='./control\x00', 0x0) r0 = creat(&(0x7f0000ddb000)='./control/file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fc7000)='./control\x00', 0x86000006) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x100) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x80000001, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001200)={r2, @in6={{0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x7f}}, 0x693, 0x8}, 0x90) creat(&(0x7f0000fcc000)='./control/file0\x00', 0x0) 1970/01/01 00:15:53 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x200000000000000b) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xfbffffff00000000]}}, 0x20) [ 952.974170] binder_alloc: binder_alloc_mmap_handler: 23246 20001000-20004000 already mapped failed -16 1970/01/01 00:15:53 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 953.045818] binder: 23245:23276 got transaction to invalid handle [ 953.052380] binder: 23245:23276 transaction failed 29201/-22, size 536870912-0 line 2856 [ 953.054404] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:53 executing program 3: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xcc, "de1b663c97aeb9549fd6cd37419d264d5349356b3e03aae28b694443410db79fa61b74a2018aa73622653fef916df96181ba017825f5aa781f895cf7ed2bf67630057a8ab41d797113a7d347550a5fa83a08a9089d9df220304899e63ecd57557b6fbddf493f75bab330cccd0df3d95244332be420080a308830ff6b6e36e9eb6852202135b41b60d4ba34a415147e19937797c4df18cb548eb178e9b2eaff0b008c6ce287081aa2b36ee8c8bf1ae7aa09e7f42202839c179cb57b5408c11974e687f3d0c1ca4a5514157ca0"}, &(0x7f0000000100)=0xd4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0xe35}, &(0x7f00000001c0)=0x8) [ 953.120895] binder: 23246:23264 unknown command 0 [ 953.150941] binder: 23246:23264 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x7fffffffffffffff]}}, 0x20) [ 953.195416] binder: undelivered TRANSACTION_ERROR: 29201 [ 953.204146] binder: 23246:23249 ioctl 40046207 0 returned -16 [ 953.214155] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:15:54 executing program 7: r0 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x408c5333, &(0x7f00000001c0)={{}, 'port1\x00'}) pipe2(&(0x7f0000000000), 0x4800) close(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 1970/01/01 00:15:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 1970/01/01 00:15:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xe000000000000]}}, 0x20) 1970/01/01 00:15:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80247008, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x2) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r2, 0xb5, "9eb13ab9e2a7a5736b3bdc6938f42e90d57a441155e0136250edbb6024016bc8a673ae1ec05e1d5447efdd30914bfe3766737aef912e256b09249553333ff6c5fc8ca1cf82be352555fc952d9889ad774d3b04e5cb2b0f69b95dd843abc975df1fb9c48e0f1bf238ec0ca8135a3f71c73713cca9a22c418a086f44bbc0c15fa3c9b495a8b9d5d7317461069b23117d48a5e176c6d3f34415a65f92609eb039e6312770a34b41e7f6d3aa53142f06abf4b87dd468b2"}, &(0x7f00000002c0)=0xbd) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x4c00000000000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:54 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80000000, 0x10000) r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x200004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) sendto$inet(r2, &(0x7f0000c95ffd), 0x1c00, 0xb00a, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) dup2(r1, r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x800}, 0x8) [ 954.136804] binder: 23312:23314 got transaction to invalid handle [ 954.143271] binder: 23312:23314 transaction failed 29201/-22, size 536870912-0 line 2856 [ 954.157185] binder: 23319:23320 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5452, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x28, 0x6, &(0x7f0000000040)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0x485) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 954.199513] binder_alloc: binder_alloc_mmap_handler: 23319 20001000-20004000 already mapped failed -16 [ 954.215373] binder: 23312:23334 got transaction to invalid handle [ 954.221752] binder: 23312:23334 transaction failed 29201/-22, size 536870912-0 line 2856 [ 954.228530] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:54 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f00000019c0)=""/28, 0x1c}], 0x6) r1 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "", [[], [], [], [], [], [], [], []]}, 0x840) 1970/01/01 00:15:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x480000000000000]}}, 0x20) [ 954.259857] binder: 23319:23320 ioctl 40046207 0 returned -16 1970/01/01 00:15:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7004, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 954.329290] binder: 23319:23347 ioctl c0306201 20007000 returned -14 [ 954.402556] binder: undelivered TRANSACTION_ERROR: 29201 [ 954.412829] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:15:55 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x10000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:55 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:55 executing program 6: r0 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) socket$inet(0x2, 0x8000f, 0x8) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="93302ed217d64f9302c33e15e3b5316b19be4b363fbbba2c0b299830faae5bd8c1e223a0cc108ce82a0f25c77be9f1dd8eadd3cb74763469e7b6d65f143017be3aebf646613f1076f557a15ab915fc925ebb366c727acdb3174e76a600b0da6c602e437c911dd479810f3423d37fd38e018dafe7a8", 0x75}, {&(0x7f00000001c0)="fb8f3b12ca36bb8b55b3ead914a3d81c1592119d063d8444c32bb826a8a6658a8054e4d86e0daea21f54e89a254a95a38693a6b55657e0a68db4a7d84b9c2c05517316dc87d773d8c916c5368d3691ad00a2189528b00504a50a26c30341", 0x5e}, {&(0x7f0000000300)="22eed504b6e373c22967a9dffb1a2d74dcdd60dba888d6c14f06cb461c2ee06eb97be9af303eab964ec216ec6adde381e725e65cb2407fd39dba1bc6cdd3c7f4d26b29817b6ffe5006c53414576fba6ba1780a5164f75b83e016b78696545238ab8229283f620a807fa08ebcae5688975eac899f976467c2109a76e142d992be40221463f1f294bad2d59d5f4e69af77f474a03f86ca0ff97f25407b18e95c9a04e473c7f33e8ac8dcbe74a18b133522e77082b786ce8080de707cb609222281c74fb6", 0xc3}, {&(0x7f00000004c0)="fb727faed0c63cf7dc200d214b74cf8c2f1fd141c9ccaa4c3246c9159fbe19f59bb0f8be359871bb131215a7b843370cc979b64d7b6b1c33d4bf5820e7311043031838c8b7b5b71df504eac1671142dfc622987882bbef502d0f7aed85c6356cf50fb5aef08e6331dff847c37e1300082fc70e737bf78611c0280cd2c6b3e6e409972a5737bf6820fb5ac1e61013316d092b61462717922d7206eed0638fcce1cee397f7f240a840ed7a56dac8457183d1ccf5c742adccf06034a37f5721f96914e0dc55", 0xc4}, {&(0x7f00000005c0)="49f9192826c104602946a623ffd39020d49f0924dc831e0cd03a3526e7ba6248e147297645c413093a42dd2f67578a91401602479e099d47e2ccb7e53fbac967c217493299761ff110f4daf804de6a0633ae71a9d42570c21ad03c0a8c31700d493b6a07bf4a25d4e1ed746f3ff94ce47f1ae3710da5e3cb0d6dc755cf6937557fbf0cf0d4eb3185374dc848db6480dd5d5d8280843ea63f804f8e6942ed601ce13ae5d1960d933a1d8d4c9b9c6955c8da005de549bbd95a9bd77b07902538b184bca36e28afea5c", 0xc8}, {&(0x7f00000006c0)="e90d3c347efbc2aa61bf7dafbc14ca14e0cb54c9f00612ac5be7e3cb313f3855b88f329ec2395dd6215b34d1c47875af2e681bb8de2e18a9d3e11cc965b4d33ae8e87e967107951dc10efb92ea86dc9945f72ac508a578435a75c5558d6f70c895b907fe72e9df359a6122c7ee3c499c4d5eae07e54640969e99a64b933cde463379f6d931aba99caa0773bc8b82e2038895cada7bc9", 0x96}, {&(0x7f0000000780)="5ee89d48c5b049e5df3689b171eb253398050ba3beecc720773d4cfe6eed70924f06587e289a52dbee48333fe6ed5ea2e28eb824a26d4a33c047f6ac2bbcd4397e90a1d0b275ccb06f5fab0bba0b691480afe735cbad2fb93e445ad102c783ed12738d02fe1167645032550c9054e5597bfc8f10e0fb9fdfae22d5f3ea3518b7ae4b80e4c1fff491377844d784df573fbcd5d4689267ab2d646d3d22", 0x9c}], 0x7, &(0x7f0000000840)}, 0x0) sendmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) r2 = syz_open_pts(0xffffffffffffff9c, 0x101000) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000900)) r3 = getgid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f00000002c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) setresgid(r3, r4, r5) 1970/01/01 00:15:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0xc020660b, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:55 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x5000000, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x60000]}}, 0x20) 1970/01/01 00:15:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40081, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:55 executing program 7: bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1970/01/01 00:15:55 executing program 3: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) [ 955.699088] binder: 23379:23382 transaction failed 29189/-22, size 536870912-0 line 2856 [ 955.704563] binder: 23383:23385 ioctl c0306201 20007000 returned -14 [ 955.730293] binder: 23379:23391 transaction failed 29201/-28, size 536870912-0 line 2971 1970/01/01 00:15:55 executing program 6: r0 = socket(0x10000000a, 0x0, 0x0) setsockopt(r0, 0xffff, 0x1000000002, &(0x7f0000000100)="96ea7f0cc7f1ecfa53334fa9ddca1fadf82fa54fdf94d68fae0372daed0ff6c50a6609c12e03fca6a805a7d47c05d715b262242bc52660b25e6b46e352b51192cd4509bafb901b180347d41b3ffa0c0aac9ba4297e3ea6b582e1675f201970ce0b7e2fba1f9c8c621014f1494fe7c095184867278a8655d147939b37338a2724414f82fb7966a4f466193d1052e268a3b0f5f8c900d793eb0726c7211824f80d819bfdac086213473420e347fa8f9e3f58e282eb0e48bdb118848951f431b11f7030d4b119702d58ee472fd2", 0xcc) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x3f, 0x4, 0x2, 0x5, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000200)="fa2cc45f7f3814c563d5d988cdb1cba4b95bf6957c03fee6791cd045a20c8039a333a4509982b70734a85045afaf4838905af7b6eab9f6a0a22a07faca2f819a7bc2dcb3243f44ac02073e37dfd926e3b8f8d2cc13e1757cac942615306db79e410a20e76d77ed5e827ac0b2f68001738a2edf4c09af1d36b112a681112cd9033d9cf0f1bee1a68520b05d7b9aecf788", 0x90}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="8804f0fadbf6e02147bb3fcc6e64fc661cde0e711eb18a6d61a5214985a616004119166ec89ee8b9d8b88b0e2cd52a95834d6bd14cdb333813a0572fe672fe10f1814afb314fc99bfc7b9098559969d91eab9bddd11d1427969d8b3a738de41b317725a0e38449f51e1c663b07b0f8c2ba6116db120f783fa927085b349648da70fab01c1cfc1488b4f1b5c2131cd02dbee051ce01c8d236f674ac467736581a6ebbc24742d0b24d902639844839435e9a281085da64e58e6b34ed5558979fec303261eef4b8d078e7c2fb10bf4f19e0312c1615847501d1083f6b01d30a4a11ac742d571bd4f6cdfccc2d9c9c8147e54438b25340b2db9df172fb85ec9200556ddb5cdad75dd7a56c250760c402c773fc34c966957b5e3c49b9def6648c53e17b331ee71856590b52a88439199cf53c00e50780dc836d24454cd664ad6f1357aa477334dea3f5c1abc321ddca509d4c07bbb7bf3be2765293ac90174c1ad0de2988ff74a1c719e5e715266ebba5250aff819545dead661e6875e1540a2c69094f049843dfd9e7b0083d96e508843347b6167b909e0c4476d46e73b579f0fb376c07bab3e792726bbc433ef74f0f43d3c694423090c95bddf4f6a31b4c58cd6883c2f9ce33544488f33bad8f5e8ce5de6f77c20228ec4038206934345734d193db54c62187dbd3c6370fba0badc340e8094cd9cb60cf76bbc0ebf239cd55a9629a63b9a3a8e289803a6694457fe48162d389d3ddc3f520a7220c39f8815522c7afad6ae5e113b5fea740a057c595ebf93c9ee6964fb5a632d3295f1f4c61403af2641a7dbbb88cd51ab4d54ce9aa99f8ebdab322c2a10e3bead497539ff7ba2651f8b692b61c03be0ed379ff7c4981edbc37f91e252c357b8b095fab15d1a6662315f05de3c6673fd6f3840e2a35c2ec56bad5e51f1311fb51606c7d58069525c80111addf67a841f26406c84fe3c919e308e58bd1fcb90909477eb285342a754aeb3426b4dabe79fa5a31abcc451a87ca9a9d0bdeab93eeb0fc97e225a66755d91f93defe3d74f529d62b485027628f742c23c8e95a11ca3ae455324205ddafa4cb931b9c121d07e2f96f3b7311b4448aabe994088e70f4b528bbeddc1fd1b1943577c896946e07691d1cf9479b3554f4c6c2ee5ae3e4be3e134274610fa7986d69f6016b4682a2fe00c5fca093478473a5b85a3096557d471539c1dee90006d448b48a7f9a467b61f1355c55666bb65b1a5f4b0e14594d78eccadd8bcf2afd20da1f12747f3788230f4378480a0ea74b2a96cce151ebad8bac58327d3e8d6c33caeeb48814d4bcbe723d36cdf6539de07fc14d8f56ba3bee827b53e31fc1f3a1e37c8753eae2a11e2fb63958aa3e2af7e03113d31bf826efdcaf3cd8354e6a8b62dd7de4c55c9c2b47e1a06758ee1e6c54b032ea42b348639d8ca5384b5fcf972fe00a5a5cc6ce0d79dba54186d9a343e7fc24e5f7f011fd8614bc93407a3706837a1de94d17643063b81a7ac1fe40285637a0b4d6cc8f709e52732e192f11a8bae74ac92da91bcdf81fef37a2f8b1e4463556d1e201438ef13a93514af5e2e82c49603db91790e4dc5ab9a5604cd390a825787fa04169879be9b7b2782e1a63c500405fc412018d18448f7377c9679c06716fc81bb10bb1822f8fda8844000b66a851846d26056160f841dd17367847e6ecb1569650be9156c5dd2d881ca495961277699315c80f6781f79c650c7e2b9b01a1b388666eab7ddbcb0bff10623fe73d14da3b5ace1a74ead9719a21a5246047fc91f6c0adfc98c439a6fc7eb61f7e018f9a9284a5ac6a65dc88026542d77dbab1071465cf168b2c60d96cfb248f780db1fea371eb6b2e32e002aec744d1a48f58c97d3bc760c745ddc1e117d75fbc3535dd29ccf6669ce7a29b90a9a43ecb82d1a4dbf8e4ff232a62f515519c7d7862d168eee9e43cfe2dada5068e808dd1c151efadadccb9a0c937d97711e0090870bb0ceea7aa87a4943152e8cc22e126b45a2443825014d08ca69f1a1036d19208ddb54bbeb00b767fcf23220db8a5c3c1d9e8daeb6e1b9b22d72bde1d0bc0fc706c4b9d12b2b0c6b21b43993e78bff5e2208bc2e08db5d9440dc7c7622d594aae7621eb10897eeef624d519a65c8dd6b41f66c5e8e57b72a76817fe07546f1315cf1165b37e203ace922ffa995e36e0cb91e654ce722828bd48fb4af6072553040e9ceab584ffccc5850b1796f304c18be1ccf6ca61c71b6a0a15501852a7ae21731e2519670e4268ad36b0ff842c0fef1f7890712f93f2411feefa5f40d31fd6dd2d6aa9055edbc86ce8ceb995847a9c47c959ffe66b51bbc0ed1f3d950408eeaa9e0612dd3071ba43f9d7b73a3740a82592d97d1848d918c34b81f974ddc8717d88cd5f504934bfc44997ccf47d06e8dabfb78e4ca24609d01a1804f5e5ee24fe92ff6acf4a7655c83777b1aeb4e674f00c8c069a4d9a7d649372b4a23dbf3642e49ec36ea6fa68b785902eff34cab97691d2f6c20cad7ed0ad1a1ab1c33527398c8ccb4a4673b4847f4e774e3b5bc46b66612444d4e617fc1a4c9e2ff549583424fc1cded9aa205aae08c821a327f5b89702586101db98d0841c7ad6da42d5661c27c5e4d5b2f4dca437f53cb3eeabb269ded216ffd37c0ea9b4671f022d9f89b2fd361e9af9ceca22543c36be8dd0def1933abf918a3ca1d8e3f3490d922b9beb3a446b159d32bd6fb5640e399360b728d9ce73a5754e7c2511af17f76c76864e5ecfe3b52f7cb353f4253840609a165980b25f747496b5da9b34496ddfd851c8a89bcb4bcff3aed6a89992c7a63f13ac3fcb236f13ad2f3f4958bbb725a281dfb4378d3ee2cccf4c5f9595c9f11a5a8667efd83e33a008d295c7ff913da76ec14f8202388b7da1f2bad3c075840e0f1378fae6e6684bdf629d59374bacc810087813d50a87015b9559c45e24d869e3f70589d2b71db7e8211036226b519d16a4a88cd650f8ff6eea2a7807ac8f613b2b050c40567c1b0bdaac8b6550c9bebc181c5df250ce65ac0943139d00cdbf86dd816f5e475842ca15185b6289c29c6dc8a717398c561047b96fd6f70a9873f891b59c0c867fa7480e87070bbd5b077edc4240dcb50d22842c2495db27e68cef16c08e63d6f64f6aaeb335f857173dc8810286103b3ce07e849330b8c40a27a1aac78e061c0690e1ce143d9d9ab551de1abe1dfb942a57a706f68490fb5f4a345b5ccc806757a5185046d4725e3b6fa327e5b7380cfef7e99f9e8a44067a176725509c2449425c97baf7b0b8ae9983a10f7e47445c3c308357144c0e1ebf9dd49d0f13617087ec95cd4afb021d5a1a4e81bb7330cc20d53d794f0f6aec24c82fe99b6a9883cec9ac8904dc3b3cd4c8eec8f74f52b40b019a5951fbc7c11534251e3d6132d968ca7ff9a87209e75802e382fa5f480868b2f0d3de39ff897f7b336f21081915242794633346b139dfff901f569a71bf7b5b4c7f03c4bbfa680d715daf5840af321ccc3993449809c6703fec4cde295ca4c172bfebe9f38628f52e5bbcc1189a77deb96277dd3d4aefa513dcef33a4a44fc4ff9632237731fa6d7ab7e831c371e3a77cb9b60d7bfd72e599932b4081afe30bf90d767e15d3f851c824d9452baca2b4d285d4e8f724deccdf0fc11be8f43cf1333f5389775eeead2fe1dba1b7580a6b6fcdb0d00333c0417c88d49d51433d5738f562dfc5f438b5a0b57093b2636d28a7d2404fa1a894938a7f6b9ea2240170bc675cc451c04be4db66c3de36bbffea6438b389467389253d9d32126bb9dac360d8be0697e1503bfae80ccd1666c050d3000900a550279520dbfbf75811149211bfdc3af2409b1b2b952c96f1eeda8636f90b691484b824268ebaa2a90e15de250f4c314466c84d4ec15bab26819e6fd68a1a4d73b62295bed673f54e6eabbf9829396fe7d6bee837c878fbb9234b97d2869d3de0d238794abcf8c5e7d09468d4a14f9134628a61fc59228e1678ff4ebaac426ed62c11c1d3cbaaea80688d203866b58dad014b8076a79ec838ef841ebf477df1242db0ccc7eefed736e2afb272665140cb637df59cd9555504a9e855a87fc9d53e0064dbdd866da9a0b05b56c8465c84551bc0fbb8da1b90e7e581982ab3171473ea43ecf359ad073a72ec83427984c2a806115dc34cb19383f3a57091aad4c024f2fc9fbdb55c3c99373bfdca231074ecca18567ebb45947b26dac11b169b1877c70889e322e57f4bfcf075e088f4d32a29b9dd4363efec7b12d894d8cd8155189c69abd04920a4b38e348f42b4c41ad7f3325504dfde8c0a72963f23cb6feaa8c7d54f088e63eaba347f9817d64a593848dfa9d7fa15387519ed61a167e5e79bfbd3ca4d49374bebbb3a710da59636f5fe21401c8f8dc285f8464783af43f3d89da75e5c66da426c87b383b4f26af4221f9a2a84b01fc2481a8a2b6b2874cd3e3e491689c719d705e8b5e1621efedfa937512d00b7cc985542642ddc9c2f53a834e79f0b7af5048524d6b4d87d3d8f73629872cdcefb656045dd5b50f24988f568478ee697ea03d6c04ade65f48a99b55ca79d542d490ea0065fe3d00b72b21d815da2d5ea5ae8b97c96962877daecd8c3abe4efa7001b3a4ae754ae94123a47b34ef67b75765aa656d5396d96d4193769d86394dc16370b74df08904cb46a6aff88523100d7369d1f04a7fe0006622b44e200e5342554d995bbb591223f5eddf06d0638919cbe468af81370ee99294e6349218ba9f45dcd8a2a10fc28f30aed1793e0168f85db3130b8df70bc1e2aca9685de27d5629466b81e860952304bc65b98e5e67c750793dd825ecdbabaa92fc89f456fab56304f04376f8ea58dd40bbaf825f8aaa14d01e3639d93912adc55f4b45e47a9422df3094295fc566f61bd232e6060cca532480ff750c2a23315eb735ee4673cecefacbf15f35d2fcac89919388424c2d6e9bffb5d282a2c90c8cedd7d167df17b41cd3a15c14a408b4dd71baf9e3e9dae3b8d26ce29ce3256ba40581111432c09f94e4bc667e44256f80b34089519f119af6f4772a92ba1c0a1348355070e7795525d78e020bd9a187e2934cdc623cab47051c90a9c3e85f5698796ceb169277e18d11f1fd1e1f244b1c6b70f196aac4ea8ec02196dc5c142cafd206d98bff41c904dc86fdcabe0a6c7f1a0e58e6c8bc01dc9e550365c54ab6894a6056fdffcb4ea21803e24c6b2a255a40292ed8ea7f741eb8a76451424dc83d22dfa15b4866d2645482ae64dd6850279fd5311c521ecaeb5a78df688674b9280574eb310808eee4cd23b6278366f71533489e7ac8113f1d761a078125c0e73ffeb46383bf05a2c2c242839c5598039fcb67c899073f60066a3efee3f87cffeaf6f8e7d6d39030f806b821e1c17ba4b2388e6f7a92d2fdfb9992a2c5b6edb0b54b2d25dc362ffb9b6ce2b42b49e53dd2392262bf2685f4ecff40f09979887f141d518bd6d23e6eeba381eb83050c03c1dd68c4a26df81246ea6588c67b50b7c1b9e1aa3f580e35a1ccb0aa9b97a2badca86729f98962bbaaf52706edcb142d20cd4a1cac291df99b2859be2589bb2885902ad3d017cbafb751a93af135fdbf0b8ed241e978205c5cc169a736e072ec99a650d10a43a619f56fe279aa26c005099ffdb7be727b65267d32d9748b8b212ed193d352f868721cccf31081d33df9f39f379f99302b163f60ed12e1da030192df7113fe3dc3e5c108fc2bbcbef36d62db115c333d3a0ea0aa839eb44aee88c22", 0x1000}, {&(0x7f00000022c0)="ef4a126c4b1e77bb44c04f2da6be816d4e33961cdc9ecf8c885b253775258d36f61f9a4cbfb514f7556e446721baa1a8a41d6daa2d88e5b5594923e65e0cf173565a1c5f74158862eceb860a01952ee7d0772fd8d070350d3dcfbead17b0233433940f3053a18e75364a791c5f311f8d80162ee9893290722e09f5306c06d99ac49576023162bd21d9684e053a1e28b3166480948b1a94eb74a15711a2a7c8068ecae62bf1c7e6836034b0d22ce908fdcd04c1caaf68c6dad27a4934f1f07f8d4806a7447f38b8098aebf42047b9f3", 0xcf}, {&(0x7f0000000080)="31e471a8a20bf4f7bbc08884a1cce008a18b449ded6c54e553f92302", 0x1c}], 0x5, &(0x7f0000002440)=[{0x88, 0xff, 0x5, "0f9251f1afd381c2dae51f825591979fc153904069e47091e06fd901b81e5ada347b30c180da486919cf4788f43e3f479ee4699936616cc572e77ac678e4dd4dbcaeef7e64d8372a3917136e10d177d3f5e0192296ce9b6ee0905d2bdfdf97a77f04a6d22d8a7b2591fea60f92699b6169ababca01c9"}], 0x3bd, 0x40000}, 0x801) 1970/01/01 00:15:55 executing program 7: bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1970/01/01 00:15:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 955.784301] binder_alloc: binder_alloc_mmap_handler: 23383 20001000-20004000 already mapped failed -16 [ 955.813250] binder: BINDER_SET_CONTEXT_MGR already set [ 955.832278] binder: 23383:23385 ioctl 40046207 0 returned -16 1970/01/01 00:15:55 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x48, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x5f]}}, 0x20) 1970/01/01 00:15:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40000, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x3, 'none\x00', 0x1, 0x3, 0x29}, 0x2c) [ 955.867224] binder: undelivered TRANSACTION_ERROR: 29201 [ 955.880594] binder: undelivered TRANSACTION_ERROR: 29189 [ 955.930097] binder: 23415:23417 got transaction to invalid handle [ 955.936501] binder: 23415:23417 transaction failed 29201/-22, size 536870912-0 line 2856 [ 955.957387] binder: 23383:23420 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:56 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@ethernet={0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {&(0x7f0000000080)=""/181, 0xb5}, &(0x7f0000000140), 0x8}, 0xa0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 1970/01/01 00:15:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4020940d, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 955.986139] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 none 1970/01/01 00:15:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0xa00, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:56 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x23, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x7, @empty={[0xfe80]}}]}, 0x30}, 0x1}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) [ 956.028190] binder: 23415:23434 got transaction to invalid handle [ 956.034625] binder: 23415:23434 transaction failed 29201/-22, size 536870912-0 line 2856 [ 956.050343] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 none 1970/01/01 00:15:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) setpgid(r1, r2) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x5a]}}, 0x20) [ 956.145146] binder: 23447:23449 ioctl c0306201 20007000 returned -14 [ 956.194641] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.200964] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.201171] binder_alloc: binder_alloc_mmap_handler: 23447 20001000-20004000 already mapped failed -16 [ 956.229555] binder: BINDER_SET_CONTEXT_MGR already set [ 956.249218] binder: 23447:23449 ioctl 40046207 0 returned -16 [ 956.293711] binder: 23447:23468 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:56 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6c00000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0xc0189436, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:56 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x100) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x1, 0x80, 0xfb, 0x0, 0x8, 0x80000, 0x0, 0x81, 0x9, 0x7, 0x2, 0x101, 0x5, 0x7313c49e, 0xffffffff, 0x3, 0x8, 0x3, 0x62cce834, 0x0, 0x0, 0x94a, 0x7fff, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x8000, 0x1, 0xffffffffffffffd8, 0xff, 0xfffffffffffffffe, 0x6, 0x3, 0x6e77, 0x100000000, 0x2, 0x0, 0x1ee9d717, 0x6, @perf_config_ext={0x32cd, 0x78}, 0x4, 0x7, 0x0, 0x1, 0x1, 0x1, 0x7}, r0, 0x5, r1, 0x8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8, &(0x7f0000000180)=""/4096) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, r0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={&(0x7f00000004c0), &(0x7f0000000500)}}, &(0x7f0000000100)) timer_delete(0x0) 1970/01/01 00:15:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x74, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x4e23}}}, 0x88) socket$inet(0x2, 0x4000000000000001, 0x0) 1970/01/01 00:15:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xfffffffb]}}, 0x20) 1970/01/01 00:15:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000180)) fallocate(r1, 0x3, 0x0, 0xb7c) 1970/01/01 00:15:56 executing program 7: timer_create(0x3, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket(0xa, 0x2, 0x0) r1 = shmget(0x2, 0x13000, 0x10, &(0x7f0000337000/0x13000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl(r0, 0x3, &(0x7f0000000080)="c626264f10c9ff8baef20f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xfeffffff, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) [ 956.918911] binder: 23481:23482 transaction failed 29189/-22, size 536870912-0 line 2856 [ 956.937160] binder: 23490:23495 ioctl c0306201 20007000 returned -14 1970/01/01 00:15:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40049409, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x4) r1 = memfd_create(&(0x7f0000000000)='self*\x00', 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getpgid(r2) [ 956.977391] binder_alloc: binder_alloc_mmap_handler: 23490 20001000-20004000 already mapped failed -16 [ 956.996792] binder_alloc: 23490: binder_alloc_buf, no vma [ 957.002794] binder: 23481:23505 transaction failed 29189/-3, size 536870912-0 line 2971 [ 957.016707] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:57 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="f1adeb1af858baacf3297c5622f1bd4355db6251ba98a1e2907b45d18f94a487d352e5fc3048bfe27e0dfe1aec6106fa2a0027dec359de1cd7168756278c52dea94eee1cfbb42887d37ef802ac13636a678791c1882b9bd38f350b8b2300", 0x5e, 0xfffffffffffffffb) 1970/01/01 00:15:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5421, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 957.024399] binder: 23490:23503 ioctl c0306201 20007000 returned -14 [ 957.034757] binder: 23490:23495 ioctl 40046207 0 returned -16 1970/01/01 00:15:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xa000000000000]}}, 0x20) 1970/01/01 00:15:57 executing program 6: socketpair$inet6(0xa, 0x5, 0xfffffffffffffff8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x20, 0x80) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 1970/01/01 00:15:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:57 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 957.146520] Invalid option length (0) for dns_resolver key [ 957.157109] binder: undelivered TRANSACTION_ERROR: 29189 [ 957.166169] binder: undelivered TRANSACTION_ERROR: 29189 [ 957.190775] Invalid option length (0) for dns_resolver key 1970/01/01 00:15:57 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000140)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x100000001) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file1\x00', 0x2) 1970/01/01 00:15:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7002, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 957.245545] binder: BC_ATTEMPT_ACQUIRE not supported [ 957.246094] binder: 23538:23540 transaction failed 29201/-28, size 536870912-0 line 2971 1970/01/01 00:15:57 executing program 3: r0 = socket(0x1b, 0xa, 0x101) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) 1970/01/01 00:15:57 executing program 7: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) [ 957.289629] binder: 23541:23542 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x8000000000000000]}}, 0x20) 1970/01/01 00:15:57 executing program 6: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)=""/175, 0xaf) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x4}) r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8040, 0x4) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x28}, 0xc) ioctl(r1, 0x4004af07, &(0x7f0000001340)='g') [ 957.337222] binder_alloc: binder_alloc_mmap_handler: 23541 20001000-20004000 already mapped failed -16 [ 957.361985] binder_alloc: 23541: binder_alloc_buf, no vma [ 957.366407] binder: BINDER_SET_CONTEXT_MGR already set [ 957.367754] binder: 23538:23555 transaction failed 29189/-3, size 536870912-0 line 2971 [ 957.416118] binder: 23541:23542 ioctl 40046207 0 returned -16 [ 957.435533] binder: BC_ATTEMPT_ACQUIRE not supported [ 957.464683] binder: 23541:23572 ioctl c0306201 20007000 returned -22 [ 957.562454] binder: undelivered TRANSACTION_ERROR: 29201 [ 957.568136] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:15:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80247009, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1970/01/01 00:15:58 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000400)=[{0xffff, 0x0, 0x7ff, 0x2, @time={r2, r3+10000000}, {0x1, 0xd3f}, {0x1b, 0xc9}, @time=@tick=0x3}, {0x8001, 0x7ff, 0x67e, 0x3, @time={0x77359400}, {0x8, 0x5}, {0x2, 0x100000001}, @ext={0x2f, &(0x7f00000002c0)="63def56280b5f498b6854568e1cb7bd35c80e08bcc45a393b85b198b8a03f89b7d6bef551ba4543c11ac67cfb29513"}}, {0x7, 0x5, 0x3, 0x7ff, @tick=0x2, {0x1ff, 0x4}, {0x100000000, 0x2}, @ext={0x8e, &(0x7f0000000300)="864ba7df4e928b500a565e9ee1c3fddf4232c569eb1f8c12abcfb8e5ef117681a26480d488f26128ba34621aa0e72dc2d3279c514a3893c2d837a10aab793353af0035f0462b3f489b90f5b6923ee79f053b8039117eefe206eec23cca8b662b9e24f1680808e08da3f2cfe7e6416561046d45ca89e536fbe1439e307f402bd30e98991a6b98571de10aa635bfeb"}}, {0x4, 0xfffffffffffffffb, 0x401, 0x4371, @tick=0x1, {0x98d, 0x20}, {0x8000001f, 0x9}, @raw32={[0x6, 0x6, 0x2]}}, {0x8001, 0x8000, 0x3ff, 0x2, @time={0x0, 0x1c9c380}, {0x8, 0x80000001}, {0x6, 0x1}, @ext={0x21, &(0x7f00000003c0)="f9ef08fe4ec418930686fabd7a155cb8bef1dfac1bbacc9a0493fb6b0bfb156c3e"}}, {0x80, 0x0, 0x401, 0x2, @time={0x77359400}, {0x5, 0x9}, {0x80000001, 0x3}, @time=@tick=0x1000}, {0x9, 0x7, 0x7f, 0x100000001, @tick=0x6, {0x1f, 0x2}, {0x20, 0xffffffffffffffff}, @time=@tick=0x6d}, {0xfd20, 0x9, 0x400, 0x8, @time, {0x2, 0xfffffffffffffff7}, {0x9}, @addr={0x0, 0x7ff}}, {0x0, 0xcdd8, 0x7, 0x80, @time={0x77359400}, {0x73ca, 0x5e0}, {0x0, 0x40}, @result={0x2}}, {0x7, 0x1, 0x20, 0x7, @tick=0x2, {0x6, 0x9}, {0x9, 0x1f}, @raw8={"e8387db763e51ed3a2c06669"}}], 0x1e0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="8db482075da1aaaaaaaaaaaa08004500002800000000002f9078ac2814aaac14142020006558", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000780)={{{@in=@local, @in6}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000600)=""/233, &(0x7f0000000700)=0xe9) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000180)={r5, 0x1}) 1970/01/01 00:15:58 executing program 7: unshare(0x60000000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xfffffffffffffffc, 0x200000) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000080)=0x10003, 0x393) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x737, 0x1f, 0x475, 0x1, 0x7fffffff}, &(0x7f0000000180)=0x98) 1970/01/01 00:15:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf0ffffffffffffff]}}, 0x20) 1970/01/01 00:15:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406304, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5460, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 958.175477] binder: 23594:23607 got transaction to invalid handle [ 958.181812] binder: 23594:23607 transaction failed 29201/-22, size 536870912-0 line 2856 [ 958.199519] binder: 23598:23601 unknown command 1077961476 [ 958.207113] IPVS: ftp: loaded support on port[0] = 21 [ 958.215346] binder: 23598:23601 ioctl c0306201 20007000 returned -22 1970/01/01 00:15:58 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_bt_hci(r0, 0x400448ff, &(0x7f0000000040)="be0f1a0e2c351df9b93f9b01873ebdd378661a2c977d7d6261f3f7b62dead74519aff08b62cb17a8bf3fc40676fd3e9f908f4818fa4ce743d3686b74d6a1fed6aa67305c72df0ca3c6449e152492a31c86e4d97a5c97d6a9454aebab2a4b0e6a8565f7b1ac0cdcc199f2e5d7a14009146f9830cdd6d523dd1bf456f8052b33ba17ce6569bbfba59f8cee6e183635f592af7c0f18ff5e92811a075010a7ca09aa026b40a417f88503adf1248d0e29d49d466b9ce57bfb603440aaef69878a2ff29488b02dc7ed3e62a255c979f7c95a997ccfb4e355ae0287e1417b5c0031308870ce2a8de1663edda76a3de4b71f0d26075ab347ba51601dcab59d9f48e260e70a79d30e81e5ec16e0083af398be937320700e21658c0e65adcbdebf64c2e600ec8d9633b67dbf712490f455d9213eb7967aab5d1e67fcdb7875e06018932242cb977bd31c837efb671c4e22c7ad7ad024613dea0aaeb902fe521229a12a3efb43d92912c49314a998f2474d5270f94e2328dd5a7535abe7d184080f5a0c2d82480a79e93d82e4ac30c576694564ece800753644e9f2df623587704e4c6af31b50422e9e08b481daea291a006995fb66e09aa366fae5c1b61f3a3d5180a6f9e19f5a055fbddbf771bea44fc5af1697d70cbcfe8dd38e2af958073a19b4762d09d7f51770869f2407649fc373b3849ca6dfd452c1c5be80cccfc99aed10091aac56d90b65f138975e3ac46916f037804856c1ad9a3ae66d7e5f9080a4b15ebb818cded9abced8608baeeb84b4052c3b7fd4729b28cefb63788cdb696dd285728a8511d21efbb7e6b85465a5f310d2848f9c00fd0f9929b7b8ad2958550b631e39e03e70691f28a7734199539a685ffeb6615e06c19041f6759c8fa975372ab612fd13b440258cde6a27958b7e0c99acbe129022743624c5b7149b3a4c0b443b974f31d1a824f695a5a7d39d94e1f087790029bd8a35de5ec724d6d5454b780080ccd74b5073d7a75aa80411de9289ba6879cf28db35e0b91265159d55f0e2d1afa67126ba89782db7e8c720714faa09dc85e70e16cf18213f0fb4b06a3dbd2e9e11207869ba4ac22dbdf456a817e4a66018f2bf8660526cd7092a2ef1a1202914d006ee7488794910d4290a776e0bf8385140c12e5ad05f42cc294884e635b5ac4dff007d8f0dd80be2c9bf218ce0ab7ae538588c705bd5b06ef204eed670b98f09700e7ff5863f97c0e81df1149ed63ea9ee60d6f52e8d543e2058b85c4f5fea43f891bd3f4fb31a0690e5829775e14c8ca971d2a7226856e007f6a4122fdb77568d643ff7b4202dd462be01fa85155ff98c1bdc57def893f7b9fd3fbf1feccb53293b811e4a88f6ba6c2327b544c624a8a931c1851ebe79dfb1136bebbf0c0272f3b9665d198ce9d8db7ee2b9ddcbd224dcb60fac69db633f58156cdb43c5591fb38516ca51f20b6829b5190039230f39b587734f7b01e267fa45d74e11c646bb1d517c6257c32b7c58efdd0839f735d1cf94c203b272a2170f42beee9b15d02e68b048ce7fd8c3e1909dfc0883dc95819fc0c53b0fd9a7d57cb7cf2ba78d0153f09d4ac508ba0f75d708f52556b90f50b60a496662049f27418dce50cf1f631d839a2eae56b93b40c2d45de498ce345ddf2160b8a2c73ff56ffeb8070a00675d5ec86c8a8ddabcbb85fb067797bf7877539cfd68af6dce572cb8c96519bef59e69f63b04fe51392c4b53659ebdd54d295aebccc314c0248663e15b516b57c4385de9574e6389e60f6b2f2004977e1e929567ef8b23d0a18512288927f4751a03f685da06410e8236dcecf65d63bdc582dc3ebbf5281817e13d6f009200baefe68505fb4af7d6aae678d9d86108794015e4f9865d1c6a294019aee0c0d9e89ea7f7891d3b316a5a6937809269f7789ab73d7e8060efbee77892fadab93722eeb5f9097b10fe3d979c2b25cfb4d108a5f41377fe9c32e0c33aa3c9aa154e6b8a163f2b93c3af72d9c832b9fbda480871a3deb1f5ff0e9886658947ba9399451b335e5cb06d91aeaa09b4918b99b284e5a0b6eb38c75f3d48afc073d1773026c8e886d39284a8462eb6741dcc683c5768e4fe3feb6a91538f598503b0b4fea81946bb172a1c772ec6b56ce579d133b8e36da930907ab6ba69ee050f4250e00ed4acf6d55fa4ab51a5044313230f3c546ea71fd2dcb8fed5063b331cac15492e10efbe5e5c067d1fd383056525455824639818468a1a0870b65cfae4c5986e0bec33cf4a57a0ea064204befc67be8bab0d7a5d0736871694a9b37ea45cd52f51984e3d5349d153fa26112eacfa14dc465ba33d6c58f612e1a492e10374e07a18c4c24590da56605d5d1c2980d1e30d843c59aa022e4635528ae80af1a897ef1836d954267f74d7d27a1602854f3e6f2ec6bbf42398bf47388327c083bc3226b4d8d63e01b041816fb320b8b698283040777ff3d039f589476e6f43436d9b889f75eb7e2cee4124cc94522ee3e848823206f8671bd0cde3b72336b424ec83d19b15423615ba1d547375efe90c86d91058862849f43e0e117aa8d1bc0d793cce32f2d89e5bd6db0a3802518f99ba6aea96586bdb8a2270c6a2a6366560b6919c1d5cc0826f94eea3ee7f218b1be95c168d9d829abed57a718c8b552d48245c33a5af0300370d789598cb86a07401bf92f4d3758df84971ea6adc64802e3efbcecc2de0a839b64fcdbdc81d6cb9647d5aba2da8bbccedf6c1899d77cb0a40aaccab2b34e3c83d60b090bbc2689d5aa00f8acf7357d4876f32bf4b0c11dd3e87605de4bfc56f3497fcded4af4c8f378e3acba9eb4d3d9de22245aa56ea62cbe794ba56b7aa8693e968620fa0293f1db6a4f943539d742cfddaab321d99e976818d9e6664551788627c8ec0d8c73fbd9f07b73bcc2e6fdd1a5b9d223662bb83b7ffd8410dfcdb78e7543f311def8975b5943716f0188ac5672f9a9187553f4db81204dd138306a6999f8d58121bde31ea49808b06f012e94ba80ddc8431cd6cca6aeb399458fa6381cb1690ce69505861b0a24dced6dcf00b4d9bd3ffa24c8a4aeea3e491d3e9ffc791bdeee1c9a573961f326446273354bfc08319c2023151d28847edfcf3126cd8fc048e5c7432c8cc56d926883c194f54f45a433a67c57289f1a8d80dc7a0a6da6959d079b80bf21bcebb00222c1d664678a171b6b3c06fb2a6fe8eee7b2893fe3f7f62d3d7bb45d96bd01401b9d9ccc93cf34b1a91d1d60ccedad2987a1de804cf54c135a2e927e6b053595b87edd7cf9a00b5805c8372e353df8d7acddeb05f890ebedaecfbe3b4f8765835dd35d0022ec2af75605d24fd540922951d07ccea34c3ecc06a3d88d0eb18fc442e54d38a51c3c30c36076203855ec2c11caa303ebe1efcc690b8a77c23f1138289960875fc74e84ddce28c2793a37beb2aadb8fb434fed63985db675e1460ec01cf65ac56a37f35341803610b47cf2e6b5bc21f8ae3fa5a4deec8d685f26c988bbc98ddd648759bba5988ffb7105dd27c04991e4ecbfe0e3af6984057ec41d65051112904545be51a7f606c0e7fb9ca95ce36d340340bfdd70173dc96cd3a74abb691e5587ddf62dde186611859605f7c9f7397d59f7b5b3b8eb72e5969e4e2a6c028c1bc31a61d312e171874395131fcabb85d4ae6faf02109411adaffccbdbb76bc1d2a53465a93cb8e3776f4f2d02bc711f38643e63d9b47d13c9f7985cc00a4a04a69567e086a9e1bf166e527c515cb7b65018129b8a4cf4a66abac12bf030f9c58bdce1545f81146fa65564fe0f5d027e5db52d91d8d65297205eaa949375ef15e795d5d642a3e615c879bf5991c6c38ffa53c2490e32736b80903f82e3f99f07ca058bc4d6724bb6f85399bb22821f4b59f4f556c20bfef9409ebfd3b403b055df80c0bf833039b472a86256f14f04d8a34d332787f71b8d26f34c41c4ddb0a32eb81c03c10ec2eac6105ad09a5d27421b59153a6b60a6e4bcebac1e4111194b2ed79d321d782a74638e6fab15cb12dcf675949419df04fd3f4344b8403c3102fd751f2663c37f46b7ab3deb46044b69015208073d6481914e488350e7db893a5b2caf59f4ab8a8ae2a3c930d7ddf24ed4fb579c8370d1c76f6ac8ad043f34875050ce92f80ebed8fa4a483cf8cfe0594f9a9bbb415b65c9681dad99db452e04ad2064a2f135fb50ec2a8140b19b41da49ab8296417f2bb601e1750488e59a4ee1bd16cf80159476f1de53009e8e29dec6e80152558e19c7d9e9671b45b98b9447cddc4333a498258de319abfd61bcab992f6d2357e0e6ae96b9b72273e7aaca43db418768082e2b41a2e533f780ffa8526d5dc1e1ae9c2a4aecdae28c64ea05a7a3b2d0df03f0a256c1c8d3de8aa3fe37eeb881e187fd30f228abd5b126dda3223c33e63b10e6c5e43adfee1424aa65053d35fc977a0149b38b5388a7b022a0f0de4935e655cb9317e54e7b1ade15069453e16311e01d702180f1f39dd96a0e12ee5c2aaf65e1580b057ee777c0c40835c000d0a38c1f6b87f71524f46390b3fe830044f8f93edc38b74bb0564d646769eb833e576f49c4478486414afc9fe86fb18b0840223e4124535ec760409bea67f359a11b74bcff31b20943309853b5bba73d61d369fec01d3ee876794737e949755fb419853cb9833878ad21ed76a3416f05afc63ef6af27551349e93677a41d06244fb9dc73aebc8125c92c9788c9adde3233342c64947ee4a7fc65abaf44fa9cfa74dcddfd304016957cd78fe0827ef8ad3bb11a3b70d8557e9c25b6ff81f15563bbdd579e0cb8317ca3ccc4c7d81d2241f70b5965c75a0d5ceee5cef23efa0518b4968c3a887ec3038f8d332a43de3285ffdc3c5580fe912b07bfb0b66183a7827609b462209c50bdbe24a9c2c27e54e7639323d3d717c5e35c283fcd9105078b3da97a8b8d25bc08328bdf88c093194578e9e1fa2b6810b55e1f3d4a73e3c64d0f7911e9aeabed01620795c7ec3b358652b0da4cb6497aef021311f1a25056637ebc383266ddcad8c4bca84ce409ae1751ea15d528e30579294863c8c04ec305472ff2f4f7919d599c2e8385586234d6a4654e52648d0f81c45756764fb2af3087c24df43e7ee500edb5f140f612d6e02d1974038b145ac193de933b79b1eb1b051b97c9d2299078f183cf80435c32ddccc30b83dfaf9e647424cb6d1a467ae423a5a784b0b434f0e952cfd499e1acd6f8b8872f904a4796e21a3031613196b36686d96c48a8aa66dc2d9d53d89eb78dbe86ef79475b7b3ed1e2cf0ec800b3517ede946c86636a4d8a0c4be0bd704f3c7192750da37273382211a0e51c13757c575806521bab590452378a4b5d623ff1fd755b6af4b329d47922cc9dfcad3b0629decf45d4ae5e9ee366a4c5f025509b5b78fb156b1e287b2e112110b6d08dec6ec033d91cad6a47c426e74b3771dacc45696d33194bef65badcca6eec4bbcd6f118214d84179753b25caa0c31f6ef1104f0c00e117d675c7934edda8a6b718bf9b2552e87c48d07e28154377ce9b79be2431147f0273dd96228fb749e49818296a836ba3f60d568900cac941bf878ae184f0a3c02945c3155940114ce36db21b3d6b5b770a7dfc46d72fab3af5aded16481c24a459d27478c922d1e442e01726b1624fc3278d81f0a96aaa82beb41aa5cd7445cc693bf583259fe89dbc38903d3fdcdfd8c667602c5563be3c34f99755893ae8651add760c302eeebcf04e5b6fbb1d87c064571e8f822e58e1c51959e994cb2a75c9991bac7") [ 958.241665] binder_alloc: binder_alloc_mmap_handler: 23598 20001000-20004000 already mapped failed -16 [ 958.255426] binder: 23594:23615 got transaction to invalid handle [ 958.261791] binder: 23594:23615 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:15:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x100000004e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0xbd) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000c8317437cb54e50ad3fcc697ad9a6b740000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240), 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 1970/01/01 00:15:58 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) epoll_create1(0xfffffffffffffffe) accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) [ 958.290382] binder: 23598:23610 unknown command 1077961476 [ 958.303841] binder: BINDER_SET_CONTEXT_MGR already set [ 958.331653] binder: 23598:23601 ioctl 40046207 0 returned -16 1970/01/01 00:15:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xd00000000000000]}}, 0x20) 1970/01/01 00:15:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7a00, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 958.351335] binder: 23598:23610 ioctl c0306201 20007000 returned -22 [ 958.363094] binder: undelivered TRANSACTION_ERROR: 29201 [ 958.373758] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:15:58 executing program 7: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x7b1}}, 0xfff, 0x6, 0xbae, 0x7, 0xffff}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={r1, 0x8}, 0x8) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x83, 0x8, "c8a750e35c90acb5e35a3e4cadb304e4b6464fc9122037ba06a929ae28dec2ecf5573409804dbf5778569251c65b1695f91cdb8818de31e969ccfb39f08f90edcbc1135363ea8e31de3a7d83e7ed3d72fb9f6aa881d14e90aba139b32fff2170f5b5e463d173f312fc400bc9e2778c95f10cc1604642e56dea3c40"}, &(0x7f0000000100), 0x1400) [ 958.458185] binder: 23634:23635 got transaction to invalid handle [ 958.464770] binder: 23634:23635 transaction failed 29201/-22, size 536870912-0 line 2856 [ 958.580812] binder: 23634:23658 got transaction to invalid handle [ 958.587239] binder: 23634:23658 transaction failed 29201/-22, size 536870912-0 line 2856 [ 958.630073] binder: undelivered TRANSACTION_ERROR: 29201 [ 958.638617] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:15:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0xa) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = syz_open_procfs(0x0, &(0x7f0000000700)="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") sendfile(r2, r4, &(0x7f0000000000), 0x80000002) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0x91}, @in6={0xa, 0x4e22, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0xf2}, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [0xff, 0xff]}, 0x9}, @in={0x2, 0x4e24, @multicast2=0xe0000002}], 0x74) read(r0, &(0x7f0000000040)=""/11, 0xb) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r5, @ANYBLOB="16f58e82d2bee0eb0768c4085656682126e0beca7ea32a4663ae97035395272c4f8758e271108add36dbf658b8c3a470a80cfea610d011f01482a8224720bd16ba", @ANYBLOB="f7cb86706ffdbbb72b60b56c383d43a5a166dd963f820f8390c19d8befbf82e7db74ee57bb3881ab8aefc959dd4ee1960ccb9edc091e3ed712b618eb4dbb828a7c1ca2c282428ef8027c36c4e7112662495276e35f54ca31a98987b00e24ba49e55db403ed7df718f3ebdbf280dec09c84d6ed80b9e21649639c2e004f1c3004a87979ba7e2c006567af2eae90225fa3c6d9aeb5f1f5035e867a6ab957a5b3edde5f0c8fb0cc209bfaaf322c95ff803299a9dd4720bf21bdaa958deb3836e9bcb249819a86a5cb599d8cf3580b6314b5a669216eb11de24095be752d124421"], 0xcb) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="737a732e706f7369616363657373007866c9badf6689e4633ed3ef8c0000000000000000000000000000"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) accept$ipx(r5, &(0x7f0000000080), &(0x7f00000002c0)=0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r5, 0x1, 0x0, 0xb7c) 1970/01/01 00:15:59 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406374, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) flock(r0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) 1970/01/01 00:15:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x800800000000]}}, 0x20) 1970/01/01 00:15:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5451, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40a00, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x81, 0x501000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80001, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000000c0)={r1, 0xffffffff, 0x4, r2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:15:59 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4c00, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:15:59 executing program 7: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, &(0x7f0000000000), 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0x7fffffff, 0x7fff}) [ 959.581111] binder: 23674:23675 got transaction to invalid handle [ 959.587465] binder: 23674:23675 transaction failed 29201/-22, size 536870912-0 line 2856 [ 959.619658] binder: 23672:23673 unknown command 1077961588 1970/01/01 00:15:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7006, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') r2 = socket$inet(0x2, 0x7, 0xce) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x95a, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}}, 0x7, 0x5, 0x688c, "a9e8a52b7bd301dd37918186600c346838095154c7f43cb6d2549a9e94a8113e09337fb2dea294f669f3b3f336dc2df0317456c622440e7ed4215f63983110bc9056610559d24bf5f7382a5e1c375826"}, 0xd8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x6}], 0x3c) 1970/01/01 00:15:59 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x1) r1 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0x2, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xb61c, 0x46}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0x146, 0x30, 0x6, 0xc4}, &(0x7f00000000c0)=0x18) accept4$inet6(r0, &(0x7f0000000200), &(0x7f0000000140)=0xffffffffffffff55, 0x0) 1970/01/01 00:15:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x101, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000000c0)=0x6) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x70, 0xfffffffffffff001, 0x4, 0xbcb, 0x0, 0x0, 0x4, 0x1000, 0x2, 0x5, 0x0, 0x1, 0x1e45, 0x7, 0x3f, 0x4, 0x6, 0x101, 0xf68, 0x6, 0x30c0186e, 0x0, 0x2bf4, 0x6, 0x3ff, 0x4, 0x8001, 0x7, 0x6, 0xee, 0x7, 0x4, 0xffffffffffffffff, 0x4, 0xb0d, 0x0, 0x4, 0x0, 0x7fff, 0x0, @perf_config_ext={0x180000000, 0x3}, 0x4020, 0x2, 0x1, 0x6, 0x6, 0x8, 0xff}, r1, 0xb, r1, 0x3) recvfrom$ipx(r1, &(0x7f0000000380)=""/9, 0xfffffffffffffe8f, 0x0, &(0x7f0000000340)={0x4, 0x2, 0x5, "b40f92db88b6", 0x7fff}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000200)={0x7, 0x3, {0xffffffffffffffff, 0x2, 0x2, 0x0, 0x5}}) bind$rds(r1, &(0x7f0000000080)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x79}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={r2, @in={{0x2, 0x1, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x0, 0x0, 0x2, 0x8, 0x8, 0x1, 0x80000000, 0x1, 0x7259, 0x8, 0x100000001, 0x8001, 0x10001, 0x2]}, &(0x7f00000001c0)=0x100) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x30}, 0x1}, 0x0) renameat(r1, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000600)='./file0\x00') [ 959.650277] binder: 23672:23673 ioctl c0306201 20007000 returned -22 [ 959.688432] binder_alloc: binder_alloc_mmap_handler: 23672 20001000-20004000 already mapped failed -16 1970/01/01 00:15:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xfffffffffffffff0]}}, 0x20) [ 959.714783] binder: 23674:23700 got transaction to invalid handle [ 959.721153] binder: 23674:23700 transaction failed 29201/-22, size 536870912-0 line 2856 [ 959.766983] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:15:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0xc0045877, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:15:59 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x9, &(0x7f0000000000), 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x13, "7bb8f041987626ad419adb1e2f44ce4c1901bc"}, &(0x7f0000000100)=0x1b) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x0, 0xbb, "ef2635ef8f2d775dcff6f554c0bdf4bca5b7c14ebd01d60bd3b1db82647b61de60ff76852b36a89d36492ab7e368182dbfb127c431061e4de6f49a85ce9407692529f696ceea4b58bb9ac3dbbc3b5c84e0ed6b444fece30b46a5e1b841e48eb5a760f12ff4c845e90537c0baac8c4c1386d9c9635d483268541ce8375690ad86928657b73966174e0b075a55a7c3710f40d61bd1af591344fa414ff15daab860a926246cb4289b0ef1d5a2d149661443dd50ea06eee8a2b1788ad2"}, 0xc3) fchmodat(r1, &(0x7f00000002c0)='./file0\x00', 0x80) [ 959.801888] binder: 23672:23673 ioctl 40046207 0 returned -16 [ 959.825143] binder: 23672:23696 unknown command 1077961588 1970/01/01 00:15:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000d802000000000000ffffffffffffffff00000000ffffffff58020000ffffffffffffffff58020000ffffffff03000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000045060000000000000000000000000000000000000000000000"], @ANYBLOB="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"], 0x338) close(r2) close(r1) [ 959.856439] binder: 23672:23696 ioctl c0306201 20007000 returned -22 [ 960.037014] binder: undelivered TRANSACTION_ERROR: 29201 [ 960.044442] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d2e73797374656d2e706f7369785f61636c5f616363657373000d0c9335db03ec0d200755494e7881e7a36e7b4799851b9c1a883c02ed89"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) shutdown(r1, 0x1) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:00 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406303, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)=0x3) 1970/01/01 00:16:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xd]}}, 0x20) 1970/01/01 00:16:00 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x3fd, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000680)='=', 0x1}], 0x1) 1970/01/01 00:16:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0xc0045878, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:00 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x60, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:00 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x4000, 0x5, 0x1c0000000000, 0x3, 0x0, [{0xffffffffffffff5f, 0xfff, 0x4, [], 0x3}, {0x800, 0x8, 0xfffffffffffffffc, [], 0x1}, {0x1000, 0x4, 0x1, [], 0x5}, {0x40, 0x8, 0x200000000000, [], 0x80000001}, {0x0, 0x6, 0x3}, {0x3, 0x5, 0x300c, [], 0x2}, {0x0, 0xfff, 0x6b4, [], 0x5}, {0x7, 0x7, 0x7, [], 0x1}, {0x0, 0xfff, 0xffff, [], 0x2af}, {0x0, 0x4, 0x66, [], 0x6}, {0xdb2, 0x3ff, 0x400, [], 0x5}, {0x10001, 0x3, 0x1, [], 0x4}, {0x2, 0xc9, 0x2, [], 0x625}, {0x9, 0x7, 0x8, [], 0x7}, {0x3, 0x80000001, 0x8000, [], 0x5}, {0x1, 0x400, 0x0, [], 0x8001}, {0xfff, 0x1, 0xdf9, [], 0x4}, {0x8, 0x1f, 0x8}, {0xae51, 0xffff, 0x575, [], 0x8000}, {0x100000000, 0xf, 0x2, [], 0xffffffffffffff1b}, {0x5, 0x5, 0x3, [], 0x1e7}, {0x4, 0xc550, 0xa407, [], 0x100}, {0x7, 0x0, 0x0, [], 0x9}, {0x3, 0x0, 0x5, [], 0x3}]}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3f}}, @IFA_LOCAL={0x8, 0x2, @loopback=0x7f000001}, @IFA_FLAGS={0x8, 0x8}, @IFA_ADDRESS={0x8, 0x1, @rand_addr}]}, 0x58}, 0x1}, 0x0) [ 960.812525] binder: 23755:23766 got transaction to invalid handle [ 960.818916] binder: 23755:23766 transaction failed 29201/-22, size 536870912-0 line 2856 [ 960.844121] binder: 23759:23761 unknown command 1077961475 1970/01/01 00:16:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5450, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:00 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000040)=0xffffffffffffff25) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0xc4d7) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x1a7) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x8, 0xc8, 0x100000000, 0x0, 0x6}, &(0x7f00000000c0)=0x14) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x4, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x2, 0x2, 0x4, 0x9, 0x2}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x1e6, 0x4, 0x8, &(0x7f0000ff9000/0x4000)=nil, 0x6}) [ 960.859224] binder: 23759:23761 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000280)={0x100000000, 0x85}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180)={0x3}, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4400ae8f, &(0x7f00000001c0)) [ 960.890747] binder: 23755:23775 got transaction to invalid handle [ 960.897306] binder: 23755:23775 transaction failed 29201/-22, size 536870912-0 line 2856 [ 960.916361] binder_alloc: binder_alloc_mmap_handler: 23759 20001000-20004000 already mapped failed -16 1970/01/01 00:16:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x3001000000000000]}}, 0x20) 1970/01/01 00:16:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$inet6(r0, &(0x7f0000000000)=""/152, 0x98, 0x2000, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x1d}, 0x1271}, 0x1c) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0) r3 = socket(0xa, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x177}, 0x14) [ 960.943596] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4024700a, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 960.965925] binder: 23759:23787 unknown command 1077961475 [ 960.976176] binder: 23759:23787 ioctl c0306201 20007000 returned -22 [ 960.999380] binder: 23759:23761 ioctl 40046207 0 returned -16 1970/01/01 00:16:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000002004e22ac14140a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210a5a7a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e53903e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x510) 1970/01/01 00:16:01 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6000000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 961.062281] binder: undelivered TRANSACTION_ERROR: 29201 [ 961.072750] binder: undelivered TRANSACTION_ERROR: 29201 [ 961.138196] binder: 23806:23808 transaction failed 29189/-22, size 536870912-0 line 2856 [ 961.198680] binder: 23806:23814 transaction failed 29189/-22, size 536870912-0 line 2856 [ 961.231442] binder: undelivered TRANSACTION_ERROR: 29189 [ 961.237500] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:16:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x80040, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) read(r0, &(0x7f0000000040)=""/11, 0xb) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101002, 0x0) setsockopt$inet6_int(r2, 0x29, 0xdf, &(0x7f00000001c0)=0x3, 0x4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='cpuset&)\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r3, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:01 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) iopl(0x9) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000080)=0x3c000000, 0x4) 1970/01/01 00:16:01 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x20000000]}}, 0x20) 1970/01/01 00:16:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700e, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:01 executing program 7: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000280)=[{0x8b, 0x7, 0x0, 0x0, @tick, {}, {}, @time}], 0x1c) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getpeername(r3, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x28f) 1970/01/01 00:16:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x7, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:01 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x74000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 961.933286] binder: 23828:23830 ioctl c0306201 20007000 returned -14 [ 961.934326] binder: 23826:23834 got transaction to invalid handle [ 961.946203] binder: 23826:23834 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:02 executing program 3: r0 = socket$inet(0x2, 0xb, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 1970/01/01 00:16:02 executing program 7: pipe(&(0x7f0000000000)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x7, 0x4) r1 = socket(0xa, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x2) ioctl(r1, 0x8912, &(0x7f00000001c0)="c086b921243bc6af91c16f") setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180)=0x403, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 1970/01/01 00:16:02 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x40003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200a}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000080)="3382a7f5", 0x4) r3 = fcntl$dupfd(r2, 0x406, r2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) [ 961.997225] binder_alloc: binder_alloc_mmap_handler: 23828 20001000-20004000 already mapped failed -16 [ 962.032193] binder: 23826:23856 got transaction to invalid handle [ 962.038676] binder: 23826:23856 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x900]}}, 0x20) [ 962.066773] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80287010, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3434c51558f8c24f6a1e8c2c33e8417208d5d3f50c74cc93b9393ab99031a4a4eb2b0ac6fd17a5080f"], 0x2) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7fffffff, {0x7fff, 0x80000000, 0xfffffffffffffffd, 0x4, 0x8001, 0x1}, 0x2a38, 0x7}, 0xe) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 962.105536] binder_alloc: 23828: binder_alloc_buf, no vma [ 962.111242] binder: 23828:23849 transaction failed 29189/-3, size 0-0 line 2971 1970/01/01 00:16:02 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 962.171423] binder: undelivered TRANSACTION_ERROR: 29201 [ 962.177729] binder: undelivered TRANSACTION_ERROR: 29201 [ 962.193735] binder: 23828:23830 ioctl 40046207 0 returned -16 [ 962.220452] binder: 23882:23883 got transaction to invalid handle [ 962.226836] binder: 23882:23883 transaction failed 29201/-22, size 536870912-0 line 2856 [ 962.235521] binder: 23828:23849 ioctl c0306201 20007000 returned -14 [ 962.275843] binder: 23882:23886 got transaction to invalid handle [ 962.282232] binder: 23882:23886 transaction failed 29201/-22, size 536870912-0 line 2856 [ 962.308827] binder: undelivered TRANSACTION_ERROR: 29189 [ 962.314851] binder: undelivered TRANSACTION_COMPLETE [ 962.331104] binder: undelivered transaction 1156, process died. [ 962.356135] binder: undelivered TRANSACTION_ERROR: 29201 [ 962.361983] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x2, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:03 executing program 7: timer_create(0x3, &(0x7f0000044000)={0x0, 0x12, 0x3}, &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x80, 0x204500) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xfeffffff, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) 1970/01/01 00:16:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e24, 0x4, @loopback={0x0, 0x1}, 0x3}}, 0x80, 0x24d4, 0x7, 0x800, 0x4}, &(0x7f0000000380)=0x98) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0xf8f5, 0x7, 0x4, 0x6, "c45e3b933c6e1148554697e73238de47d7a8abf39a6102c3bef5f1a6ee9f5d320c74a1275595f9c37b7fa4d2", 0x1}, 0x0, 0x0, 0x4, r2, 0x400, 0x0, "da99f5c2fbfc34086ceef4535c6fe412179165e4074fe86384ebea67a7b031825bb0807180b0ab5436bb4b39c98d75c44b580be3e93460b13b3e00f0b71c1c57", &(0x7f0000000080)='vboxnet1vmnet0!trustedeth1&\x00', 0x1c, [], [0x80000000000, 0x2, 0x7, 0x2bb22bc3]}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/48, 0x30) 1970/01/01 00:16:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:03 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)='.vboxnet1lonodev$!\x00', 0xfffffffffffffffd) keyctl$negate(0xd, r0, 0x800, r1) keyctl$negate(0xd, r1, 0x2, r0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x7, [0xd0b, 0x4, 0x1f, 0x80000001, 0x0, 0x12, 0x3]}, &(0x7f0000000200)=0x16) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r3, 0x7c, "5fb94c3fb748d3b8d22fcbee02331ae6f31e4af1ded749ba79948156c821dc39dd1e59182ffff513e623a03846af1e515112fdcc61a013c79a8d2bfda206ae75570b99af26394351d51df482f6aa0a2020de7b590caaac71abe6ef2aabfbb0ae02346e9e97e794e2b099653b14e645a70a311874ff18f6277e762988"}, &(0x7f0000000300)=0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x10000000000009, 0x20001, 0x2}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r4, 0x4) 1970/01/01 00:16:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x5f00]}}, 0x20) 1970/01/01 00:16:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=""/169, &(0x7f0000000240)=0xa9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socketpair(0xe, 0xe, 0x1, &(0x7f0000000280)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:03 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 963.275922] binder: 23899:23900 transaction failed 29189/-22, size 536870912-0 line 2856 [ 963.294571] binder: 23904:23912 got reply transaction with no transaction stack [ 963.302204] binder: 23904:23912 transaction failed 29201/-71, size 0-0 line 2763 [ 963.338914] binder: 23899:23920 transaction failed 29201/-28, size 536870912-0 line 2971 [ 963.363272] binder: 23904:23912 ioctl c0306201 20007000 returned -14 [ 963.420433] binder_alloc: binder_alloc_mmap_handler: 23904 20001000-20004000 already mapped failed -16 [ 963.427435] binder: undelivered TRANSACTION_ERROR: 29201 [ 963.444207] binder: undelivered TRANSACTION_ERROR: 29189 [ 963.452845] binder: 23904:23926 got reply transaction with no transaction stack [ 963.456996] binder: BINDER_SET_CONTEXT_MGR already set [ 963.460411] binder: 23904:23926 transaction failed 29201/-71, size 0-0 line 2763 [ 963.466868] binder: 23904:23912 ioctl 40046207 0 returned -16 [ 963.475913] binder: 23904:23926 ioctl c0306201 20007000 returned -14 [ 963.512373] binder: undelivered TRANSACTION_ERROR: 29201 [ 963.518829] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:04 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffd35, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c504", 0x5) sendmmsg(r1, &(0x7f000000c8c0)=[{{&(0x7f0000006b00)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000009d00), 0x0, &(0x7f0000009d80)}}, {{&(0x7f000000b1c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x2, 0x0) 1970/01/01 00:16:04 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x6, [0x7ff, 0x127fbf3a, 0xfffffffffffffffc, 0x66, 0xffff, 0x7]}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x800000000000007}, &(0x7f0000000100)=0x8) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x6, &(0x7f0000000640)=[{&(0x7f00000001c0)="8e03316af8c10d6d2797583e10b0da16bf5d44b4123a658aba819505952a9173e1b6e235458d1547e718da42982c3017e23e0ef1960d2af680c16ad6bec7c90ec91c3abc17414138b76d8ed08287bacb472b0b7ba391c8700b3629a4b4bfad7ed5e6365b7524f042c582c2a36aa9f486166032355f7a88f0a38a3525461408ab68decfb88e8e77514686b460fd3b6f686c77e7aaea2c66061303455dccc3501e637b88f5688e4bfbaad4356531cf594748dee8b81da11cf49823e7c96969c6d2b24c9ce601f92121", 0xc8, 0x8}, {&(0x7f00000002c0)="094152256c80b1fc6a6a9529b29563a9b53e79f1fd2dae514247d3b0dc91e2b416f22c132fae5ce63e5a270ab4a952329bf5e0c9d8a8d074a9154081f67f62ab8a4aadc7ddcb60bbbd0aa130044732640c49fad275d51af742b4721d0581f0fdd241a5641293b6b70dc6f23c4e958ed2f6bd8da78966fc79f75e5632fca9d7af7fe62a214ff786403d", 0x89}, {&(0x7f0000000380)="ed52c90bd74c127a9fb1cf0c20e86fca961b7683a16ba7ce45f92698df1c8ed0f61974f26883b5bdcb64e62331d13f15768e1dfceb134fb4d8ebc22084e9c398444864c48c38baf81aaee9a5ff7ad61fe8ae7c620499e10999f1842e6e56194460eef72a1220d615da5c65b7b69428dc085ed90eb1a1efa5c30e033117ed0aac31deda1fee6ccec3073c9fa30bfc6c42b0728b97a344239452254781401b549a3fd6af33a52a29a1", 0xa8, 0x6b}, {&(0x7f0000000440)="1b9972a676a3f7545a30009107b4441a92b45b709691a8fcec080f158ba0129a6e1a3f5137d9d9780498e51c63d86302e9676af2afefa3fd6aa10489c278f4bd1f68e3b995b810d5bd37e71944f5283cfc770dea5c8c47b994ae6421cce3607f82041226508b5f4ddf2a6b50a1257e9a5c09fd2d66d7b134e48ce13e7322b4ba010efcb2005a1ac2e7c1e4a78d089007df84583936a82a91f611a32faf546b4a530f9090d008db4bc18bb91fcfa32f95cd66836398600f06f9dcb607f012c0c339e605575c477f519dcaffefecdbda3de4b3", 0xd2, 0x100}, {&(0x7f0000000540)="558ae578ea461b994b51079857fa290d4fa3e868c8", 0x15, 0x7fffffff}, {&(0x7f0000000580)="b1df4dd01bb6a64d23f4861e8e1c5d48cabe959f528b8e8f7699ed4bbf435ca5f1757bd41b6a0a7acd23d30781dc1742a467569e39c82003bc50ad93304e64872bba4b6b96f9f5bb1818db937d215d4b893cc4c90f3e6bca26581448ac913d89857fd3786910c357d3c64725d4c728ec02769e4f94251316c48ccbfee49c25a6568f949d895523157c6c9dae6240f98d6942aa7f1d8c08b187b0bf9ba33c675793ba461816a437df3f87c6af", 0xac, 0x4}], 0x88, &(0x7f0000000840)=ANY=[@ANYBLOB="6572726f72733ddf36d973a9102e8f7f632f6e74696e75652c71756f74612c6769643d313b0033362c726573697a652c0300000000000000392c72657368ff79697a653d0078003371"]) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000800)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000780)=""/70) 1970/01/01 00:16:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xd400000000000000]}}, 0x20) 1970/01/01 00:16:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406368, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 964.559282] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 964.609486] binder: 23944:23948 got transaction to invalid handle [ 964.611940] JFS: ß6Ùs©.c/ntinue is an invalid error handler [ 964.615843] binder: 23944:23948 transaction failed 29201/-22, size 536870912-0 line 2856 [ 964.628359] binder: 23944:23960 got transaction to invalid handle [ 964.633739] binder: 23943:23951 unknown command 1077961576 [ 964.636434] binder: 23944:23960 transaction failed 29201/-22, size 536870912-0 line 2856 [ 964.638220] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 1970/01/01 00:16:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8008700b, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 964.653434] binder: 23943:23951 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x48000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:04 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:04 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e24, 0x4, @loopback={0x0, 0x1}, 0x3}}, 0x80, 0x24d4, 0x7, 0x800, 0x4}, &(0x7f0000000380)=0x98) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0xf8f5, 0x7, 0x4, 0x6, "c45e3b933c6e1148554697e73238de47d7a8abf39a6102c3bef5f1a6ee9f5d320c74a1275595f9c37b7fa4d2", 0x1}, 0x0, 0x0, 0x4, r2, 0x400, 0x0, "da99f5c2fbfc34086ceef4535c6fe412179165e4074fe86384ebea67a7b031825bb0807180b0ab5436bb4b39c98d75c44b580be3e93460b13b3e00f0b71c1c57", &(0x7f0000000080)='vboxnet1vmnet0!trustedeth1&\x00', 0x1c, [], [0x80000000000, 0x2, 0x7, 0x2bb22bc3]}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/48, 0x30) [ 964.718179] binder_alloc: binder_alloc_mmap_handler: 23943 20001000-20004000 already mapped failed -16 [ 964.718845] JFS: ß6Ùs©.c/ntinue is an invalid error handler [ 964.737830] binder: undelivered TRANSACTION_ERROR: 29201 [ 964.745223] binder: undelivered TRANSACTION_ERROR: 29201 [ 964.789400] binder: BINDER_SET_CONTEXT_MGR already set [ 964.810367] binder: 23943:23951 ioctl 40046207 0 returned -16 [ 964.847223] binder: 23982:23984 got transaction to invalid handle [ 964.849396] binder: 23943:23971 unknown command 1077961576 [ 964.853680] binder: 23982:23984 transaction failed 29201/-22, size 536870912-0 line 2856 [ 964.866456] binder: 23943:23971 ioctl c0306201 20007000 returned -22 [ 964.870918] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 964.939260] binder: 23982:23988 got transaction to invalid handle [ 964.945845] binder: 23982:23988 transaction failed 29201/-22, size 536870912-0 line 2856 [ 965.012520] binder: undelivered TRANSACTION_ERROR: 29201 [ 965.018408] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) getsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1970/01/01 00:16:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) 1970/01/01 00:16:05 executing program 7: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xff) fcntl$addseals(r0, 0x409, 0xf) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x9, 0x6, 0x3, 0x558, 0x0, 0x2, 0x80, 0x1, 0x1, 0x7f, 0x1, 0x8, 0x9ebe, 0x7, 0x7fff, 0x400, 0x3d9, 0xd14, 0x101, 0x7, 0x4, 0x9, 0x6, 0x0, 0xffff, 0x14000, 0x6, 0x7, 0x1000, 0x3f, 0x0, 0x3f, 0x6, 0x81, 0x9, 0x8, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x1, 0x62, 0x3, 0x80000001, 0x4314, 0x1}, r1, 0x5, r0, 0x8) recvfrom$ipx(r0, &(0x7f0000000100)=""/4, 0x4, 0x1, &(0x7f0000000140)={0x4, 0xd8, 0x8, "bb2010dbf824", 0x4}, 0x10) ftruncate(r0, 0x0) 1970/01/01 00:16:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x1101]}}, 0x20) 1970/01/01 00:16:05 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8c0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) vmsplice(r1, &(0x7f0000001480)=[{&(0x7f00000001c0)="12dd2699e804caadf12b72645480e9e41bca5d9ca219b81c85cd3a1ef8d7a0053f0ee97754bb387b5e9d1f9fb8ab62dd24aef3e84e6bf6", 0x37}, {&(0x7f0000000200)="a4f393207eb4a0338213bd1f111bd7f270bfa2a4b929e57d797ce7238bf739bea5b4e15664e893af9e034f0d2bf3da73ff6eca9bab9cfe4c9e6665250e31222043406b5029b0b34737b8a733c5ec89439b776c0f3fb8a00d2754228dd22154d272f3e2c0f1bb87afbc062a9073f8c78e7cc73b3dc8be2e7010ae7bbe6167d6ecb92b8ded126c99c44fa40431a48943080e824664a8a0c646d146f17aef5ae884d4e5a4dc23e3023e37f37cc900ce347b0e9fc9fcb162c9fe99da6d88cbcc3cb82ed1403d175b631a3881e7a1995e16211c4f9564dfd86e20ce8f6f1b828b6f794bc8ff58ad8b", 0xe6}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="2fb6b9d7d97a5c8390b65ed528bc2a421c6d09d1791e6d032af31d65553530a3d6d11a255639df5bdfb0a2338ec9f7130f1d0284470992de46497256eec814f1d53069f8684327ccacdf93376b187b3214ba547ade48a77684829ed086c03b242e8a53e5656a1fbd6e326db1dfe98c2a16d4c6a528302973babbae6e8a6286c60455429a477bddfc41b24192a59ba6a1d813e69ca91e416b875adb0b689b69dfc01dacca7a9f", 0xa6}, {&(0x7f00000013c0)="5318e831e9adc7e49fd03a88b374b4d89aa82371c5f37a00a5b46ab4a87981dd91770c73f5b019de91049c8e9d777db2eb667974e22b04b45381da5a731d7acf9b9d2bb6696efcc2ba746674478b5e053dbecaa72a5af0de8197bd0a29b9197d622080ed1f39d55ef4d7ae7fa4a76720238aaf6f36fedbca3f0903a6bf005ee970bf4d84fbdc9d0c4ca48c97dadb6eba99332adaf5a6fb241a659a0076f23a9c72f2de37569b30b8071f72b13fae45499aa0c3aeefa6f5dc", 0xb8}], 0x5, 0x5) 1970/01/01 00:16:05 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:05 executing program 7: r0 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$notify(r0, 0x402, 0x24) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r1, &(0x7f0000000000)="66642f343735006bc81a30f48a62d8694a59365f5ab67305d1fe0c096480ed3c6153655e67e6fd4905f2e88242936ec146692c8584194c14de24e890deb876533c037ae9c8b4148a922f318f8ea48bbd0f94f3f22da9be7634ad22d5831dcc39666983d4b304d212fe28482bbee9e2610dd53e16d6c200d56c813f9f4a3391d8d5702575f43d30b6609cc3e206520088dbd91ab9c930915f000e") [ 965.892205] binder: 24005:24006 got transaction to invalid handle [ 965.898680] binder: 24005:24006 transaction failed 29201/-22, size 536870912-0 line 2856 [ 965.912814] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 1970/01/01 00:16:06 executing program 3: r0 = socket$inet(0x2, 0x3ffffffffffffffd, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x7f, 0x2}, &(0x7f00000002c0)=0xc) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000300)={0x101, 0x9, 0x1}) fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000540)={r2, 0x4000001}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x972}, 0x8) r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1dc0000000000000, 0x1) r5 = memfd_create(&(0x7f0000000380)="62d9c8f4d4ed0c992b7b395133d1d5253be65bf6be14190c0fe52edff4633e1f0f2edf660d53fd623282f34c5555186272c93aaf089b3293249317420d4a9c2bd96691b01f7e55049364f3bbd245f74ffa8e45a6045830aae2111b46563872766e102123d828211d838a972101bc8fa394d3a8148c52ff7184810d572b97f015be8230bef31bc4c2d7d30b8bfe1af67a17", 0x1) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000340), &(0x7f0000000440)=0x4) connect$ipx(r4, &(0x7f0000000480)={0x4, 0x0, 0x8000, "680308ba98f0", 0x100}, 0x10) recvfrom$ipx(r5, &(0x7f0000000040)=""/222, 0xde, 0x40000000, &(0x7f0000000140)={0x4, 0x6aed, 0xf6, "be759daaee75", 0x6}, 0x10) [ 965.956805] binder: 24008:24017 BC_INCREFS_DONE u0000000000000000 no match [ 965.963920] binder: 24008:24017 unknown command 0 1970/01/01 00:16:06 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40286608, &(0x7f0000000040)) [ 965.999202] binder: 24005:24025 got transaction to invalid handle [ 966.005614] binder: 24005:24025 transaction failed 29201/-22, size 536870912-0 line 2856 [ 966.030444] binder: 24008:24017 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x5a00]}}, 0x20) 1970/01/01 00:16:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x4000000000, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$TCFLSH(r0, 0x540b, 0x7fff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:06 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x3, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x84000, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000300)=0x54) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) rt_sigreturn() r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80800) r4 = dup3(r0, r3, 0x80000) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000140)=0x54) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000340)) [ 966.069263] binder_alloc: binder_alloc_mmap_handler: 24008 20001000-20004000 already mapped failed -16 [ 966.118228] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:06 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 966.142915] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 966.146473] binder: 24008:24017 ioctl 40046207 0 returned -16 [ 966.161883] binder: undelivered TRANSACTION_ERROR: 29201 [ 966.167492] binder: undelivered TRANSACTION_ERROR: 29201 [ 966.181314] binder: 24008:24034 BC_INCREFS_DONE u0000000000000000 no match [ 966.188534] binder: 24008:24034 unknown command 0 [ 966.194283] binder: 24008:24034 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000140)="76976eefb534c47a6a151d49504ef4eeb35820fe0cd2cca668a3631027a98c87fb1a7cb4bcfb3fc1fe84bf137be6c399b8e6046e055ac805c42d47c95fb93b802602a8608a0d2503a14ac39b9b53ea551dbb7786554e25502c91337327907780141080eed9858d494373bd272e8209f7082c10795e5dd2abbe313d8a57105dfcdbca282a212b", &(0x7f0000000200)="7f656227d6979150678f93f869cc78b8f46db6aa6d1113182a714619a63c107a43a8fc5a3d49754985de788bbd07361f415d8b52c69581e04233fb94bddcc88176512e8822", 0x3}, 0x20) 1970/01/01 00:16:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8, &(0x7f0000000080)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 1970/01/01 00:16:06 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) [ 966.265416] binder: 24056:24057 got transaction to invalid handle [ 966.271838] binder: 24056:24057 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 966.391546] binder: 24075:24076 BC_FREE_BUFFER u0000000000000000 no match [ 966.398600] binder: 24075:24076 unknown command 0 [ 966.410789] binder: 24056:24077 got transaction to invalid handle [ 966.417199] binder: 24056:24077 transaction failed 29201/-22, size 536870912-0 line 2856 [ 966.431843] binder: 24075:24076 ioctl c0306201 20007000 returned -22 [ 966.474125] binder_alloc: binder_alloc_mmap_handler: 24075 20001000-20004000 already mapped failed -16 [ 966.497187] binder: BINDER_SET_CONTEXT_MGR already set [ 966.509462] binder: 24075:24076 ioctl 40046207 0 returned -16 [ 966.514285] binder: undelivered TRANSACTION_ERROR: 29201 [ 966.517740] binder: 24075:24082 BC_FREE_BUFFER u0000000000000000 no match [ 966.522112] binder: undelivered TRANSACTION_ERROR: 29201 [ 966.527929] binder: 24075:24082 unknown command 0 [ 966.528170] binder: 24075:24082 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xd00]}}, 0x20) 1970/01/01 00:16:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc957, 0x202) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0xc91b, 0x0, 0x10001, 0x3}) sendmsg$kcm(r1, &(0x7f0000002900)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)="dee7d618aaea", 0x6}, {&(0x7f00000002c0)="402fe8308ca05a8864e40d09fd9911b0f6bfd54a2fdfe6946f711718cd17a452fe8a07efa06f144882d5facb6b0a1baf74e3b99b7a287dcdc4693ee8b2cb6bddd7955a9a1490fc6a77027d549abe401cc44a6867a57be24aea52fe12cf5e58f027fc5e382336333e1f5064f76f1f07f0cf01b23bc2aee7796019643d421b3b982234f684fdcca70aaa5b25a985cda501dcff4bb2cb5601f960a5be355344dd15a2f37043f18e87181dcede368e5cd80a05b8136ea5937c205fc3e968426d2c2e4830c42f9703af893b26cf6bbf750fdd990a92e932bcbccfaa821198ee825cfe04126fad425168c9e79d1785ccfb8f68e41d0818", 0xf4}, {&(0x7f00000003c0)="0d13c5a574c6fcc4786b976ecbb8cfcef59f7f86857fe765cb29c6c53d5f3fe67350740a2067c7a622ec8a11799e7bc13ee7a2313d7f9f88e9fd7144d9f7b58d92e7b8980b5d9eb9a16e6d379bb23da835873103751c351a1b83c97506233ea8fb4ff69fefabff1bca284f64c349c77002db07554e3bcca89120d2ae269f5ede396f88118cde382e318e8a33177151d91630aa4abe0465a9be1f778fcd0243a60b8c2c457f149677c1105726d4dafcb1c86ecf736fb793e090373c6ef894a61d37fb9aba", 0xc4}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="636d5a1d7ed1f1e267416454e40abf21aae4a3328d3f643de4aec174e2e6c40e7f2564aa98782760fe569878acbb1aed1177f2740e5d989ec0a514a8fb816d9abb7f0317ebe787c34ce10eeb67841e9b68a4651b2ab99a6a1a", 0x59}, {&(0x7f0000001540)="70d62d52a947a3f88a879df0adc0314cc3", 0x11}], 0x6, &(0x7f0000001600)=[{0x1010, 0x0, 0x7, "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"}, {0xe0, 0x11, 0x100, "aa44e696bb6d5f79a9efcab596dd82b5e4716a65194691835922984a19de728c753b24fd44f979d13e03ffdff0293f31f9de98d661b997304eebc7da22d41e1407a7329a0a7e70e3953d0a4da075e47a77aaa61d6baa11a16bdd02ad200814c55d058622bb46e03afb93bae0993f500dfb0b9b9c6dec02c199aa681c69221f5faa0d86bda068f91cf6b67324f451c1468f9a34943e7a687799f90a6a3df7b0df997f6f2e46d657fc0a19b405dd32141fced358a8672afa96d60d5cabbef1c672bd385acd0982cacbae"}, {0xb0, 0x0, 0x5, "1a46cbe10f9e4e8cd588e67e283942bffa89aa59b653a1356ab604c9591034d1381f14b7862f170e69aa2192df4268d47aed96d4ec468c2aaa1344d5c11bbbd1bfc438f3f8c8672d508b211a2c30aa8361f23cd3a9bda935b74447cbaca9f3e7c3024fe38a5bfcf446b2b3ec231dec103e615bc7a857bfed6e2ebf8b26380b00e960cde4515b51ef56cf7d370920f55674511c414a9605d35783de4f3b56"}, {0xd0, 0x0, 0x4, "bbe6c4a9135f5a169b9673eda1f6a9ac23696a08918958a83676905af329d62e61f6137a1a19a7528f9c4d5b490342a65530836db7eae6366891e1eee8f1fa1c9877931c8f8bdc293e247fa41e47389701fbf9302dc5f8b0fb8b59eac74e3e9e73c9b96c5b49ffb106bebe4ba6a1278e6df4f6e095747b6582bfe245d23b64bf4910b709a2123c5d180e6bdd42065fe0d07a7a3b682a9faf0bd015344cc2bf8f6c39218d1eb3cb0462c2211e7bf3812613f2a83d06573b15c2c7"}, {0x90, 0x13f, 0x1f, "7d60a114883c4398b27412f8dcee612109ac5655087b91f132e254d07df296a5cd2d5efa4a1ca4ecac00edee915fbb8e97aec5a4b99e1d716151dbb0913602dc638e351945b99bd6ede9445838ae72f82d85d2459474fd8c3e27a69000dad0800fcad6bf1439af97895f949152f8ad07f86dea6e20a803518b82"}], 0x1300, 0x10}, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x2, r2, 0x2, 0x3}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc008551b, &(0x7f00000001c0)=""/235) 1970/01/01 00:16:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000001200), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000001c0)="cb5c5d6f1f1e3fb1630076de956110bafde536cb4aacf317c7fb221e9fd67b3d63b1b83040198c3aba85e505c8e210768c7c6e21ac7962227b2eb6979fb80afe54490e1bcbdc941b3a1876de55973ce77afc9c17c2dbced673cb5e47ffe65056c2664a9d922df7eceb1004051631cedb3b714be3d69a2dcb12164af38f25e712ff27f2257e2a1b21f1308fc25433c123ad78e2d6d7be11961589913bf114edb434708cba6a1d94a815e30799ebea80c93fc41b5948a19867b6b7dc6f099f2c0b0b9f719651794c2e894dd4efed51e775cd3b73e13c8859330ca0dd71a2b955374d7d4e764cc0fe75a58fb592c064d13c6f3bca59627326c040ca8a74295902741f05b597e9f66f0994ee8946492eaaba5aa388ac74c0a7235a1c688dcfe8b35338b06711a77da9fca7ee25c1647fc9cb4b09a1ab34bbd99fde341d1ba3ff8837a5dae4809618db8f8fd0b875e67f166437bbf741382c5bad70a838cb269f4e322b2c858008f0aefe7403567bdae559dae543ecc135011cad21b08b6e1b337a1e29305fff3bf7983a9ddfbcb397f2360fbc8caeed3ffbdfd71c31f18e4714473d0a70129bbddb2d16f0de8e566838de4d6e6ff0b2bd127d1eb63ae6a9e3ae861c1d291a3915bf27edb6db0709013d12549c832086a7d26726b417961863ab7915f7d6337b0e4d02b790df4c9ca3e043ac48ab7a294174eb1fa0a9d535f8238ca7d4018c32e8f56c8f8cb8827fe2e0047085321edf082f101546a568ccee4588e704cfec0d8bec4b642a913caaea5b3b79e8ba91a945a31267d96f709b139307ec1a4dc76acf95b6d29c87b355125c93e8abfada17593ff446f5730020529937e2c0952a176077debeade687cd2d365a4c1862f7cf2dfb0775fa9722f5515623bc8b9e732cdac13bd63307b554512caa069a98520b799d19136853775c6ba1f18a58caa77acad41619f0930f472683fcc139a687d4768bb2a0e24f268e3cb98fa0b3b80d82dfb5ff692eba40fcdab289c28d690df0d3428b3a0400cf962fe850127b8ea89fb1c3f4595643d9ea4c24cf268edaad0b391fe31841221a3db09095771cd466e446d51d0003a842c02079edcb6cef5ad4d3815d234669288c1f0fec1010f6c97059555e99631a94561dd6ba552377b02996e42058040802df633f9389f73731dd6a4318b7f68e0231ffe4cf7728e4a62addf555f69d27fcddae15d0b3ee6091c40dc84989347eb9494ffc54918548429ed7079b38db167356b5e08993fc7f749f4dd7f8af64205887741b226fc62d49a8e8b4611a0b50235853d9644fe17f19e924542da9e421c95edb82052946500ce0a6258187c1285e36e674b627eebf2690c4258a27a438ca0174969374e3a07a4284fc62201aba285c3055d0b3f2ed6948e76c7d2819c0b4668965f80c9e297ce89b909b108a47d220ff9361d996a0756ae76636d4f6d07983768edd03e70c8724f7c4f4d43be951266fa6950af586286f94fb6e13fe4e7229ca32648894317d7042c07b12b1f933f80197ebb22b57f3bf76989cb13851a4a5c0a6ebdb34716172525563b861ccc3fa548b8ca378b4178f1f4984e2af1fa6dfbeb38555e50c4099f41dde8f2e9d4ba88fd7e459607256cd8b236cc6ca18c05eb2f059724d8e29ba425f3fd11ed4bb6b1a7b073cbc8e97193e9e87fda1bfa535b5e7c11049bc967229189b231ce5421bf71264c6be70676c5785e42f6d48f58b6c41c0ce8ae58f548ccc9a85bec72d1c5897521f1257cd5403c0d29627d00e7988da5c6b4c45f8e2e6017fe67c911d1f087af050d646a446bcb1a98ba49a8ef9a4fb559b7f1e74ebf59a0718231d5eb53c052f91bcf48f67d9f72e238e7be62cd8f96823730276fbb21f357314cee4a1121a44df163cd02e333619d1568ae47f1dd0bd798cd8632ddf59b1ded4538e5536551e08b09b56a74870566661a38ce4734157f893d388eb107c6ccb4cd8acc6eeabc4964cae7c99ee52b741aac3f3697e4a2d08d1119becb2ab7c71ceccf8239d457950aa7f6b94fe5a17365f2105bb50e9f32f2162b8740f949524249e9d544a859ab070da81a43b73a1d0a1d62e91184ba4ea0f010e3f74f3bec045e19fab6cf6d4bd4efe85dc2c847bffa5174ea1377a06194c5c00b50965dbdee64a296152ed2a3eeb652e1d3714aa640746eff8a10da436a1e3264a6c3d386bb303d0756d5a23435ba6af39117fc1ac50ee1ed24bd0791231363714633c1748ddb7d71781a9ac5b11dc4b5e6830474f34c9356e070b27e20993246cbecf47a41929abe3137fa9531902434a94162ea8ae4dd704e41459051537bf4e6c3c449150b2c9fc8a094c4c7ebb431ce67f906b19bf0176f8523358c7c91fbf5a6965683adebcf5006afc595fc4d111854f5db5c27372b8ca8921aec20bf2bee961137802231b5a47dc8d6be339f2d7be94764444cb7d5b08d0db7fbcb17475c11903d06eec7ebe69fca4045c65ce9a63e1b988d8053f529cc668224b78b8c73c6b559ad36083681d3fb7c3a7e4763e5390627d9d8c80de4814fd74fa82d85735d237c7494961e70b06d462a609507ecf506da6b4a98f3db72e28ad29eafa3b06ab0580737e0b766a9eef8c6aff8b3bd436d23f18eb3160f2de14f9a009bf315fe716c4e051e83de9f75bfd28add9e11d685aec3fa7224fdf691a28728eee39e59c2e51c50d02140a13a515faa49e99459a5fd30d37dea2f5f32dc04ff5b7f53b1bf2a53afe6014913c324a9498f753f5743abcf21f5ed9c5bde38932c2f2b06b362d310851c9a80ee891d14a19b23a2e40c7751b8f078f9c9ed5203e6b2402542b5fc31cf0916c06cc67282e394a62c7785aad936156fd0896047616f7528145e0528754d029dd97161612a1b70cb62253a1b5bbd91bd452106ed9265f5985d3e9b4871b3ae1cb64e3c56e4f7b2614cad7a3d99d78db7a32aff0e363b548c4718e10b2885354fb338bec77acaec727c082abaa98c12043f171b83ce96ab494a0af14b98a424d844d1c1c005fcf27f6460a4c1e0ad04a8a4b8d2dfde14ff8451e56d30eef101d90aa02ad75ce21c8ffb9a7487f40e4e04ee48426d74c31b902d55de33d8ae44e604ba24e3e9d9a541f26836b266e6f6c671fb81f3cddb905b6223d1853e59e0372586f11fd8b750d86c699dfdc7edf56adbd67eea70809681f7773d21827e58b9298e8eb54dc81880a82e59678821e678abf3a242ff14df8a4cb2de0958c4f57566704ef643ae708d7d0a29515fbc789f367b9c4d91d9375f61836cba4d9d73363b0df7c5213183717194a2df8529996e99b3f62821fc3f1e82dcea711c61c364477d7b44d49324faca62a16e9b8c8a6f0c19cad38ef64760392161c7f0a1c2a3e82a9345f205fa90825032cb2460b2096984b91178238275dc97dd196676cb7559120f0d30631cdc8968cfd87b77e4dd4bed3b0d760c95dceabbe28bcfe4b5a4aedd41090d7d76c8e39a89dfc29bc44413e5f9bef485cccb4073c474b7757ad565e7bb648e9b79a221e7d2958fb07eee2db7397838c79aef222f5eba4e980f360c1627de94ca7a3aebad746df4f06878085c5a93a4a9377c426748ad077e333f8c6f185b9c7e9a0ee1806e9d3b5ea281c134b8e21272c98740efed39d66c47097dcf98a0ef3d0cea436e0abe733e167cf018600bbbe371b8b43780d4ae9e4059cb6026791bb6925b860887c3b731c193eda7c4dcb449bb3958cf9b16bb9e2a53d07d8ae4eeffb1b995734cbd85826f07c4ff1825abf7ae47cf1da8a48ed27d684795eb9e093a84cf2346c566e0f42e6ea05820354884ff63e56a63f85db0c798060aa4a5c8527f01d505668c17e1e8f4bbca510fafa8b6c0d3e4e62283e7640925d5a5ffabf6f5212bf545a511bc2e2f9e48c789797e2fdb979f28b1868199798e589e866a55478679a6b752c88c9cfd8e4e73ac91a05aa780b9d14d1c39e66d222d40446d49eb39e47919bf940e34b53b1e62d6372cca0c32c315acf71b85d818b2449199734b35e0dedda527dbc712dffcaa093185cf0451708f8d3ccbe74ffb8ecdadc3c46429d71d9f18f69516ec4d7da3159deb40ef1e6411e088aca728143cae088b24d728437210ead3242d60df6cbb2cce265f133cf22d8a5b08c8aa15ccb449573f691fdc61fd2dde1831071c4dce0d8a3849079c0dc7e1d8b45875ec1bacf4c86d8fb9c686d8ff84d82fd3a1c0ee339c1fc2a83336dd573dda85d11f4f1053159a49491106a00a8335e0dd9ddef71e232e6cc1c8f90eac2bdd2177319d45f7ec864aa9345767a4296b5ee566b9560493003232425c2277378e314bdacf57711a18793e321a9993d8d08dfa532bdc44ca2a053badb8edd1351ee3aa9ce672e171b0defbe40558a56d7609a39f423a8d5934527d654f892c4d3711d33907cb3ec3abb0aaa1c5ee748da543efac561262470b40a6812fcaa68729d4a35b65d94f9437fa327f8d014d3f3b3e786cdd1ec07b54ac181830bbf7571a3dab20681daa59db00a27137b0a0c87175c8b285c8602cd8e82d476d36abcc2e620c6742b6d9c41c93df1023c17f139a58461da0f8514e73a6d87951ad849daf3bf0413cb5dd334dc9581b8ff462e9ace25ac03774bc5ab3d20866b9ab3eecf09e3863796cf058b7fd80189e6fffa05a4bc1df51d28e8cebea2013a85fb564f10364e01b6f1e6702121747a8d83a592072fd063bcef729d0d94d13183d1d7b4cd9b3d0092b883bbf5b2120f35e0f9d533e81e3647ffc5f918c669b0cb6ef26f6ff880c2dd8a4e290cacc141c9251b8ea249011aca46cef1e5341647312fabe6412760cec9a7fbc3235252faaef6eb4cbdf0fb1be3c007c6e342cf59529f868b503473ab16eb833c68a9cf6f5e5d3c31e3d0d97ca614f3018df521300c4fd7cafb1714780239c3490f2bf3ae6763d40d31abf8a1a6854c5150bb23322144a2bbac26c82cbb9838615abfa5a9a3c70b8cb000b6d0c5983f38260f65a491a5f6ba24708277470dbfbb3d3be7a63e789471e07ba763176f73891cf999de07048a408d027ed8c469afc0c95a0b6eca7d48d84c4b535ce4efb2e29ba554e15000614eef1924c169ed4817329fa43c322b0536c1a7792c7274eb69881242a3f9f89ecceda601f296c6c729a4ab0cdf2b0e05a85dc564152226bb524d30d283683d9dfea260f5f792dbe75685c856bfe16ebdb4c5e6591e92164a9b17de2ee1d7c147da8667bf6349fbdb14b6a28225e3a977e62689299654eb7ec8633efdc8012231ad4f16605630934faf0c38127f1854292b09f5dd769e27a97854773ef059cfd67157666155369fc8ccf477b4f447f43855a332f49a18c34d8323dc42b0681939ae67620638aa6b36f0424e23e1ae9d2c0d17af98dffe4ada4d3e12b1ba10fb3a7b92a7efd2d1b4b03dc60dfbd5f5f83d2fc4eedc8e5ed851ea2e51f0264614573c98505e1eb9b7248f781d5d54287e9a30739c1c9b0d2e998637b80a3fef20fb0e1948de10fc77006a428a9b29a3f4fe42880b9c1e1b7e9486cca6e691db815d15deacc71a070896dc73c1aa5f070ed0a42e73c4b2e60579f4ea56fad991b8228b4f03e6ecd715d1404e2aed63c1d0977ac2a49e06620ff5f4db1f534e93d518e6dfa64c0621a3158a752580c7ed1db0d4f750312a9cff8434e3227f43afc33a6a5269c4a71e99ebcccba671ece6441b9461538245163d66ac0fc4d10793ce80898a16dd0a859bffb62df34ba10ea44b1c7e41dfac4c9e6dc4e6647e2f30856728252b279b18c193") listen$netrom(r0, 0x180) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregs(0x4209, r2, 0x730004, &(0x7f0000000080)=""/38) getpeername$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) 1970/01/01 00:16:06 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:06 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:06 executing program 3: r0 = socket$inet(0x2, 0x1, 0x5) ioctl(r0, 0x1, &(0x7f0000000000)="a7865c984acf08ed311c5e7a810c76a3444143ceffaf85913faef3f5932953f5b05feb22db77a870dd9320f15ac307bdf78518c107eab0fcfdbc8afe9f24608cbeeb4668eaa0f5929300c9893c4dc428c5fe4d285cdb98cfe959ccdfe31544fbfe14c78355689151542f448135a74354f18213e51bf9dc62944282f4fef2a1936bb63a4f7f1b91d9e97e3454309482bc9c26f5484f4991a695fc4c7bbf35f1806d62aa9541") setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 966.895649] binder: 24089:24090 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 966.903346] binder: 24089:24090 unknown command 0 [ 966.927946] binder: 24100:24101 got transaction to invalid handle [ 966.934322] binder: 24100:24101 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:07 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) [ 966.969945] binder: 24089:24090 ioctl c0306201 20007000 returned -22 [ 967.006184] binder_alloc: binder_alloc_mmap_handler: 24089 20001000-20004000 already mapped failed -16 1970/01/01 00:16:07 executing program 7: perf_event_open(&(0x7f0000000140)={0x200000000000002, 0x70, 0x3e3, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100)) ioctl$TCXONC(r0, 0x540a, 0x1ff) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x20, 0x10a40) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) 1970/01/01 00:16:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="000000002663dbb7742d2d348b4507e46088cb3f5ee1d814b00e2559a96031087c0abaeb3281c8a3fa606858dc24bcc32a42a2b00bb5a713b3ad31f603642da02f1cab938f932c0596eee432c82f5861c27f5a5291cde75c609c8521c49734cd29399a9fe7fe7e5c997e75ac43bc6e2cdcf562ba47a8e8058a1c5334fc47c30683550afd33df97103f9c4d", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x27, 0x0, 0xffffffffffff0001}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x3ff, 0x0, 0xd1, 0x8001}, &(0x7f0000000240)=0x18) pread64(r0, &(0x7f0000000140)=""/87, 0x37, 0x0) [ 967.015860] binder: 24100:24110 got transaction to invalid handle [ 967.022225] binder: 24100:24110 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:07 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40286608, &(0x7f0000000040)) [ 967.076401] binder: BINDER_SET_CONTEXT_MGR already set [ 967.126638] binder: 24089:24090 ioctl 40046207 0 returned -16 [ 967.143434] binder: 24089:24113 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 967.150939] binder: 24089:24113 unknown command 0 [ 967.163169] binder: undelivered TRANSACTION_ERROR: 29201 [ 967.170664] binder: undelivered TRANSACTION_ERROR: 29201 [ 967.182872] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 967.194778] binder: 24089:24113 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x4e21, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0xaf, r1, r2}, {0xf77276c, 0x5, 0x5, 0xfffffffffffffc00, 0x5, 0x8, 0x2, 0x401}, {0x101, 0xef6, 0xf87, 0x9}, 0x9, 0x6e6bb9, 0x0, 0x1, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d6, 0x3c}, 0xa, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x3, 0x3, 0xfb, 0x3, 0x3, 0xfffffffffffffffd}}, 0xe8) 1970/01/01 00:16:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xa]}}, 0x20) 1970/01/01 00:16:08 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7400, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:08 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000480)=0xc) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:08 executing program 7: prctl$intptr(0x23, 0xd) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002380)=ANY=[@ANYPTR=&(0x7f00000021c0)=ANY=[@ANYPTR64=&(0x7f0000000f00)=ANY=[@ANYPTR64, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYPTR64, @ANYPTR, @ANYRES32=r0, @ANYPTR64], @ANYRES64, @ANYPTR, @ANYPTR64=&(0x7f0000000f40)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYPTR64, @ANYPTR, @ANYRES32], @ANYPTR=&(0x7f0000002100)=ANY=[@ANYRES32=r0, @ANYPTR, @ANYBLOB="b1f2773a9afde00d2cbb7a431a658a7310613db608aa5ceed3490a95b72a5992a796f188c69329f4cda2653e3e764e3bc2209d31f63384244298a6adbb846b7fe29120ab2e8f28d8f370d04082db1a16ca0bcdf21819f6c7261bc0e6f665b70f965d26dd7d8ad2bf0221abc52fcc807d4c366436cef6b7a487adda643bb53897ca9e71b547f8d5524e9d485cb98c327c8537e215b5ded29771d54ef5d7a196985e40246d", @ANYPTR64, @ANYPTR64], @ANYBLOB="42723ca1e505da4aeadcc2abd10d78adf811c118050f0348c89552aae30a592a38e75426871ebe99d9bbe7a594e4247255da2290fa4082a37308518da1bebd5cae48e00c404323ffc145a645f4ee339a2aee55a6296da0820158bb3af6b2e8ca7e66556f8cbbb0d24a9dcb462f7b6757dd605c8434254643c507df5f30f4363425fd56230d8a821d1eb97b6f8e3f5fde05e1"], @ANYRES32=0x0, @ANYPTR=&(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYBLOB="ae54c7ffea9dc2fc5ac584da1eba3d60aa632fd5f538e5b23b0a2033216bd52318ec50130dd8a783294343263651fe112708590b7d560bf061042cb113c94838ef7153fbf6b9c2e716d9739484fcbec6a03c1cb2a3c3cf7783a5e1e3d772a70e0745c4f047656bb78f3789a0ef", @ANYRES64=r0], @ANYRES32, @ANYBLOB="4dd0e5bca2a4ae2a289cc8700b939820e0350f4e6a7562dd91b254827d88847a062257e2a3f5babd0f8cde4d6910a59fdc775e60428cf4ef2254e127927461ac9108af0fc203df41431659975627af4c7728a9bfe60cb9be491ccf6dfcd68582e5e7879097a030b5d7511100ab4200c31c837362304d3bbf7b5e8da5bc30e227a49c01f8d5fd6934a0b7569cfbb784076b069783dae8f921410edcbfebedc143a29dd575c2668b1880dd6d1e202446f20539ae2fac22f4bdfbfaca9d1984dc898da283b2f9707e327613ba7aead14d0689ecfd45ac092ae189f368037cfcb68797117105d7f99d7f1144e50552ec60a999a89d2ce4e95537e9ad1f646ea6a8f9a8d267440db2c10b2dde36a48269f7d790b71bf2b4b1fa54d5d5c47c24d5ef140a9c325198c742e3f2946b969ca3ecd93156d2d3337930b7809d9a4d4615a741399841fcdc18a851e64b22a4b0157f4dc5f0960c62b40919ddfa373e15185621109cc5d70af7cdb6606b97e68326b88916f281992b8a17a2190e8e3c988629a2830f9022b2f7e087d5de9491c3166a35a9f6def4ee73ec9f152827bfbde7461e7dae75397948d18bc3c9f05cae29871fbecaa97443e1c776dc7be1cb1ee2662017ca325359f4a07c6dab0c2b35eba5ca1919c1582f18d30a24e1655a915d9aaad5a6a681d5cc725a4f37482f0267997984f2d6f5e0f5b3dae0bba814db4824465bd5b2bd5f05552a5a019a6f787b7f507dd215ab6b4404bf1c55e790b0ffc003c7f1bb48a3c87b438dc54618771a8fb1fb2175a6e51dc401a993d088483f67bc51b5fcb3b70bebd8c588e35f3d8d7a12f9c8d0ca9dcc54238327ff378312b2cd1dabac38b011df31b5a56a43d1ad38365720eb2f4c6cd45e69b4ed146f08a1bfab6dd5258fe548272ef85cf74c3e25061ae16fd2aea7e603dbb705260525c2fc3e5805a0f8cdb52fb56fbf7ee76d33bd47276e5c4533071ba89236ec3234ac6d07455b401573979ec7ee7c8d0d1fa683a38b2c63a194b41cdafa50c95b171349671b119756984d74c27b7d6011166405b06c2a806acfeeb3692bf7331dc3aa3b165967985b6c0e34b84ddac839223b2a7f0a045ee054c25125249fb3f455050cf200840f1ce9777bd3d6cfd161fd0549efc4376852ceaa0437f5c8c3142da226c36c264d9f839cd6468f992374a9e90064eee1e09d0c42d585e5ed5205e68723e4600cde7d5fd88201bacc81a17aea4284399e61eaab65b5077a218f18c0c143d38a7184f78f50c7f2d44a89b85be2d2167d41089ebf9cc9c5c945a20cf4805f9e5bde4ceb56f8cc4efe5bb63c847288ecd465685501e7922aecadd4963d8f445a0cfe785312ea67863f78ba13ebbdc26089df86cb2c16b0ad552b151437c2299334adde5a821c89fb6f8c14dfc64dbd40460fff0b4237629de93b3b485835e1b426a5a4c93b5bb17d5988a55da5e36906c0ceab7a22e2ebaf9a18f9aaa04252f4b25e5d5280d12ffd3250d49e991f1e25b459b327f0f49b5c3831612efba8dbf095460d35c429f93c7f25ca2aaea6271899610643525d7c92eea3756b99ef44d616ac41e6f3369dd61f5465cd853604f5fa0b7823821ff5d7e84a7d81617db1343f81422965eef37a4e9298a9a772bc64493057a1bb90f95ac35d93c91f1833871331f8148a976251a9288230870779286f267c193f7a7bf44e35dec9ee519034990d167934339d37952f7e81cf73e665463c4ae42871531c7353e7c2b4ab683035af6e6c145445a9094c7853393ddc0b02065c854186f7400196913aa2c38b1646e707cdc072edd25c6722a87b167c092282ebd7d0560344b346bad90a12ebae6100e41e12c1a9d92b2726185123e6dd211500f2069dac2a4dfbacebb2e38739364caf4b7464b617da994377920159471b16b0dc2378932534b2438ed5eabc817f32bd72528616ca6cb6dd97a6c36e4fda758c95a9455cc276d248bad3912905790a27619afdf2cca7baac7a87ab6d766ba8d411d36926e94211a7c64bcd35298a96cfdb3e91d688f3e7d13cb2207c2269f4cf0456601c473efb2e69b7aaecd9354da4dbf1c17b36c0d0d759b331d6cad3fbf7c1dfe93a175924483f43124670d6ca33da35ef632866fd0b43a487c1e6713e4e2e09dd190eeeab596cd499db38ea4ff2b27d0ed5f59cb7d216ad2bb0607baf3c08b4529cd97f31fe5f37c07189079ad6fec138dc42bc6d5aa697cd72748ee8cc1035c26efe05403b5ddb7ab61a8bff6f820e90981bb662da72396f23ce493658f283d701a05216e19bac74b67fedc0dfec37d5f5edadd910e8713ef07c502aacdf553e36b0e365617dd9f9b821ae38c80d66d9428e124a71e2daf1b6de5e2c311756365a2bfd08e9a723629c02bd79dd983bcda6a50f0c3c556d73e5cf8a91da2139bb24c52c68526a2bf7f693ceaadac33bf4373c9ba4c9b39fbc9fe6e5ad7027fbe69964803d5138d66565164c15245cb0d36388aaf2cdefb200778fa02e6cef6a2f492785fac72b5bd80fd5186952d8c56b2fc23771dce0744dc14a5f6668312df902232b7a81c1683d5f496d9229713c518a3209feb3cdd21e25b7c5527ffe6f15545096a4300e51fffda823fc54e0647a6b774b7d94759ab885b921e785b10906d199b2489c7c35c5856ab55003186570a95e0874be5cb1297dd802d897b0423b1aa83368b31afb5ced527d3449bea0fe1862d7097eb2a1c0d7d936ae2bceaa13039089be3623c5622bed2a0d78a67c0c4d35c4407f7ca97daab8196d550111cef2da58529a113f29f4650148042da84f85907b0afff92e9a47d1095b3f840898b6ad0fe45f9c45c9c119f00d0f0a24edb3401f2cb8d9e343dbd1be2026f8c6d6bca69a51b819bde72902266f09aa8141b73d0e56367a4cd8fb78c9e76ea938e2b26dbe66da938a6027f698044259f3a82fc3f302d334f23f0832456553095a7669e356513df6e0198efc81f92cb4edd23dbb4ea2e8d49613e66fe7712a5ebe7e895a23a5e9680e76f06f08139a03bfdefc6d51855f49a8e5250119f159b86b024a298f06d3f61c23b28573d8d659e81f7dd6168d0e4be76ed17b3b4a447f810ffd1da31366592d58db62d9a6313a5f422ebaf364317093e93074248300fc7e7eac9f4ba5dc2cf05ffc9778f85a8dd706bba0b4683a0c5030a64490ae27596bdf0068f6dd87d9f3e6bbf509d168a65d4b26c8f880c73a8efba72046222565407f19b04808d4db3b8046984a9cb961c56c7ccbb2d6a7258ca3b7b49401914265a506e4a661c16172426cc922a4aaaa9d6f1f4e1287197a502a470ca3082b3d408d0db000453baa99585554486ac104dcbeff14d62341f0f657a92e2aeee997e337f9c2b516ce44ada5e8fed83a4af0c9ed40c1cbff855eb6d0c050d67145c7fdc10228e8d246c887072f93934362950af634532742d4a61441da78d8f3d6456e3c70147b469c5f4be516f4778f2ba9faed87499a38880012b211fd495f573a4030dce1038fe167351953e5c5279c656d28ddb51309028e566e37ff700fa99dc9f1afef08688336693d822478da6dc8588441d7727490289acac0f2a434a012ba61dbb0872fa48d9cbae9d22ebfc9a2728eb4def1c8847d59e5385f06a09eca30b847d41d4de8e64f8109b8fc982f3a92eb3682eea65aeffcb91476246228b342541d2e3371245e431244381ab2134f2bf3cd2cdcb91e1fee752914756f6287da986599658e3dfed81f5ad09e34986bd99b750819eb901a1da81eb2e547e383d37b5bff27a69310beddc6595418cb39702d84f52bbb0639078f3a75f8e74cbd0c73da8aa46539b4c0a33e5c7105a7c418abf7bfb6631b33723154fe66a2ede9288347aaee84a0977603221a10e36217193d9d2d6663d9894d5a1a6dd71ee00767b7516cbbe7001fb108f4abd7476991bc46c8c57d16b36ba43ab9bd6fbd59efd756a1e5ebd8cebd81762d9999d56eff54e81bce14b89f3776cd2e0d562ebb48201f2dff84cdf575dc557db058602e76d0ec58fb3d585a3916f6c5996723f29b1992532c5f76804dd6b8af1d478d0986fe681d15aefaabb25aeb328a5b3f1754ce44a41635b1955a9f340d74b12ed128f4566317700cb4caa28fd3eed13077fe11e0801b69da4d035d8972405790f181f3f2ca6d864120e43b05ea69617f550bc67ddd853b6666a0915ce483dfbaec297c0b88b0ade6552f0c69d2684a5b9c8bfb126eacd584a7c8d95b302d38b092b7d7684513aa74e257673753f88c56ab60d91b6685ffad2b60917ceeaeb13ab3eafe9b0a79af8f8d15618b81cc9ead8dd7ce2d5b430b1a76fe50bb2f304d9a6753dd5e9f3c1d74d9e16f937376f9f110af2f31ca1f5ef61fd451cab3f335f2932870fed44109865b4be41455edc001fef7677fdb6163c18ec376991b3e74d5ec4b1f5b6ac5a1f09f1a1897aa5452e79fc3e7d918a4445388486c44be604924e18ae2832395dfba2eee40d79314144ff801e03b2b816559f3034bab48d086016a0ae947626fc1c4ca49bd710097a3804333d51020fedeaaa064f67f3d041c74cf80ff93aaba3e5a855415bb7159f24142c7c1e1a5ee3febe42d4f663a709de3c67627701a8798669fc571f70e16741c33653332676db93e85a1342e90a811578f1b8d5d11914106e732f0cbf1e696fdf8c05ed825afdfe8444eb89fe8f3d14672a583c5ec11a7264de92fa4b995d33b848fd724098ec1be0b50e492ae845a5b0829edcd5e3182377f6c2f6b388b1216f9fadfc26b8f2909a60d54d8bf2c352992ba3e30445877162c32fe2f578afccec4c3a1c140559e70ad209045314429c1e6f4ac02a82d5de38bfe169b52148f046c02a91082a763d5300a44bd88ec7543c5c9ed393769d9bf920afa1145aff4799c849c3d73c2e54111a1026c8f4724ad06419cf226cff98a5dfb50290a984434c89ec5a4aae06bd4b42488232f2287c36a361e25f915fbf3b587bd22540ca115e1d756a78c8362e569fc4ee33765a6669d2757fd9feeaed922c1a61f97f228666356996be34cf7a8a7788fd44fd0a0822774cce688d395341851b78a08324e6ed16db8f172c2964fef264560d2f24665f35bf81d38b403a4157387378b3adb06bce14553525ddfad9811e91d1ae9c5c600f896ea3b1a1fb61f0798d5a55ddac20160e899735072ee157ced2e60a5246322a12241fd5dca77511db304bc2a353a711625772106237db8dcc8ca8f8806222ddd007d518c2ebf20141f99ab48ed733a2d49c89a9a2a688308a4154fba85e0c4bbe0070215b2855c2a38adc0e12ec370ed1bb5976b2281d3ca3f0e8a53bd26beab21e839899a9ac2f4fc1c37447180c54b7249a75f6eeef7003305f3db0d0c1fca1fb9174d472c2f276e4e7adbe6ea99733778fc7e994f3e1940e423b467f7e762ea442622a67cfcbc34002e4112e349e85671d4c7be7a6267b7f2fba61615e4f9ded2780b283514601d5376460e7acb268d608af1f2884549a118df9c916a21493f56e49464c6e089dddb04b1e7bd865fd0bb991a036305d7a781c876a34c678426d4ab1b77bfd84521a7c433e0a8f2f9c62bcfbf1bd5c735af618817863e645ee383a8a43ea3eae7480155a19e001d0d9f6c0d7a95d4cc75eddec5e072802e795d8e2112b1569b8138fb9f4b8849a4667d205ca18660a5ed6f69f1eaa315b81df0c3e2f44eae7fea65912319582a2967bba4909d5ecba506b28408ad873749b284a9b2811e00f9f11278b5e754a990bc07927cfd8f59ce3294fd96", @ANYBLOB="2b35665e47f509f64a8e424a7d68e92f96ad06942492f65ba185e06322b5057c19670e5087cfbb74011f8a0cfe9cbbf7ec3ba16a56daf19232634355b91cacaca123242d4e38cb1549ec69390a0803f4c1bbb523a2dc3c0b3f6f5e2caca5330e325245598f2f4f1bb5bd61afb316e575ba1f759997426b66e61da5f3990a99d303ea16fedfd36331494f6d3a9c631d421fa9b236e18851d6b4d40563ea1b679ef8b3f7db862c31b5dc654a923ba0a273e01613d1de9401c7d389af99a0c3afaaebc6a77b7e2718d77d59f12c942625142cdd9412ca0672078b48b4f419293c850729e40d30be5c7fdfc49f5d"], @ANYBLOB="ff3132bd060ed4dc396a5c666f32265d0f47c4060d81ca1f04f7659607f7abdcd5d4641fa43f7b1b35e9227c6de1f4a38de53afd6a965f60eda1e6f13113f96b7a4020710054abe8e0152b551aa95bd447a137337cdc31a37d0ebfb266796783004d8c929f5b343e7389837e7c4f2e9f5ee49af5f59761c17e27783d042e97bb8940a98f37e0f68a5fb9a1ec8324fac7bbe7d0b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ca3e2e74ff233f6a8161c51630657112e455c57a3bfa1cc7edcc411a01114a2b1c36c6d795045e444d6bf729b2a34a896356b8c33f1c5b444279d7823e68cd227203cb4f01d75ca0a5a645463197c83e85ac9fe7e434bc118914393ff1e0fd4b05feea54ed7d1b78a7aef008f3755268bef2ebaa5e500d8155850ccafb3e47a9bad6fe0a20259d97aa", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000ec0)=0xb) ppoll(&(0x7f00000004c0)=[{r0, 0x404}, {r0, 0x1000}, {r0, 0x200}], 0x3, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={0x9}, 0xfffffffffffffe6c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x20400, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000780)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={r1, 0x8001}, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000500)={{0x5, 0x0, 0x100000000005, 0xc22c, 0x148f, 0xd}, 0xae}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="441f0800000000009727c1c6fe36cef3e26ddb2300ffff000003027813", 0x1d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) fsync(r3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x51, [], 0x0, &(0x7f0000000140), &(0x7f0000000180)=""/81}, &(0x7f0000000280)=0x78) write$binfmt_misc(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="73797a306901d8de6e119626c25804dad81afce2cdbec6a00d74bdf470fdcd89fcf3a101c19c8f25a6852c34c87cb4faff88b52d57fb2515a952e177418833e00ce3a8dc79cdc0aa2f130ba8bb91dd4f89eefe8508fa15861e6516cfae05d5d825a83e0871607605"], 0x68) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000040)) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400, 0x0) accept$unix(r3, &(0x7f0000000340), &(0x7f00000003c0)=0xffffffffffffff64) syz_open_dev$urandom(&(0x7f0000000400)='/dev/urandom\x00', 0x0, 0x2) syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x20000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002280)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000800)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000840)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, r6}, 0x14) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/59, 0x3b}], 0x1, 0x0, 0x0, 0xfff}, 0xff}, {{&(0x7f0000000980)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000a00)=""/140, 0x8c}], 0x1, &(0x7f0000000ac0)=""/175, 0xaf, 0x3efb}}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/158, 0x9e}], 0x1, &(0x7f0000000d00)=""/186, 0xba, 0x7}, 0x80000000}], 0x3, 0x2, &(0x7f0000000e80)={0x77359400}) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000002c0)={'icmp\x00'}, &(0x7f0000000300)=0x1e) 1970/01/01 00:16:08 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x3e, 0x4) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 968.252460] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 968.292504] binder: 24148:24159 got transaction to invalid handle 1970/01/01 00:16:08 executing program 3: r0 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'ifb0\x00', 0x0}) sendto(r0, &(0x7f0000000080)="11bb10c6cf886d9b839fab449009a9b6538e6c8350f5344e512d537a9cfe8890c258bbf14de41122d35749ef8450d425fd87cb2cbb86803778c6231139fee6ac5633ad1fd05f35ae5cb0dab8c76ddb795626a1836baff419fb3b91fefddc4fb84b652d952965338f34ca56a504acffa4575c21034342e8fac7a8ed74079a9869ec79cd0c653452ff4e5bdcb403bf03ae190dea7c62d02de78789358a7a619003b5ffb93c91af1a6bf27925dd9742a01e15ef709ec3b1bfb8e7e2fee3fe4abe8a85c8d80d6da8548aff16", 0xca, 0x10, &(0x7f0000000280)=@ll={0x11, 0x1d, r1, 0x1, 0x36d, 0x6, @random="87593b37620e"}, 0x80) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/52, 0x34}], 0x5, &(0x7f0000000680)=""/45, 0x2d, 0x3ff}, 0x40000100) bind$bt_hci(r2, &(0x7f0000000700)={0x1f, r1}, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x73, 0x5, "5df87a21964239dab56dafd1fe5bc46660f1f9bf50c2642e49644fdf1dcb79fb99d05cdaed435b39b654649ecf834d00a5082c10d82bd0612dc1e4edbb70db5ba22590bde3b3b262b005408678daffbaae5d21745dc377c3b9692365a7b0f7d52e4ac6f89f2ec980784060"}, &(0x7f0000000280), 0x1400) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) getsockname$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 968.298860] binder: 24148:24159 transaction failed 29201/-22, size 536870912-0 line 2856 [ 968.308323] binder: 24152:24153 unknown command 0 [ 968.322944] binder: 24152:24153 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:08 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) fcntl$getown(r0, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40286608, &(0x7f0000000040)) [ 968.360666] binder_alloc: binder_alloc_mmap_handler: 24152 20001000-20004000 already mapped failed -16 [ 968.376773] binder: 24148:24170 got transaction to invalid handle [ 968.383199] binder: 24148:24170 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:08 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) 1970/01/01 00:16:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x9]}}, 0x20) [ 968.413652] binder: BINDER_SET_CONTEXT_MGR already set [ 968.424342] binder: 24152:24153 ioctl 40046207 0 returned -16 [ 968.430122] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 968.432589] binder: 24152:24168 unknown command 0 1970/01/01 00:16:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x10000, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f0000000140)) accept4$ax25(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:08 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4800, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:08 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 968.459468] binder: undelivered TRANSACTION_ERROR: 29201 [ 968.463775] binder: 24152:24168 ioctl c0306201 20007000 returned -22 [ 968.465906] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:08 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48, 0x80800) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 968.524905] binder: 24182:24183 got transaction to invalid handle [ 968.531287] binder: 24182:24183 transaction failed 29201/-22, size 536870912-0 line 2856 [ 968.559206] binder: 24194:24195 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 968.567122] binder: 24194:24195 unknown command 0 [ 968.591011] binder: 24182:24201 got transaction to invalid handle [ 968.597424] binder: 24182:24201 transaction failed 29201/-22, size 536870912-0 line 2856 [ 968.612397] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 968.630259] binder: 24194:24195 ioctl c0306201 20007000 returned -22 [ 968.660371] binder_alloc: binder_alloc_mmap_handler: 24194 20001000-20004000 already mapped failed -16 [ 968.671310] binder: undelivered TRANSACTION_ERROR: 29201 [ 968.693115] binder: undelivered TRANSACTION_ERROR: 29201 [ 968.710343] binder: 24194:24205 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 968.716456] binder: BINDER_SET_CONTEXT_MGR already set [ 968.718304] binder: 24194:24205 unknown command 0 [ 968.724465] binder: 24194:24195 ioctl 40046207 0 returned -16 [ 968.742087] binder: 24194:24205 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:09 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), &(0x7f00000000c0)=0x81) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000140)={0x93, 0x4}) 1970/01/01 00:16:09 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7a, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:09 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf]}}, 0x20) 1970/01/01 00:16:09 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffffffffffff11) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:09 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000180)=@generic={0x1d, "27e6bbbc07b9e371ed90254668518492f24bfe18eef83cf029d6034022037adbabc74ba85cf6070e1deab64064a557fb741b2eb90f8e563319bf79c4a8e843f03e37d5a96eab536c71f7543cbbbd951a438f33bad528c046d4c1b0ee1b15825185ed9dfcf6bd49fd8e6765a0bc12069340d3a77dce4e2b77e56694aae621"}, 0x80) 1970/01/01 00:16:09 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='0hreaded\x00', 0x1) 1970/01/01 00:16:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000180)={r1, 0x1}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 969.514051] binder: 24228:24230 ERROR: BC_REGISTER_LOOPER called without request [ 969.520210] binder: 24227:24231 got transaction to invalid handle [ 969.521716] binder: 24228:24230 unknown command 0 [ 969.532561] binder: 24228:24230 ioctl c0306201 20007000 returned -22 [ 969.532921] binder: 24227:24231 transaction failed 29201/-22, size 536870912-0 line 2856 [ 969.552575] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 1970/01/01 00:16:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 969.607841] binder_alloc: binder_alloc_mmap_handler: 24228 20001000-20004000 already mapped failed -16 [ 969.631978] binder: 24227:24244 got transaction to invalid handle [ 969.638477] binder: 24227:24244 transaction failed 29201/-22, size 536870912-0 line 2856 [ 969.666148] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 969.693301] binder: 24228:24240 ERROR: BC_REGISTER_LOOPER called without request [ 969.693381] binder: BINDER_SET_CONTEXT_MGR already set [ 969.701099] binder: 24228:24240 unknown command 0 1970/01/01 00:16:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x7800000000000000]}}, 0x20) 1970/01/01 00:16:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = gettid() capset(&(0x7f0000000480)={0x20080522, r1}, &(0x7f00000004c0)={0x9, 0x8, 0x2, 0x6, 0x0, 0x6}) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, r2}, 0x14) accept$netrom(r0, &(0x7f0000000300)=@full, &(0x7f0000000380)=0x48) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0x50, &(0x7f00000003c0)}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x1}) [ 969.706890] binder: 24228:24230 ioctl 40046207 0 returned -16 [ 969.733394] binder: 24228:24240 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:09 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa00000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 969.765720] binder: undelivered TRANSACTION_ERROR: 29201 [ 969.771379] binder: undelivered TRANSACTION_ERROR: 29201 [ 969.871844] binder: 24270:24273 transaction failed 29189/-22, size 536870912-0 line 2856 [ 969.915263] binder: 24270:24273 transaction failed 29189/-22, size 536870912-0 line 2856 [ 969.944185] binder: undelivered TRANSACTION_ERROR: 29189 [ 969.949863] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:16:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:10 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x400000000000002) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000040)=0x40000) 1970/01/01 00:16:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040630a, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x7, @random="3dbab3c82453"}, 0x28, {0x2, 0x4e23, @multicast1=0xe0000001}, 'yam0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=0x3, 0xfffffd6f) 1970/01/01 00:16:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xb500000000000000]}}, 0x20) 1970/01/01 00:16:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100)=0x1acc9ccfc3cec890, 0x80000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x1f, 0xfffffffffffffffb, 0x7fff}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r2, 0x80000001}, &(0x7f0000000380)=0x8) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2=0xe0000002}, 0x3, 0x0, 0x1}}, {&(0x7f0000000180)=""/22, 0x16}, &(0x7f00000001c0)}, 0xa0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000003c0)={0x5, 0x7fffffff, [{0x0, 0x0, 0xa353}, {0x4, 0x0, 0xffffffff}, {0x8, 0x0, 0x6}, {0x4e7f, 0x0, 0x7fff}, {0x400, 0x0, 0xffffffffffffffff}]}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:10 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x20000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 970.592891] binder: 24294:24296 unknown command 1077961482 [ 970.607955] binder: 24287:24293 got transaction to invalid handle [ 970.614595] binder: 24287:24293 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x6}, 0x8) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 970.638309] binder: 24294:24296 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:10 executing program 7: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x117, &(0x7f0000000480)=[{&(0x7f0000000080)="f6260f7c5613991517fed30ed910c0037ce309c6100f468ac6d1f8e835758bd48fa19422c37be1242f5e9cae99bedef102aebcabad4338899a979404e5d0e7f2319618cb80de6d9a7c8833c8d02f7ab3691f26bcf20209cafb5b4bc3447b3de1d68f52f94995f1d1730c5a09d9370ac1d6e1acde48e65c1c81b63a3ab7d9d9021459a6ad6da0250bb3bcdf3c13c938b5dfa76fe71af18983e0220b0db4365b823bfe66ede5f4bdea127d3753e1b3008f91c6793dea67023b8c78da0323f9885e618457cb05db5c064398fa8ff1b046f7bfc18a0ae487a993b89afe4cf490a26f5156215e44", 0xfffffffffffffcea, 0x7d}, {&(0x7f0000000500)="21a37c3f9b67eeb5a5227894442ec5fc5bf5a3eb48da59e24abda02ef554c948b577a68840af73d20ed7d93173431687b193fe6b4a067ccadc5f476122719e8e7abbbc6b57df1acf6263c559eb7025c2d3fecfd1fffac2a998972507b50f3cb3d673122a802b6cc89bc9ecd8db6784ffd7bd6b89cbeb8909884edcf975f2b1c9e092f00c2af098f3f508e98f771e1af27155399f082a5c9e", 0x98, 0x8}, {&(0x7f0000000340)="8eb31bcb113cd9f9d3c4a2cd193f4a5950b0b85f7ca2303d0b80b2c587bf5ca3803e1442cacf3de165d6bebded6f47f350ba640dc60785ece32b25f516e8e2f5b77290ad81166d0b05bffe96ad6b3e8b52c752e4058691b02679be0cf7572418012b9a99fd58307c64b5b5e337607d024a53cb7e2a81f2015174603bfcf4b2ce3257c35bb87b90d479b1bb069a107d3e76d85f7eaed1d9844a9841ccaa1c96971dabac6c2196fe4f1044f430cd07d359cd2bda54e5117576f8c20bfc8b2b311c8a0164adfc7e0fab8ea8b4c32f358392cd8aa7bbce01760056ea5781a0cabf98e299", 0xe2, 0x8}], 0x832020, &(0x7f0000000440)='trustedvboxnet1locgroup\x00') r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clock_settime(0x2000003, &(0x7f0000000200)={0x0, 0x1c9c380}) 1970/01/01 00:16:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x3f000000]}}, 0x20) [ 970.685497] binder_alloc: binder_alloc_mmap_handler: 24294 20001000-20004000 already mapped failed -16 [ 970.713362] binder: BINDER_SET_CONTEXT_MGR already set [ 970.749366] binder: 24294:24296 ioctl 40046207 0 returned -16 [ 970.776257] binder: 24287:24321 got transaction to invalid handle [ 970.782778] binder: 24287:24321 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000000, 0x750) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @rand_addr}, &(0x7f0000000040)=0xc) 1970/01/01 00:16:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) pread64(r1, &(0x7f0000000300)=""/87, 0x57, 0x100000000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffff9, @empty, 0x8}}, [0x7ff, 0x3f, 0x3, 0xe6c1, 0x7fffffff, 0x8, 0xfffffffffffff800, 0x8, 0x6e, 0x2, 0x6, 0x1, 0x0, 0x61752188, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r2, 0x1, 0x0, 0x7, 0x3f}, &(0x7f00000002c0)=0x18) 1970/01/01 00:16:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) [ 970.815969] binder: 24294:24326 unknown command 1077961482 [ 970.883110] binder: 24294:24326 ioctl c0306201 20007000 returned -22 [ 970.921472] binder: undelivered TRANSACTION_ERROR: 29201 [ 970.927585] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffffa) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000003c0)={0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}]}) read(r1, &(0x7f0000000040)=""/11, 0xb) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() syz_fuse_mount(&(0x7f0000000200)='./file0\x00', 0xc001, r2, r3, 0x8, 0x1000020) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000180)=0x825, 0x4) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r4, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000140)=0xfffffffffffffeb2, 0x802) lookup_dcookie(0xffffffff00000000, &(0x7f0000000100), 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000240)=0x6bc35b22) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/101) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x20, 0x2, 0x6}) pipe(&(0x7f0000000100)) 1970/01/01 00:16:11 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:11 executing program 6 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x40000]}}, 0x20) 1970/01/01 00:16:11 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001540)={0x0, 0x0, r1}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001580)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000015c0)={r2, 0x80000, r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x7f}], 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001480)={0x0, 0x7, 0x100000001, 0x7f, 0x401, 0x5}, &(0x7f00000014c0)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001500)={r4, 0x5}, 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r3, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/48) clone(0x10008000, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) 1970/01/01 00:16:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000) [ 971.727978] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 971.755125] FAULT_INJECTION: forcing a failure. [ 971.755125] name failslab, interval 1, probability 0, space 0, times 0 [ 971.767075] CPU: 0 PID: 24362 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 971.774453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.783814] Call Trace: [ 971.786406] dump_stack+0x1b9/0x294 [ 971.790046] ? dump_stack_print_info.cold.2+0x52/0x52 [ 971.795246] ? __lock_acquire+0x7f5/0x5140 [ 971.799483] should_fail.cold.4+0xa/0x1a [ 971.803544] ? lock_is_held_type+0x210/0x210 [ 971.807948] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 971.813146] ? debug_check_no_locks_freed+0x310/0x310 [ 971.818331] ? __lock_acquire+0x7f5/0x5140 [ 971.822572] ? print_usage_bug+0xc0/0xc0 [ 971.826641] ? graph_lock+0x170/0x170 [ 971.830444] ? debug_check_no_locks_freed+0x310/0x310 [ 971.835625] ? finish_task_switch+0x182/0x840 [ 971.840116] ? graph_lock+0x170/0x170 [ 971.843917] ? __lock_is_held+0xb5/0x140 [ 971.847984] ? dce_v11_0_encoder_prepare+0x5d8/0x790 [ 971.853098] __should_failslab+0x124/0x180 [ 971.857333] should_failslab+0x9/0x14 [ 971.861130] kmem_cache_alloc+0x47/0x760 [ 971.865193] ? rcu_note_context_switch+0x710/0x710 [ 971.870128] ? mempool_free+0x370/0x370 [ 971.874102] mempool_alloc_slab+0x44/0x60 [ 971.878251] mempool_alloc+0x18b/0x490 [ 971.882139] ? remove_element.isra.4+0x1c0/0x1c0 [ 971.886912] ? kasan_check_read+0x11/0x20 [ 971.891072] ? do_raw_spin_unlock+0x9e/0x2e0 [ 971.895478] ? __lock_is_held+0xb5/0x140 [ 971.899539] bio_alloc_bioset+0x3a1/0x7f0 [ 971.903678] ? bvec_alloc+0x2d0/0x2d0 [ 971.907471] ? check_same_owner+0x320/0x320 [ 971.911793] submit_bh_wbc+0x155/0x7c0 [ 971.915674] write_dirty_buffer+0xba/0x150 [ 971.919921] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 971.924694] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 971.930414] ? lock_downgrade+0x8e0/0x8e0 [ 971.934573] ? kasan_check_read+0x11/0x20 [ 971.938720] ? do_raw_spin_unlock+0x9e/0x2e0 [ 971.943129] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 971.947710] ? do_raw_spin_lock+0xc1/0x200 [ 971.952040] jbd2_journal_flush+0x156/0x540 [ 971.956373] ext4_ioctl_group_add+0x251/0x560 [ 971.960883] ? _copy_from_user+0xdf/0x150 [ 971.965039] ext4_ioctl+0x79d/0x4210 [ 971.968755] ? _parse_integer+0x13b/0x190 [ 971.972898] ? ext4_ioctl_group_add+0x560/0x560 [ 971.977554] ? _parse_integer+0x190/0x190 [ 971.981697] ? graph_lock+0x170/0x170 [ 971.985488] ? lock_release+0xa10/0xa10 [ 971.989471] ? check_same_owner+0x320/0x320 [ 971.993796] ? find_held_lock+0x36/0x1c0 [ 971.997875] ? graph_lock+0x170/0x170 [ 972.001682] ? find_held_lock+0x36/0x1c0 [ 972.005742] ? lock_downgrade+0x8e0/0x8e0 [ 972.009896] ? kasan_check_read+0x11/0x20 [ 972.014045] ? rcu_is_watching+0x85/0x140 [ 972.018191] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 972.023376] ? match_held_lock+0x841/0x8b0 [ 972.027611] ? expand_files.part.8+0x9a0/0x9a0 [ 972.032198] ? kasan_check_write+0x14/0x20 [ 972.036423] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 972.041344] ? wait_for_completion+0x870/0x870 [ 972.045959] ? ext4_ioctl_group_add+0x560/0x560 [ 972.050628] do_vfs_ioctl+0x1cf/0x16a0 [ 972.055448] ? ioctl_preallocate+0x2e0/0x2e0 [ 972.059861] ? fget_raw+0x20/0x20 [ 972.063312] ? __sb_end_write+0xac/0xe0 [ 972.067277] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 972.072895] ? fput+0x130/0x1a0 [ 972.076174] ? ksys_write+0x1a6/0x250 [ 972.079980] ? security_file_ioctl+0x94/0xc0 [ 972.084384] ksys_ioctl+0xa9/0xd0 [ 972.087836] __x64_sys_ioctl+0x73/0xb0 [ 972.091760] do_syscall_64+0x1b1/0x800 [ 972.095643] ? finish_task_switch+0x1ca/0x840 [ 972.100151] ? syscall_return_slowpath+0x5c0/0x5c0 [ 972.105092] ? syscall_return_slowpath+0x30f/0x5c0 [ 972.110032] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 972.115394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.120228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.125400] RIP: 0033:0x455a09 [ 972.128576] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.136280] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 972.143546] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 972.150820] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 972.158096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 972.165354] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000000 [ 972.188134] binder: 24360:24361 unknown command 0 [ 972.196504] binder: 24360:24361 ioctl c0306201 20007000 returned -22 [ 972.203638] binder: 24364:24366 got transaction to invalid handle [ 972.209991] binder: 24364:24366 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:12 executing program 6 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 972.241370] binder_alloc: binder_alloc_mmap_handler: 24360 20001000-20004000 already mapped failed -16 [ 972.279504] binder: 24364:24387 got transaction to invalid handle 1970/01/01 00:16:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, 0x3ff, 0x62, 0x3, 0x0, 0x101, 0x8, r1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') 1970/01/01 00:16:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000004240)=""/4096, &(0x7f0000005240)=0xd14) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) getcwd(&(0x7f0000000140)=""/118, 0x76) 1970/01/01 00:16:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x7ffffffffffff]}}, 0x20) [ 972.285892] binder: 24364:24387 transaction failed 29201/-22, size 536870912-0 line 2856 [ 972.307694] binder: BINDER_SET_CONTEXT_MGR already set [ 972.323717] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 972.336106] binder: 24360:24361 ioctl 40046207 0 returned -16 [ 972.344125] binder: 24360:24378 unknown command 0 [ 972.357287] binder: 24360:24378 ioctl c0306201 20007000 returned -22 [ 972.359288] FAULT_INJECTION: forcing a failure. [ 972.359288] name failslab, interval 1, probability 0, space 0, times 0 [ 972.375292] CPU: 0 PID: 24391 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 972.379572] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:12 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 972.382566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.382573] Call Trace: [ 972.382599] dump_stack+0x1b9/0x294 [ 972.382621] ? dump_stack_print_info.cold.2+0x52/0x52 [ 972.382637] ? print_usage_bug+0xc0/0xc0 [ 972.382653] ? update_load_avg+0x2d9/0x2570 [ 972.382676] should_fail.cold.4+0xa/0x1a [ 972.382694] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 972.388829] binder: undelivered TRANSACTION_ERROR: 29201 [ 972.397632] ? __lock_acquire+0x7f5/0x5140 [ 972.397661] ? debug_check_no_locks_freed+0x310/0x310 [ 972.397683] ? task_fork_fair+0x660/0x660 [ 972.397699] ? find_held_lock+0x36/0x1c0 [ 972.397715] ? graph_lock+0x170/0x170 [ 972.397730] ? print_usage_bug+0xc0/0xc0 [ 972.397750] __should_failslab+0x124/0x180 [ 972.397764] should_failslab+0x9/0x14 [ 972.397779] kmem_cache_alloc_node+0x56/0x780 [ 972.397810] create_task_io_context+0xb5/0x5e0 [ 972.474524] ? ioc_clear_queue+0x5e0/0x5e0 [ 972.478752] ? lock_downgrade+0x8e0/0x8e0 [ 972.482892] ? kasan_check_read+0x11/0x20 [ 972.487031] ? rcu_is_watching+0x85/0x140 [ 972.491173] ? __lock_is_held+0xb5/0x140 [ 972.495224] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 972.500407] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 972.505596] generic_make_request_checks+0x163d/0x2400 [ 972.510861] ? blk_init_queue+0x30/0x30 [ 972.514827] ? blk_queue_enter+0xbf5/0xdf0 [ 972.519054] ? kmem_cache_alloc+0x12e/0x760 [ 972.523363] ? mempool_alloc_slab+0x44/0x60 [ 972.527673] ? submit_bh_wbc+0x155/0x7c0 [ 972.531722] ? blk_exit_rl+0x80/0x80 [ 972.535425] ? debug_check_no_locks_freed+0x310/0x310 [ 972.540600] ? print_usage_bug+0xc0/0xc0 [ 972.544649] ? print_usage_bug+0xc0/0xc0 [ 972.548701] ? graph_lock+0x170/0x170 [ 972.552486] ? graph_lock+0x170/0x170 [ 972.556285] ? debug_check_no_locks_freed+0x310/0x310 [ 972.561554] ? finish_task_switch+0x182/0x840 [ 972.566139] ? graph_lock+0x170/0x170 [ 972.570024] ? __lock_is_held+0xb5/0x140 [ 972.574082] generic_make_request+0x166/0x1510 [ 972.578670] ? graph_lock+0x170/0x170 [ 972.582459] ? blk_get_request+0x40/0x40 [ 972.586506] ? mempool_alloc_slab+0x44/0x60 [ 972.590817] ? mempool_free+0x370/0x370 [ 972.594783] ? mempool_alloc_slab+0x44/0x60 [ 972.599089] ? find_held_lock+0x36/0x1c0 [ 972.603151] ? lock_downgrade+0x8e0/0x8e0 [ 972.607288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 972.613070] ? __disk_get_part+0x202/0x310 [ 972.617298] submit_bio+0xba/0x460 [ 972.620829] ? submit_bio+0xba/0x460 [ 972.624531] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 972.629715] ? generic_make_request+0x1510/0x1510 [ 972.634549] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 972.639550] ? guard_bio_eod+0x2b4/0x600 [ 972.643599] submit_bh_wbc+0x5e8/0x7c0 [ 972.647485] write_dirty_buffer+0xba/0x150 [ 972.651881] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 972.656627] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 972.662324] ? lock_downgrade+0x8e0/0x8e0 [ 972.666476] ? kasan_check_read+0x11/0x20 [ 972.670610] ? do_raw_spin_unlock+0x9e/0x2e0 [ 972.675041] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 972.679736] ? do_raw_spin_lock+0xc1/0x200 [ 972.683967] jbd2_journal_flush+0x156/0x540 [ 972.688619] ext4_ioctl_group_add+0x251/0x560 [ 972.693104] ? _copy_from_user+0xdf/0x150 [ 972.697241] ext4_ioctl+0x79d/0x4210 [ 972.700946] ? _parse_integer+0x13b/0x190 [ 972.705093] ? ext4_ioctl_group_add+0x560/0x560 [ 972.709751] ? _parse_integer+0x190/0x190 [ 972.713888] ? graph_lock+0x170/0x170 [ 972.717677] ? lock_release+0xa10/0xa10 [ 972.721642] ? check_same_owner+0x320/0x320 [ 972.725953] ? find_held_lock+0x36/0x1c0 [ 972.730001] ? graph_lock+0x170/0x170 [ 972.733798] ? find_held_lock+0x36/0x1c0 [ 972.737859] ? lock_downgrade+0x8e0/0x8e0 [ 972.741995] ? kasan_check_read+0x11/0x20 [ 972.746135] ? rcu_is_watching+0x85/0x140 [ 972.750271] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 972.755474] ? match_held_lock+0x841/0x8b0 [ 972.759718] ? expand_files.part.8+0x9a0/0x9a0 [ 972.764290] ? kasan_check_write+0x14/0x20 [ 972.768520] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 972.773436] ? wait_for_completion+0x870/0x870 [ 972.778019] ? ext4_ioctl_group_add+0x560/0x560 [ 972.782723] do_vfs_ioctl+0x1cf/0x16a0 [ 972.786603] ? ioctl_preallocate+0x2e0/0x2e0 [ 972.790999] ? fget_raw+0x20/0x20 [ 972.794443] ? __sb_end_write+0xac/0xe0 [ 972.798410] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 972.803933] ? fput+0x130/0x1a0 [ 972.807198] ? ksys_write+0x1a6/0x250 [ 972.810998] ? security_file_ioctl+0x94/0xc0 [ 972.815406] ksys_ioctl+0xa9/0xd0 [ 972.818857] __x64_sys_ioctl+0x73/0xb0 [ 972.822736] do_syscall_64+0x1b1/0x800 [ 972.826610] ? finish_task_switch+0x1ca/0x840 [ 972.831090] ? syscall_return_slowpath+0x5c0/0x5c0 [ 972.836008] ? syscall_return_slowpath+0x30f/0x5c0 [ 972.840931] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 972.846286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.851125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.856303] RIP: 0033:0x455a09 [ 972.859475] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.867178] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 972.874436] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 972.881704] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 972.888960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 1970/01/01 00:16:12 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x2) preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000001680)=""/2, 0x2}], 0x1, 0x0) 1970/01/01 00:16:12 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 972.896214] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000001 [ 973.001233] binder: BC_ACQUIRE_RESULT not supported [ 973.020982] binder: 24409:24413 got transaction to invalid handle [ 973.027451] binder: 24409:24413 transaction failed 29201/-22, size 536870912-0 line 2856 [ 973.039409] binder: 24407:24408 ioctl c0306201 20007000 returned -22 [ 973.069287] binder_alloc: binder_alloc_mmap_handler: 24407 20001000-20004000 already mapped failed -16 [ 973.103363] binder: 24409:24423 got transaction to invalid handle [ 973.109829] binder: 24409:24423 transaction failed 29201/-22, size 536870912-0 line 2856 [ 973.135654] binder: BINDER_SET_CONTEXT_MGR already set [ 973.145075] binder: 24407:24408 ioctl 40046207 0 returned -16 [ 973.151369] binder: BC_ACQUIRE_RESULT not supported [ 973.165407] binder: 24407:24417 ioctl c0306201 20007000 returned -22 [ 973.183311] binder: undelivered TRANSACTION_ERROR: 29201 [ 973.189266] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406348, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:13 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x10000000004026fe, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000001c0)={@empty, @dev, @local}, &(0x7f0000000200)=0xc) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r2, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:13 executing program 7: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = inotify_init() r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) 1970/01/01 00:16:13 executing program 6 (fault-call:1 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000140)="46867bd730b32bb947f160b9ee49126e19a17ba9b18ef8c38091cdcd92a219c7c95e615cfa8b77b2e7a8d910b00956e8667c8cbeeceb6304214ec6898dae5292257f51f6ddd9be42bffa31d8e14b1b78ba0a6afd350ad1a6f610731784f865421513795bd6f48a329e4ca7a0a0655a0ed0faa9644e6d8a6616bfd7", 0x7b) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf3]}}, 0x20) 1970/01/01 00:16:13 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c97f0000000000000000000000050ba80a8ba893848dc588"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x43) r0 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x8, 0x2083) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000006c0)={0x5c, @rand_addr=0x40, 0x4e22, 0x0, 'sh\x00', 0x4, 0x1, 0x50}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) accept4$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000580)=0x14, 0x80000) recvfrom$packet(r0, &(0x7f0000000280)=""/87, 0x57, 0x40010100, &(0x7f00000005c0)={0x11, 0x1d, r1, 0x1, 0x3f, 0x6, @random="600f3ca8e88c"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x200000000000008d, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xfffffffffffffdfd, &(0x7f0000000300)=""/187, 0x41100}, 0x48) 1970/01/01 00:16:13 executing program 3: r0 = socket$inet(0x2, 0x400001000101, 0x5d) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100)=0x24c, 0x80000) getsockopt$inet_int(r0, 0x0, 0x3e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x9, 0x8, 0x7, 0xffffffffffffff81, 0x5, 0x20}) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/87, 0x57, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) [ 973.552586] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 973.607958] FAULT_INJECTION: forcing a failure. [ 973.607958] name failslab, interval 1, probability 0, space 0, times 0 [ 973.619439] CPU: 1 PID: 24446 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 973.626711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.636061] Call Trace: [ 973.638651] dump_stack+0x1b9/0x294 [ 973.642271] ? dump_stack_print_info.cold.2+0x52/0x52 [ 973.647465] should_fail.cold.4+0xa/0x1a [ 973.651528] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 973.656625] ? kmem_cache_alloc+0x12e/0x760 [ 973.660934] ? mempool_alloc_slab+0x44/0x60 [ 973.665256] ? submit_bh_wbc+0x155/0x7c0 [ 973.669305] ? blk_exit_rl+0x80/0x80 [ 973.673018] ? find_held_lock+0x36/0x1c0 [ 973.677075] ? graph_lock+0x170/0x170 [ 973.680869] ? lock_downgrade+0x8e0/0x8e0 [ 973.685025] ? __lock_is_held+0xb5/0x140 [ 973.689088] __should_failslab+0x124/0x180 [ 973.693329] should_failslab+0x9/0x14 [ 973.697136] kmem_cache_alloc+0x47/0x760 [ 973.701191] ? rcu_note_context_switch+0x710/0x710 [ 973.706113] ? blk_get_request+0x40/0x40 [ 973.710165] ? mempool_free+0x370/0x370 [ 973.714129] mempool_alloc_slab+0x44/0x60 [ 973.718264] mempool_alloc+0x18b/0x490 [ 973.722144] ? remove_element.isra.4+0x1c0/0x1c0 [ 973.726898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.732430] ? __lock_is_held+0xb5/0x140 [ 973.736482] bio_alloc_bioset+0x3a1/0x7f0 [ 973.740631] ? generic_make_request+0x1510/0x1510 [ 973.745469] ? bvec_alloc+0x2d0/0x2d0 [ 973.749262] ? check_same_owner+0x320/0x320 [ 973.753660] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 973.758671] ? guard_bio_eod+0x2b4/0x600 [ 973.762722] submit_bh_wbc+0x155/0x7c0 [ 973.766598] write_dirty_buffer+0xba/0x150 [ 973.770834] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 973.775599] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 973.781320] ? lock_downgrade+0x8e0/0x8e0 [ 973.785474] ? kasan_check_read+0x11/0x20 [ 973.789624] ? do_raw_spin_unlock+0x9e/0x2e0 [ 973.794031] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 973.798615] ? do_raw_spin_lock+0xc1/0x200 [ 973.802854] jbd2_journal_flush+0x156/0x540 [ 973.807171] ext4_ioctl_group_add+0x251/0x560 [ 973.811670] ? _copy_from_user+0xdf/0x150 [ 973.815806] ext4_ioctl+0x79d/0x4210 [ 973.819509] ? _parse_integer+0x13b/0x190 [ 973.823651] ? ext4_ioctl_group_add+0x560/0x560 [ 973.828318] ? _parse_integer+0x190/0x190 [ 973.832454] ? graph_lock+0x170/0x170 [ 973.836248] ? lock_release+0xa10/0xa10 [ 973.840208] ? check_same_owner+0x320/0x320 [ 973.844516] ? find_held_lock+0x36/0x1c0 [ 973.848566] ? graph_lock+0x170/0x170 [ 973.852368] ? find_held_lock+0x36/0x1c0 [ 973.856430] ? lock_downgrade+0x8e0/0x8e0 [ 973.860571] ? kasan_check_read+0x11/0x20 [ 973.864705] ? rcu_is_watching+0x85/0x140 [ 973.868838] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 973.874032] ? match_held_lock+0x841/0x8b0 [ 973.878266] ? expand_files.part.8+0x9a0/0x9a0 [ 973.882845] ? kasan_check_write+0x14/0x20 [ 973.887752] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 973.892682] ? wait_for_completion+0x870/0x870 [ 973.897270] ? ext4_ioctl_group_add+0x560/0x560 [ 973.901939] do_vfs_ioctl+0x1cf/0x16a0 [ 973.905830] ? ioctl_preallocate+0x2e0/0x2e0 [ 973.910250] ? fget_raw+0x20/0x20 [ 973.913715] ? __sb_end_write+0xac/0xe0 [ 973.917694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 973.923253] ? fput+0x130/0x1a0 [ 973.926518] ? ksys_write+0x1a6/0x250 [ 973.930407] ? security_file_ioctl+0x94/0xc0 [ 973.934803] ksys_ioctl+0xa9/0xd0 [ 973.938407] __x64_sys_ioctl+0x73/0xb0 [ 973.942287] do_syscall_64+0x1b1/0x800 [ 973.946169] ? finish_task_switch+0x1ca/0x840 [ 973.950654] ? syscall_return_slowpath+0x5c0/0x5c0 [ 973.955580] ? syscall_return_slowpath+0x30f/0x5c0 [ 973.960510] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 973.965863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 973.970705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.975963] RIP: 0033:0x455a09 [ 973.979142] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.986844] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 973.994101] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 974.001359] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 974.008655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 974.015924] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000002 [ 974.036881] binder: 24440:24441 got transaction to invalid handle [ 974.043331] binder: 24440:24441 transaction failed 29201/-22, size 536870912-0 line 2856 [ 974.057611] binder: 24436:24437 unknown command 1077961544 1970/01/01 00:16:14 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20240, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl(r0, 0x7fff, &(0x7f00000001c0)="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") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0xffffffffe422872b, 0x2, 0x80000000, 0x7f, "e371d61e6595ef89160bd29b5614890c2c35471ca401de1fee44530756d90e2897cb8d994eb32f240dd37694", 0x3}, 0x0, 0x0, 0x531, r1, 0x2, 0x122, "cfb956e1f82b3bafadf3d5d581319caa284c596842f2d66324ee952c60cfcf266dff2426bb1558ba7a584ee19481380e8fd25979e32488a3a1bc49db49e0b4e1", &(0x7f0000000040)='\x00', 0x1, [], [0x8, 0x4496, 0x6, 0xffff]}) r2 = socket$inet(0x2, 0x4000000000000005, 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) [ 974.085175] binder: 24436:24437 ioctl c0306201 20007000 returned -22 [ 974.125292] binder_alloc: binder_alloc_mmap_handler: 24436 20001000-20004000 already mapped failed -16 1970/01/01 00:16:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xffffffffffffffff]}}, 0x20) 1970/01/01 00:16:14 executing program 6 (fault-call:1 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:14 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0x2, 0x371e, 0x100000001, 0x1, 0xffffffff, 0x8, 0xf564}, &(0x7f0000000080)) setsockopt(r0, 0x10d, 0x800000000f, &(0x7f00001c9fff)="03", 0x1) 1970/01/01 00:16:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) getsockopt(r0, 0x8, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 974.148165] binder: 24440:24467 got transaction to invalid handle [ 974.154531] binder: 24440:24467 transaction failed 29201/-22, size 536870912-0 line 2856 [ 974.171645] binder: BINDER_SET_CONTEXT_MGR already set [ 974.177607] binder: 24436:24437 ioctl 40046207 0 returned -16 [ 974.203235] binder: 24436:24466 unknown command 1077961544 [ 974.250738] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 974.253435] binder: 24436:24466 ioctl c0306201 20007000 returned -22 [ 974.282637] binder: undelivered TRANSACTION_ERROR: 29201 [ 974.288309] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040637a, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:14 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 974.299860] FAULT_INJECTION: forcing a failure. [ 974.299860] name failslab, interval 1, probability 0, space 0, times 0 [ 974.311307] CPU: 1 PID: 24479 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 974.318587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.327936] Call Trace: [ 974.330542] dump_stack+0x1b9/0x294 [ 974.334192] ? dump_stack_print_info.cold.2+0x52/0x52 [ 974.339398] should_fail.cold.4+0xa/0x1a [ 974.343459] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 974.348553] ? kmem_cache_alloc+0x12e/0x760 [ 974.352864] ? mempool_alloc_slab+0x44/0x60 [ 974.357181] ? submit_bh_wbc+0x155/0x7c0 [ 974.361257] ? blk_exit_rl+0x80/0x80 [ 974.364979] ? find_held_lock+0x36/0x1c0 [ 974.369046] ? graph_lock+0x170/0x170 [ 974.372842] ? lock_downgrade+0x8e0/0x8e0 [ 974.376991] ? __lock_is_held+0xb5/0x140 [ 974.381191] __should_failslab+0x124/0x180 [ 974.385427] should_failslab+0x9/0x14 [ 974.389224] kmem_cache_alloc+0x47/0x760 [ 974.393305] ? rcu_note_context_switch+0x710/0x710 [ 974.398233] ? blk_get_request+0x40/0x40 [ 974.402298] ? mempool_free+0x370/0x370 [ 974.406279] mempool_alloc_slab+0x44/0x60 [ 974.410418] mempool_alloc+0x18b/0x490 [ 974.414300] ? remove_element.isra.4+0x1c0/0x1c0 [ 974.419053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.424595] ? __lock_is_held+0xb5/0x140 [ 974.428651] bio_alloc_bioset+0x3a1/0x7f0 [ 974.432791] ? generic_make_request+0x1510/0x1510 [ 974.437622] ? bvec_alloc+0x2d0/0x2d0 [ 974.441431] ? check_same_owner+0x320/0x320 [ 974.445773] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 974.450798] ? guard_bio_eod+0x2b4/0x600 [ 974.454850] submit_bh_wbc+0x155/0x7c0 [ 974.458742] write_dirty_buffer+0xba/0x150 [ 974.462984] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 974.467751] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 974.473468] ? lock_downgrade+0x8e0/0x8e0 [ 974.477627] ? kasan_check_read+0x11/0x20 [ 974.481775] ? do_raw_spin_unlock+0x9e/0x2e0 [ 974.486188] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 974.490773] ? do_raw_spin_lock+0xc1/0x200 [ 974.495012] jbd2_journal_flush+0x156/0x540 [ 974.499331] ext4_ioctl_group_add+0x251/0x560 [ 974.503816] ? _copy_from_user+0xdf/0x150 [ 974.507954] ext4_ioctl+0x79d/0x4210 [ 974.511661] ? _parse_integer+0x13b/0x190 [ 974.515806] ? ext4_ioctl_group_add+0x560/0x560 [ 974.520471] ? _parse_integer+0x190/0x190 [ 974.524624] ? graph_lock+0x170/0x170 [ 974.528412] ? lock_release+0xa10/0xa10 [ 974.532380] ? check_same_owner+0x320/0x320 [ 974.536696] ? find_held_lock+0x36/0x1c0 [ 974.540750] ? graph_lock+0x170/0x170 [ 974.544553] ? find_held_lock+0x36/0x1c0 [ 974.548616] ? lock_downgrade+0x8e0/0x8e0 [ 974.552761] ? kasan_check_read+0x11/0x20 [ 974.556899] ? rcu_is_watching+0x85/0x140 [ 974.561045] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 974.566250] ? match_held_lock+0x841/0x8b0 [ 974.570480] ? expand_files.part.8+0x9a0/0x9a0 [ 974.575058] ? kasan_check_write+0x14/0x20 [ 974.579284] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 974.584226] ? wait_for_completion+0x870/0x870 [ 974.588809] ? ext4_ioctl_group_add+0x560/0x560 [ 974.593475] do_vfs_ioctl+0x1cf/0x16a0 [ 974.597360] ? ioctl_preallocate+0x2e0/0x2e0 [ 974.601771] ? fget_raw+0x20/0x20 [ 974.605236] ? __sb_end_write+0xac/0xe0 [ 974.609214] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 974.614751] ? fput+0x130/0x1a0 [ 974.618034] ? ksys_write+0x1a6/0x250 [ 974.621840] ? security_file_ioctl+0x94/0xc0 [ 974.626240] ksys_ioctl+0xa9/0xd0 [ 974.629684] __x64_sys_ioctl+0x73/0xb0 [ 974.633577] do_syscall_64+0x1b1/0x800 [ 974.637458] ? finish_task_switch+0x1ca/0x840 [ 974.641948] ? syscall_return_slowpath+0x5c0/0x5c0 [ 974.646869] ? syscall_return_slowpath+0x30f/0x5c0 [ 974.651799] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 974.657160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 974.662007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.667285] RIP: 0033:0x455a09 [ 974.670466] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.678176] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 974.685450] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 974.693415] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 974.700698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 974.707965] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000003 [ 974.788858] binder: 24498:24499 got transaction to invalid handle [ 974.795232] binder: 24498:24499 transaction failed 29201/-22, size 536870912-0 line 2856 [ 974.811237] binder: 24500:24501 unknown command 1077961594 [ 974.832148] binder: 24500:24501 ioctl c0306201 20007000 returned -22 [ 974.852416] binder: 24498:24502 got transaction to invalid handle [ 974.858846] binder: 24498:24502 transaction failed 29201/-22, size 536870912-0 line 2856 [ 974.867813] binder_alloc: binder_alloc_mmap_handler: 24500 20001000-20004000 already mapped failed -16 [ 974.879196] binder: BINDER_SET_CONTEXT_MGR already set [ 974.884598] binder: 24500:24501 ioctl 40046207 0 returned -16 [ 974.891629] binder: 24500:24504 unknown command 1077961594 [ 974.897465] binder: 24500:24504 ioctl c0306201 20007000 returned -22 [ 974.922470] binder: undelivered TRANSACTION_ERROR: 29201 [ 974.928365] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x4000000]}}, 0x20) 1970/01/01 00:16:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfdfdffff, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000009c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff10) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x7f7d, 0xedf5, 0x200, 0x7ff, 0x2, 0x269, 0xcfc, 0x6, 0x4, 0x98, 0x10000, 0x5}) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d2e73797374656d2e706fe18181bf66344568a673f9b36a2278c8e20088b9381ca668a2a1be7a9f8b95f17369785f61"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101002, 0x0) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:15 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:15 executing program 6 (fault-call:1 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(r0, 0x0, 0x3, 0xfffffffffffff001) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x7, &(0x7f0000000000)=0x2, 0x4) 1970/01/01 00:16:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:15 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4e, "4a208165dfceb050df6648f8a93c1870d6d13e04f885d30a9abd65c4bdaa0e916f2297b12e5644d56397acab4975ebb1ed05d22b739fc9a29c2724594de2b84e6ccb224f6a4dbeae324aadacdd8f"}, &(0x7f0000000080)=0x72) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x9) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)={r1, 0x5, 0x8c, "3c5eb75fa7112cd98b5ab8284949565aeb20582547c71a67d0477d5bd4771330d3739255d2da18dd25797fcc110efa27e4639b18af39825fbc280b11b403a38bcf6bdc3d43aee3b156fca4c7ec10d06378419ed20fe5cf4fff811401a4283153ad45afdbb2815ba21d86ef803438e091d1b8430bfb08ff5ce2bdeb48f544bff8e3368b1673476564e250530bb6220958653ca84c3a51179266f9897c0868b102dea37159fae40431"}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:15 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x800) getsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pwrite64(r2, &(0x7f00000011c0)="6086e6f13c7934817bfc84c09f875656873614f44743c980d399c6a40e07725f3ece88ff3c44d486e7d5163e0271c4b8a5d477b735146de5bbb4ede8d4acce5715f8c8e790d3124be7139b5eb3a80f645e91543d9f3542adb70245ad2b58cbbe2f905e6e4cba2c2360e047fda204f7cb20ae606077faff5b34f658472c4de31b70b010f409fd74f2d6d57ffdb80876b66fa8643259dd6dd64a6d2ef5d79901101a3953a4cf3c5793ae7a377d97eef6e1376e1b98fa47d8730e15e98ef0131318a7f3adecf04cf0f58041abe5484aceee4cb97ed82876770ef8f6ca866ea9918f8d5ec981e32af9", 0xe7, 0x0) [ 975.201549] binder: 24516:24518 BC_ACQUIRE_DONE u0000000000000000 no match [ 975.208713] binder: 24516:24518 unknown command 0 [ 975.210671] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 975.239319] binder: 24516:24518 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:15 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000200)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x2}}, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000000000000ef108965041b08a4fd901b17bf53fc4a000000010000ecc902"], 0x25) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x3, 0x538, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x5b0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000007c0)={0x1, {{0x2, 0x4e21, @multicast2=0xe0000002}}, {{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x108) [ 975.266438] FAULT_INJECTION: forcing a failure. [ 975.266438] name failslab, interval 1, probability 0, space 0, times 0 [ 975.277912] CPU: 0 PID: 24530 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 975.285193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.294559] Call Trace: [ 975.297148] dump_stack+0x1b9/0x294 [ 975.300768] ? dump_stack_print_info.cold.2+0x52/0x52 [ 975.305974] should_fail.cold.4+0xa/0x1a [ 975.310040] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 975.315160] ? kmem_cache_alloc+0x12e/0x760 [ 975.319492] ? mempool_alloc_slab+0x44/0x60 [ 975.323813] ? submit_bh_wbc+0x155/0x7c0 [ 975.327869] ? blk_exit_rl+0x80/0x80 [ 975.331585] ? find_held_lock+0x36/0x1c0 [ 975.335635] ? graph_lock+0x170/0x170 [ 975.339423] ? lock_downgrade+0x8e0/0x8e0 [ 975.343572] ? __lock_is_held+0xb5/0x140 [ 975.347711] __should_failslab+0x124/0x180 [ 975.351935] should_failslab+0x9/0x14 [ 975.355735] kmem_cache_alloc+0x47/0x760 [ 975.359792] ? rcu_note_context_switch+0x710/0x710 [ 975.364711] ? blk_get_request+0x40/0x40 [ 975.368762] ? mempool_free+0x370/0x370 [ 975.372737] mempool_alloc_slab+0x44/0x60 [ 975.376879] mempool_alloc+0x18b/0x490 [ 975.380759] ? remove_element.isra.4+0x1c0/0x1c0 [ 975.385526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.391070] ? __lock_is_held+0xb5/0x140 [ 975.395211] bio_alloc_bioset+0x3a1/0x7f0 [ 975.399357] ? generic_make_request+0x1510/0x1510 [ 975.404189] ? bvec_alloc+0x2d0/0x2d0 [ 975.407981] ? check_same_owner+0x320/0x320 [ 975.412312] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 975.417338] ? guard_bio_eod+0x2b4/0x600 [ 975.421400] submit_bh_wbc+0x155/0x7c0 [ 975.425300] write_dirty_buffer+0xba/0x150 [ 975.429526] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 975.434272] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 975.439981] ? lock_downgrade+0x8e0/0x8e0 [ 975.444124] ? kasan_check_read+0x11/0x20 [ 975.448258] ? do_raw_spin_unlock+0x9e/0x2e0 [ 975.452651] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 975.457227] ? do_raw_spin_lock+0xc1/0x200 [ 975.461455] jbd2_journal_flush+0x156/0x540 [ 975.465788] ext4_ioctl_group_add+0x251/0x560 [ 975.470278] ? _copy_from_user+0xdf/0x150 [ 975.474419] ext4_ioctl+0x79d/0x4210 [ 975.478203] ? _parse_integer+0x13b/0x190 [ 975.482351] ? ext4_ioctl_group_add+0x560/0x560 [ 975.487001] ? _parse_integer+0x190/0x190 [ 975.491143] ? graph_lock+0x170/0x170 [ 975.494935] ? lock_release+0xa10/0xa10 [ 975.498921] ? check_same_owner+0x320/0x320 [ 975.503230] ? find_held_lock+0x36/0x1c0 [ 975.507277] ? graph_lock+0x170/0x170 [ 975.511069] ? find_held_lock+0x36/0x1c0 [ 975.515128] ? lock_downgrade+0x8e0/0x8e0 [ 975.519277] ? kasan_check_read+0x11/0x20 [ 975.523419] ? rcu_is_watching+0x85/0x140 [ 975.527565] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 975.532765] ? match_held_lock+0x841/0x8b0 [ 975.536996] ? expand_files.part.8+0x9a0/0x9a0 [ 975.541663] ? kasan_check_write+0x14/0x20 [ 975.545888] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 975.550811] ? wait_for_completion+0x870/0x870 [ 975.555389] ? ext4_ioctl_group_add+0x560/0x560 [ 975.560071] do_vfs_ioctl+0x1cf/0x16a0 [ 975.563947] ? ioctl_preallocate+0x2e0/0x2e0 [ 975.568341] ? fget_raw+0x20/0x20 [ 975.571792] ? __sb_end_write+0xac/0xe0 [ 975.575756] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 975.581276] ? fput+0x130/0x1a0 [ 975.584567] ? ksys_write+0x1a6/0x250 [ 975.588374] ? security_file_ioctl+0x94/0xc0 [ 975.592774] ksys_ioctl+0xa9/0xd0 [ 975.596216] __x64_sys_ioctl+0x73/0xb0 [ 975.600104] do_syscall_64+0x1b1/0x800 [ 975.603992] ? finish_task_switch+0x1ca/0x840 [ 975.608580] ? syscall_return_slowpath+0x5c0/0x5c0 [ 975.613529] ? syscall_return_slowpath+0x30f/0x5c0 [ 975.618465] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 975.623828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 975.628666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.633840] RIP: 0033:0x455a09 [ 975.637030] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.644733] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 975.652002] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 975.659267] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 975.666521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 975.673778] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000004 [ 975.692444] binder: 24527:24528 got transaction to invalid handle [ 975.698826] binder: 24527:24528 transaction failed 29201/-22, size 536870912-0 line 2856 [ 975.708973] binder_alloc: binder_alloc_mmap_handler: 24516 20001000-20004000 already mapped failed -16 [ 975.748717] binder: BINDER_SET_CONTEXT_MGR already set [ 975.755981] binder: 24527:24549 got transaction to invalid handle [ 975.758701] binder: 24516:24518 ioctl 40046207 0 returned -16 [ 975.762337] binder: 24527:24549 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:15 executing program 6 (fault-call:1 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 975.800401] binder: 24516:24537 BC_ACQUIRE_DONE u0000000000000000 no match [ 975.807644] binder: 24516:24537 unknown command 0 [ 975.812960] binder: 24516:24537 ioctl c0306201 20007000 returned -22 [ 975.845954] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 975.875401] binder: undelivered TRANSACTION_ERROR: 29201 [ 975.881933] binder: undelivered TRANSACTION_ERROR: 29201 [ 975.890660] FAULT_INJECTION: forcing a failure. [ 975.890660] name failslab, interval 1, probability 0, space 0, times 0 [ 975.902161] CPU: 1 PID: 24559 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 975.909517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.918858] Call Trace: [ 975.921439] dump_stack+0x1b9/0x294 [ 975.925078] ? dump_stack_print_info.cold.2+0x52/0x52 [ 975.930270] should_fail.cold.4+0xa/0x1a [ 975.934408] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 975.939512] ? kmem_cache_alloc+0x12e/0x760 [ 975.943841] ? mempool_alloc_slab+0x44/0x60 [ 975.948165] ? submit_bh_wbc+0x155/0x7c0 [ 975.952218] ? blk_exit_rl+0x80/0x80 [ 975.955940] ? find_held_lock+0x36/0x1c0 [ 975.960003] ? graph_lock+0x170/0x170 [ 975.963813] ? lock_downgrade+0x8e0/0x8e0 [ 975.967953] ? __lock_is_held+0xb5/0x140 [ 975.972006] __should_failslab+0x124/0x180 [ 975.976239] should_failslab+0x9/0x14 [ 975.980036] kmem_cache_alloc+0x47/0x760 [ 975.984118] ? rcu_note_context_switch+0x710/0x710 [ 975.989053] ? blk_get_request+0x40/0x40 [ 975.993115] ? mempool_free+0x370/0x370 [ 975.997108] mempool_alloc_slab+0x44/0x60 [ 976.001263] mempool_alloc+0x18b/0x490 [ 976.005153] ? remove_element.isra.4+0x1c0/0x1c0 [ 976.009909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.015451] ? __lock_is_held+0xb5/0x140 [ 976.019512] bio_alloc_bioset+0x3a1/0x7f0 [ 976.023684] ? generic_make_request+0x1510/0x1510 [ 976.028532] ? bvec_alloc+0x2d0/0x2d0 [ 976.032336] ? check_same_owner+0x320/0x320 [ 976.036747] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 976.041754] ? guard_bio_eod+0x2b4/0x600 [ 976.045813] submit_bh_wbc+0x155/0x7c0 [ 976.049696] write_dirty_buffer+0xba/0x150 [ 976.053932] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 976.058691] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 976.064391] ? lock_downgrade+0x8e0/0x8e0 [ 976.068543] ? kasan_check_read+0x11/0x20 [ 976.072696] ? do_raw_spin_unlock+0x9e/0x2e0 [ 976.077102] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 976.081715] ? do_raw_spin_lock+0xc1/0x200 [ 976.085951] jbd2_journal_flush+0x156/0x540 [ 976.090269] ext4_ioctl_group_add+0x251/0x560 [ 976.094753] ? _copy_from_user+0xdf/0x150 [ 976.098888] ext4_ioctl+0x79d/0x4210 [ 976.102591] ? _parse_integer+0x13b/0x190 [ 976.106739] ? ext4_ioctl_group_add+0x560/0x560 [ 976.111393] ? _parse_integer+0x190/0x190 [ 976.115540] ? graph_lock+0x170/0x170 [ 976.119339] ? lock_release+0xa10/0xa10 [ 976.123306] ? check_same_owner+0x320/0x320 [ 976.127610] ? find_held_lock+0x36/0x1c0 [ 976.131658] ? graph_lock+0x170/0x170 [ 976.135476] ? find_held_lock+0x36/0x1c0 [ 976.139541] ? lock_downgrade+0x8e0/0x8e0 [ 976.143687] ? kasan_check_read+0x11/0x20 [ 976.147816] ? rcu_is_watching+0x85/0x140 [ 976.151948] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 976.157126] ? match_held_lock+0x841/0x8b0 [ 976.161362] ? expand_files.part.8+0x9a0/0x9a0 [ 976.165936] ? kasan_check_write+0x14/0x20 [ 976.170167] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 976.175091] ? wait_for_completion+0x870/0x870 [ 976.179659] ? ext4_ioctl_group_add+0x560/0x560 [ 976.184313] do_vfs_ioctl+0x1cf/0x16a0 [ 976.188186] ? ioctl_preallocate+0x2e0/0x2e0 [ 976.192591] ? fget_raw+0x20/0x20 [ 976.196035] ? __sb_end_write+0xac/0xe0 [ 976.200004] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 976.205534] ? fput+0x130/0x1a0 [ 976.208804] ? ksys_write+0x1a6/0x250 [ 976.212593] ? security_file_ioctl+0x94/0xc0 [ 976.216988] ksys_ioctl+0xa9/0xd0 [ 976.220436] __x64_sys_ioctl+0x73/0xb0 [ 976.224312] do_syscall_64+0x1b1/0x800 [ 976.228189] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 976.233026] ? syscall_return_slowpath+0x5c0/0x5c0 [ 976.237968] ? syscall_return_slowpath+0x30f/0x5c0 [ 976.242904] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 976.248270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.253126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.258322] RIP: 0033:0x455a09 [ 976.261507] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.269207] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 976.276469] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 976.283723] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 1970/01/01 00:16:16 executing program 7: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={0x0, 0x3ff}, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d5affc), 0x4) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x5427) write$eventfd(r1, &(0x7f0000000280), 0xff93) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) recvfrom(r0, &(0x7f0000000180)=""/226, 0xef9be9a72681594d, 0x0, 0x0, 0xffffffffffffff86) sendto(r0, &(0x7f0000000c00)="bbcfa37c0c834b2f6d1d2ab3cab4c8a487b322d747b3982482e4f3684ea09ebab923e87b15c6e2add5e6f6c5b0a6e31d791b30efbb5501657ee54ff5635ab40f4e2d827d46fbcb26e99e320a2aff4cea8b9b58ef1697172c0d1d28b2eb47bf0e4b7c7141daf7b70bbfe2b67d262e43634ee8642c694adedbde5f7882ff2924ffca8740a31d2c7063f8b9131eb0f2f0ee25c360cede607b6eab69b70cce2ad7bbe4be81902067e5555151d9dc34258e0a36fc80328acae31b97d9b55ebb7ddd433cbd7d7ecb6a13b0cf301133362eac1965d38579895abfdf3df16f96acb888edc0f1ede905c94ef3b6cbad8a801a5438986985045754b8cbe453ff969c2642c503039dd71c350f32cc06865b9e26604e8e4443e64760ff05507148b15ddba801da97471f31dcfa3821cb8d269ef65ab55d27d239a4457034ba92b3b0a8ac4075cfef5e6d96e49462427c4dfe69f702d283f3dc0e659149b8f577f5cbc02747077b1bfa23e03c4fe822044df4c3e1ac33765eb70cf57d04c7ef66e93c11e1598848681167e8b686bebe7b8cfd6b1f7979522be826de2068846b748b392a18ba254e8b93c02455290eb5ff79faea0fa9c03d3207a24fd3e05591a38785be31d3d8de2caa29a28846d53e986923ccc070937fb02f1ad7dbc7874283f5142194acc69168bb0d35e3054aaac155eb1ea3f7a4d1c0b0805b471c4c45ea4d436c70e886257ab233f589bebbbeccea84ef866131ba80c04301e04c01f4b9cfaa44f48ee6dce5384c302af8a07200694c8908723961f8a7034fd68eaedbd4ff5ef8e0051492fa829e183f83518266c6ab46d942df9655b698334035f10d6d12ec795da3bda12770e892b0c1b6d51f2abf7f88cccfbb9ef241d67860d1cd156d9b95629b66575fd9ccd3d82bdaaee52c9ae3f4ffd3a47857cdbdea1b04a40e70f0581f2fc8a7d5a82e21a94752229e7fb638770345c0a67ba9583c82372cddb16441aa1ef53cae74e19906dea0374821aeb3019522c04359137380632434b61a684df1c03b1abf534d46483ec04056a1a6061282d189f2379a6eb051b1b461cd2415f55fdb625350d0e8409d6d9e1ec78269fb7a1e82a5ad3cfdd8a45695742aa602ccc99dee37ff8cad15911b3206ec05d8f00df3ba625fc1a6ef0a3591e197160511f6322b4fe1adcc9dc94579895e80784c189e7d18fed9f2d10a67a481fd62d2889e46e3332dd3cd437202f894c8b112d9ac3102e50eb74991b611271ed1889b278aa66603bd241dd1b1819c5a3c0b92ef17f98d29987e11430de66d6295d446236acec202e6eeb2514c5d80f10ddae75af2b3bb83e40ec06b613dc9176940dd807f7f61bbca5ce5a725a43c7ad17545eddd9453f3ba695f9dcece062085338f0d8add8bd2aa41c9f93e21a0c1b48688c76b136702e6316eafcca935cb8fccbf", 0x3fd, 0x0, 0x0, 0x0) 1970/01/01 00:16:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000140)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:16 executing program 3: r0 = socket$inet(0x2, 0x3ffffffffffffdff, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x8000, 0x0) accept4$ipx(r1, 0x0, &(0x7f0000000200), 0x800) r2 = fcntl$dupfd(r0, 0x406, r0) bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) 1970/01/01 00:16:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7a000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf0ffffff]}}, 0x20) 1970/01/01 00:16:16 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:16 executing program 6 (fault-call:1 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200, 0x0) fallocate(r1, 0x1, 0x0, 0xb7c) [ 976.291237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 976.298493] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000005 [ 976.380262] binder: 24566:24567 got transaction to invalid handle [ 976.386625] binder: 24566:24567 transaction failed 29201/-22, size 536870912-0 line 2856 [ 976.404847] binder: 24570:24571 got reply transaction with no transaction stack [ 976.412429] binder: 24570:24571 transaction failed 29201/-71, size 0-0 line 2763 1970/01/01 00:16:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/159) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)='W', 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="749298b9bb1a1a17ae1a61c19d7a391ab0aa86e922a1504f6e78178dc930bc5017288dd58fd6866fe2633e2489a2f65b76fddaec55524cac07179a64b643c652f1919b50a5d7c7cfccc53ae916c26e7afc362b9fab4cec49c638ac9eaf9c8239e3394008dd072e1ab5", 0x69) 1970/01/01 00:16:16 executing program 3: exit(0xda0d) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4001) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000180)={0x0, 0x1000, 0x912, &(0x7f0000000040)=0x4001}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 976.443226] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 976.481925] binder: 24570:24571 ioctl c0306201 20007000 returned -14 1970/01/01 00:16:16 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 976.494821] FAULT_INJECTION: forcing a failure. [ 976.494821] name failslab, interval 1, probability 0, space 0, times 0 [ 976.506234] CPU: 1 PID: 24586 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 976.513523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.522886] Call Trace: [ 976.525494] dump_stack+0x1b9/0x294 [ 976.529141] ? dump_stack_print_info.cold.2+0x52/0x52 [ 976.534344] should_fail.cold.4+0xa/0x1a [ 976.538413] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 976.543647] ? kmem_cache_alloc+0x12e/0x760 [ 976.547958] ? mempool_alloc_slab+0x44/0x60 [ 976.552271] ? submit_bh_wbc+0x155/0x7c0 [ 976.556328] ? blk_exit_rl+0x80/0x80 [ 976.560049] ? find_held_lock+0x36/0x1c0 [ 976.564103] ? graph_lock+0x170/0x170 [ 976.567903] ? lock_downgrade+0x8e0/0x8e0 [ 976.572060] ? __lock_is_held+0xb5/0x140 [ 976.576114] __should_failslab+0x124/0x180 [ 976.580348] should_failslab+0x9/0x14 [ 976.584148] kmem_cache_alloc+0x47/0x760 [ 976.588292] ? rcu_note_context_switch+0x710/0x710 [ 976.593209] ? blk_get_request+0x40/0x40 [ 976.597272] ? mempool_free+0x370/0x370 [ 976.601246] mempool_alloc_slab+0x44/0x60 [ 976.605394] mempool_alloc+0x18b/0x490 [ 976.609311] ? remove_element.isra.4+0x1c0/0x1c0 [ 976.614072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.619603] ? __lock_is_held+0xb5/0x140 [ 976.623663] bio_alloc_bioset+0x3a1/0x7f0 [ 976.627813] ? generic_make_request+0x1510/0x1510 [ 976.632655] ? bvec_alloc+0x2d0/0x2d0 [ 976.636461] ? check_same_owner+0x320/0x320 [ 976.640775] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 976.645781] ? guard_bio_eod+0x2b4/0x600 [ 976.649844] submit_bh_wbc+0x155/0x7c0 [ 976.653734] write_dirty_buffer+0xba/0x150 [ 976.657967] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 976.662715] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 976.668447] ? lock_downgrade+0x8e0/0x8e0 [ 976.672608] ? kasan_check_read+0x11/0x20 [ 976.676755] ? do_raw_spin_unlock+0x9e/0x2e0 [ 976.681159] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 976.685744] ? do_raw_spin_lock+0xc1/0x200 [ 976.689989] jbd2_journal_flush+0x156/0x540 [ 976.694333] ext4_ioctl_group_add+0x251/0x560 [ 976.698828] ? _copy_from_user+0xdf/0x150 [ 976.702978] ext4_ioctl+0x79d/0x4210 [ 976.706691] ? _parse_integer+0x13b/0x190 [ 976.710836] ? ext4_ioctl_group_add+0x560/0x560 [ 976.715495] ? _parse_integer+0x190/0x190 [ 976.719631] ? graph_lock+0x170/0x170 [ 976.723435] ? lock_release+0xa10/0xa10 [ 976.727420] ? check_same_owner+0x320/0x320 [ 976.731731] ? find_held_lock+0x36/0x1c0 [ 976.735793] ? graph_lock+0x170/0x170 [ 976.739600] ? find_held_lock+0x36/0x1c0 [ 976.743664] ? lock_downgrade+0x8e0/0x8e0 [ 976.747817] ? kasan_check_read+0x11/0x20 [ 976.751959] ? rcu_is_watching+0x85/0x140 [ 976.756093] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 976.761294] ? match_held_lock+0x841/0x8b0 [ 976.765530] ? expand_files.part.8+0x9a0/0x9a0 [ 976.770116] ? kasan_check_write+0x14/0x20 [ 976.774339] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 976.779257] ? wait_for_completion+0x870/0x870 [ 976.783850] ? ext4_ioctl_group_add+0x560/0x560 [ 976.788515] do_vfs_ioctl+0x1cf/0x16a0 [ 976.792411] ? ioctl_preallocate+0x2e0/0x2e0 [ 976.796825] ? fget_raw+0x20/0x20 [ 976.800276] ? __sb_end_write+0xac/0xe0 [ 976.804251] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 976.809784] ? fput+0x130/0x1a0 [ 976.813072] ? ksys_write+0x1a6/0x250 [ 976.816869] ? security_file_ioctl+0x94/0xc0 [ 976.821271] ksys_ioctl+0xa9/0xd0 [ 976.824715] __x64_sys_ioctl+0x73/0xb0 [ 976.828617] do_syscall_64+0x1b1/0x800 [ 976.832516] ? finish_task_switch+0x1ca/0x840 [ 976.837020] ? syscall_return_slowpath+0x5c0/0x5c0 [ 976.841947] ? syscall_return_slowpath+0x30f/0x5c0 [ 976.846866] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 976.852235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.857096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.862287] RIP: 0033:0x455a09 [ 976.865474] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.873180] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 976.880443] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 976.887704] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 1970/01/01 00:16:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x30010000]}}, 0x20) [ 976.894966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 976.902224] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000006 [ 976.923920] binder_alloc: binder_alloc_mmap_handler: 24570 20001000-20004000 already mapped failed -16 [ 976.935303] binder: 24566:24594 got transaction to invalid handle [ 976.941392] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:16 executing program 6 (fault-call:1 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 976.941726] binder: 24566:24594 transaction failed 29201/-22, size 536870912-0 line 2856 [ 976.953405] binder: 24570:24571 ioctl 40046207 0 returned -16 [ 976.979581] binder: 24570:24593 got reply transaction with no transaction stack [ 976.987243] binder: 24570:24593 transaction failed 29201/-71, size 0-0 line 2763 [ 977.031813] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 977.040213] binder: 24570:24593 ioctl c0306201 20007000 returned -14 1970/01/01 00:16:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/4096) [ 977.083890] FAULT_INJECTION: forcing a failure. [ 977.083890] name failslab, interval 1, probability 0, space 0, times 0 [ 977.091581] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.095252] CPU: 1 PID: 24612 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 977.101337] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.107960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.107965] Call Trace: [ 977.107996] dump_stack+0x1b9/0x294 1970/01/01 00:16:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406302, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 977.108018] ? dump_stack_print_info.cold.2+0x52/0x52 [ 977.108041] should_fail.cold.4+0xa/0x1a [ 977.108059] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 977.108077] ? kmem_cache_alloc+0x12e/0x760 [ 977.108092] ? mempool_alloc_slab+0x44/0x60 [ 977.108104] ? submit_bh_wbc+0x155/0x7c0 [ 977.108116] ? blk_exit_rl+0x80/0x80 [ 977.108133] ? find_held_lock+0x36/0x1c0 [ 977.108149] ? graph_lock+0x170/0x170 [ 977.128592] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.129200] ? lock_downgrade+0x8e0/0x8e0 [ 977.129226] ? __lock_is_held+0xb5/0x140 [ 977.129250] __should_failslab+0x124/0x180 [ 977.129268] should_failslab+0x9/0x14 [ 977.129286] kmem_cache_alloc+0x47/0x760 [ 977.134994] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.138544] ? rcu_note_context_switch+0x710/0x710 [ 977.138559] ? blk_get_request+0x40/0x40 [ 977.138578] ? mempool_free+0x370/0x370 [ 977.138593] mempool_alloc_slab+0x44/0x60 [ 977.138610] mempool_alloc+0x18b/0x490 [ 977.138630] ? remove_element.isra.4+0x1c0/0x1c0 [ 977.138654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.138671] ? __lock_is_held+0xb5/0x140 [ 977.234334] bio_alloc_bioset+0x3a1/0x7f0 [ 977.238489] ? generic_make_request+0x1510/0x1510 [ 977.243335] ? bvec_alloc+0x2d0/0x2d0 [ 977.247133] ? check_same_owner+0x320/0x320 [ 977.251446] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 977.256455] ? guard_bio_eod+0x2b4/0x600 [ 977.260507] submit_bh_wbc+0x155/0x7c0 [ 977.264398] write_dirty_buffer+0xba/0x150 [ 977.268640] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 977.273398] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 977.279108] ? lock_downgrade+0x8e0/0x8e0 [ 977.283253] ? kasan_check_read+0x11/0x20 [ 977.287413] ? do_raw_spin_unlock+0x9e/0x2e0 [ 977.291835] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 977.296432] ? do_raw_spin_lock+0xc1/0x200 [ 977.300682] jbd2_journal_flush+0x156/0x540 [ 977.305011] ext4_ioctl_group_add+0x251/0x560 [ 977.309525] ? _copy_from_user+0xdf/0x150 [ 977.313679] ext4_ioctl+0x79d/0x4210 [ 977.317401] ? _parse_integer+0x13b/0x190 [ 977.321565] ? ext4_ioctl_group_add+0x560/0x560 [ 977.326232] ? _parse_integer+0x190/0x190 [ 977.330382] ? graph_lock+0x170/0x170 [ 977.334184] ? lock_release+0xa10/0xa10 [ 977.338157] ? check_same_owner+0x320/0x320 [ 977.342471] ? find_held_lock+0x36/0x1c0 [ 977.346533] ? graph_lock+0x170/0x170 [ 977.350328] ? find_held_lock+0x36/0x1c0 [ 977.354397] ? lock_downgrade+0x8e0/0x8e0 [ 977.358562] ? kasan_check_read+0x11/0x20 [ 977.362706] ? rcu_is_watching+0x85/0x140 [ 977.366857] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 977.372059] ? match_held_lock+0x841/0x8b0 [ 977.376294] ? expand_files.part.8+0x9a0/0x9a0 [ 977.380881] ? kasan_check_write+0x14/0x20 [ 977.385295] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 977.390223] ? wait_for_completion+0x870/0x870 [ 977.394802] ? ext4_ioctl_group_add+0x560/0x560 [ 977.399478] do_vfs_ioctl+0x1cf/0x16a0 [ 977.403374] ? ioctl_preallocate+0x2e0/0x2e0 [ 977.407781] ? fget_raw+0x20/0x20 [ 977.411225] ? __sb_end_write+0xac/0xe0 [ 977.415214] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 977.420752] ? fput+0x130/0x1a0 [ 977.424110] ? ksys_write+0x1a6/0x250 [ 977.427904] ? security_file_ioctl+0x94/0xc0 [ 977.432312] ksys_ioctl+0xa9/0xd0 [ 977.435762] __x64_sys_ioctl+0x73/0xb0 [ 977.439648] do_syscall_64+0x1b1/0x800 [ 977.443536] ? finish_task_switch+0x1ca/0x840 [ 977.448027] ? syscall_return_slowpath+0x5c0/0x5c0 [ 977.452967] ? syscall_return_slowpath+0x30f/0x5c0 [ 977.457887] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 977.463244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 977.468082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.473263] RIP: 0033:0x455a09 [ 977.476448] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.484152] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 977.491418] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 977.498689] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 977.505946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 977.513219] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000007 1970/01/01 00:16:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x9000000]}}, 0x20) 1970/01/01 00:16:17 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:17 executing program 6 (fault-call:1 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 977.579725] binder: 24622:24625 got transaction to invalid handle [ 977.586133] binder: 24622:24625 transaction failed 29201/-22, size 536870912-0 line 2856 [ 977.601659] binder: 24624:24626 unknown command 1077961474 [ 977.616187] binder: 24624:24626 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x80000001, 0x40) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/87, 0x57, 0x0) epoll_create1(0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000340)=0xe8) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000200)='./file0\x00', r2, r3, 0x1100) [ 977.674331] binder_alloc: binder_alloc_mmap_handler: 24624 20001000-20004000 already mapped failed -16 [ 977.707589] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 977.714143] binder: 24622:24647 got transaction to invalid handle [ 977.723292] binder: 24622:24647 transaction failed 29201/-22, size 536870912-0 line 2856 [ 977.737473] binder: BINDER_SET_CONTEXT_MGR already set [ 977.737481] binder: 24624:24634 unknown command 1077961474 [ 977.737497] binder: 24624:24634 ioctl c0306201 20007000 returned -22 [ 977.744296] binder: 24624:24626 ioctl 40046207 0 returned -16 [ 977.763357] FAULT_INJECTION: forcing a failure. [ 977.763357] name failslab, interval 1, probability 0, space 0, times 0 1970/01/01 00:16:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 977.769370] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.774769] CPU: 1 PID: 24648 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 977.780757] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.787438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.787443] Call Trace: [ 977.787467] dump_stack+0x1b9/0x294 [ 977.787481] ? dump_stack_print_info.cold.2+0x52/0x52 [ 977.787498] should_fail.cold.4+0xa/0x1a [ 977.787511] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 977.787524] ? kmem_cache_alloc+0x12e/0x760 [ 977.787537] ? mempool_alloc_slab+0x44/0x60 [ 977.787550] ? submit_bh_wbc+0x155/0x7c0 [ 977.787559] ? blk_exit_rl+0x80/0x80 [ 977.787571] ? find_held_lock+0x36/0x1c0 [ 977.787580] ? graph_lock+0x170/0x170 [ 977.787596] ? lock_downgrade+0x8e0/0x8e0 [ 977.851119] ? __lock_is_held+0xb5/0x140 [ 977.855168] __should_failslab+0x124/0x180 [ 977.859389] should_failslab+0x9/0x14 [ 977.863170] kmem_cache_alloc+0x47/0x760 [ 977.867216] ? rcu_note_context_switch+0x710/0x710 [ 977.872135] ? blk_get_request+0x40/0x40 [ 977.876181] ? mempool_free+0x370/0x370 [ 977.880137] mempool_alloc_slab+0x44/0x60 [ 977.884267] mempool_alloc+0x18b/0x490 [ 977.888139] ? remove_element.isra.4+0x1c0/0x1c0 [ 977.892882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.898414] ? __lock_is_held+0xb5/0x140 [ 977.902461] bio_alloc_bioset+0x3a1/0x7f0 [ 977.906591] ? generic_make_request+0x1510/0x1510 [ 977.911417] ? bvec_alloc+0x2d0/0x2d0 [ 977.915209] ? check_same_owner+0x320/0x320 [ 977.919516] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 977.924526] ? guard_bio_eod+0x2b4/0x600 [ 977.928578] submit_bh_wbc+0x155/0x7c0 [ 977.932467] write_dirty_buffer+0xba/0x150 [ 977.936707] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 977.941466] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 977.947166] ? lock_downgrade+0x8e0/0x8e0 [ 977.951315] ? kasan_check_read+0x11/0x20 [ 977.955456] ? do_raw_spin_unlock+0x9e/0x2e0 [ 977.959848] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 977.964415] ? do_raw_spin_lock+0xc1/0x200 [ 977.968638] jbd2_journal_flush+0x156/0x540 [ 977.972955] ext4_ioctl_group_add+0x251/0x560 [ 977.977610] ? _copy_from_user+0xdf/0x150 [ 977.982348] ext4_ioctl+0x79d/0x4210 [ 977.986049] ? _parse_integer+0x13b/0x190 [ 977.990179] ? ext4_ioctl_group_add+0x560/0x560 [ 977.994829] ? _parse_integer+0x190/0x190 [ 977.998960] ? graph_lock+0x170/0x170 [ 978.002741] ? lock_release+0xa10/0xa10 [ 978.006698] ? check_same_owner+0x320/0x320 [ 978.011000] ? find_held_lock+0x36/0x1c0 [ 978.015041] ? graph_lock+0x170/0x170 [ 978.018824] ? find_held_lock+0x36/0x1c0 [ 978.022890] ? lock_downgrade+0x8e0/0x8e0 [ 978.027053] ? kasan_check_read+0x11/0x20 [ 978.031187] ? rcu_is_watching+0x85/0x140 [ 978.035407] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 978.040587] ? match_held_lock+0x841/0x8b0 [ 978.044810] ? expand_files.part.8+0x9a0/0x9a0 [ 978.049395] ? kasan_check_write+0x14/0x20 [ 978.053627] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 978.058560] ? wait_for_completion+0x870/0x870 [ 978.063127] ? ext4_ioctl_group_add+0x560/0x560 [ 978.067780] do_vfs_ioctl+0x1cf/0x16a0 [ 978.071662] ? ioctl_preallocate+0x2e0/0x2e0 [ 978.076058] ? fget_raw+0x20/0x20 [ 978.079499] ? __sb_end_write+0xac/0xe0 [ 978.083459] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 978.088976] ? fput+0x130/0x1a0 [ 978.092237] ? ksys_write+0x1a6/0x250 [ 978.096022] ? security_file_ioctl+0x94/0xc0 [ 978.100414] ksys_ioctl+0xa9/0xd0 [ 978.103859] __x64_sys_ioctl+0x73/0xb0 [ 978.107732] do_syscall_64+0x1b1/0x800 [ 978.111604] ? finish_task_switch+0x1ca/0x840 [ 978.116171] ? syscall_return_slowpath+0x5c0/0x5c0 [ 978.121080] ? syscall_return_slowpath+0x30f/0x5c0 [ 978.126011] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 978.131361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 978.136190] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.141361] RIP: 0033:0x455a09 [ 978.144539] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.152229] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 978.159653] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 978.166906] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 978.174158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 978.181413] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000008 [ 978.216540] binder: 24656:24657 transaction failed 29189/-22, size 536870912-0 line 2856 [ 978.273681] binder: 24656:24663 transaction failed 29189/-22, size 536870912-0 line 2856 1970/01/01 00:16:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="3407ce8283718ad42ea590d1036d148d3e70e9e1b2fa1030a88863d0fa6483fa8918991b75c44e3de4ac1b2b54860673d05993cb222cc498b933b2bdcfc7ff6555737a2420e1225326f3fe6dc3283168e6683f1c545ac2c7f209f41096e950f296b5910d0d0b9dd81ae03552ed39567c75ab6267d0fb5885ade9b4226ad19be611f8b6536a5538ac9dfd2733b686e6ba6ea8ec4ea9c9d57b384841e332cd79ade75af310a0740d92f6"], &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e24, 0x5a, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffff9}}}, 0x84) 1970/01/01 00:16:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x15e9d60925d1618e}, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000340)={'veth0\x00', 0x1}) read(r0, &(0x7f0000000040)=""/11, 0xb) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d2e73797374656d2e706f7369785f61516c969c6c636c5f61636365737300"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r3, 0x1, 0x0, 0xb7c) epoll_create(0xfffffffffffffffa) process_vm_writev(r4, &(0x7f0000002740)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/169, 0xa9}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/89, 0x59}], 0x8, &(0x7f0000002d80)=[{&(0x7f00000027c0)=""/204, 0xcc}, {&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000002980)=""/120, 0x78}, {&(0x7f0000002a00)=""/243, 0xf3}, {&(0x7f0000002b00)=""/191, 0xbf}, {&(0x7f0000002bc0)=""/188, 0xbc}, {&(0x7f0000002c80)=""/107, 0x6b}, {&(0x7f0000002d00)=""/73, 0x49}], 0x9, 0x0) 1970/01/01 00:16:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x5f000000]}}, 0x20) 1970/01/01 00:16:18 executing program 0: r0 = eventfd(0x81) write(r0, &(0x7f0000000140)="bffd0479f940a10b5690e29bdcbd223ad8a206000e1f3695989238f8ea278fd5ca578a88cca318d5c3b3b6e925f99fe1f8cc3bb680c0cd0a81c175fd5619a32b9affc0e9b1496ebf57a2df1022fdb12021230c9a8a3000898c7f09e664a0f549ae91aef870993c757ad5e106f08b0d89c67907cd1c1ed4b4b3aa621f03fb4248a1218399b49ed89f757831a5321a0485edc338f1dcd5f40a756599f639f60aac0d1e28a2bf04b3d8b973f214cb80b9cb4b4a9d5953d886b5a2e5fde99388e252d1ffbd98a8bacbcb9448a16e5a3fc9115583432d7a712c9ab2be198513360b0e571fcbf60b", 0xe5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:18 executing program 6 (fault-call:1 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4c00000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:18 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:18 executing program 3: r0 = socket$inet(0x2, 0x800, 0x7ffffffffffffffc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)={0xa, 0x0, [{0x8000000e, 0x101, 0x4, 0x2, 0x4, 0x81, 0x2}, {0xc000000f, 0x3, 0x0, 0x3ff, 0x6, 0x80000001, 0x1}, {0x40000000, 0x1, 0x4, 0x1, 0x6, 0x0, 0x9}, {0xc000000d, 0x6, 0x4, 0x4, 0x1, 0x8, 0x3}, {0x80000007, 0xeaf, 0x5, 0x3, 0x0, 0x1000, 0x80}, {0xb, 0xfff, 0x0, 0x7ff, 0x3, 0x7f, 0x3}, {0xc0000019, 0xfffffffffffffff7, 0x4, 0x1513, 0x100000001, 0x100000000, 0xff}, {0x4, 0x10000, 0x1, 0x6, 0x412, 0x7fff, 0x9}, {0x80000007, 0x4, 0x6, 0x7, 0xea, 0x5, 0x5}, {0x4, 0x5, 0x7, 0x8, 0x8, 0x4, 0x4}]}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:18 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x80000, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) r1 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) chown(&(0x7f0000000000)='./file0\x00', r2, r3) getpgid(r1) [ 978.317237] binder: undelivered TRANSACTION_ERROR: 29189 [ 978.342235] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 978.344392] binder: undelivered TRANSACTION_ERROR: 29189 [ 978.382013] FAULT_INJECTION: forcing a failure. [ 978.382013] name failslab, interval 1, probability 0, space 0, times 0 [ 978.393461] CPU: 1 PID: 24678 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 978.400726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.410070] Call Trace: [ 978.412661] dump_stack+0x1b9/0x294 [ 978.416288] ? dump_stack_print_info.cold.2+0x52/0x52 [ 978.421479] should_fail.cold.4+0xa/0x1a [ 978.425540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 978.430636] ? kmem_cache_alloc+0x12e/0x760 [ 978.434944] ? mempool_alloc_slab+0x44/0x60 [ 978.439250] ? submit_bh_wbc+0x155/0x7c0 [ 978.443299] ? blk_exit_rl+0x80/0x80 [ 978.447010] ? find_held_lock+0x36/0x1c0 [ 978.451059] ? graph_lock+0x170/0x170 [ 978.454860] ? lock_downgrade+0x8e0/0x8e0 [ 978.459173] ? __lock_is_held+0xb5/0x140 [ 978.463240] __should_failslab+0x124/0x180 [ 978.467468] should_failslab+0x9/0x14 [ 978.471260] kmem_cache_alloc+0x47/0x760 [ 978.475328] ? rcu_note_context_switch+0x710/0x710 [ 978.480244] ? blk_get_request+0x40/0x40 [ 978.484300] ? mempool_free+0x370/0x370 [ 978.488267] mempool_alloc_slab+0x44/0x60 [ 978.492425] mempool_alloc+0x18b/0x490 [ 978.496305] ? remove_element.isra.4+0x1c0/0x1c0 [ 978.501063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 978.506591] ? __lock_is_held+0xb5/0x140 [ 978.510729] bio_alloc_bioset+0x3a1/0x7f0 [ 978.514865] ? generic_make_request+0x1510/0x1510 [ 978.519699] ? bvec_alloc+0x2d0/0x2d0 [ 978.523491] ? check_same_owner+0x320/0x320 [ 978.527799] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 978.532803] ? guard_bio_eod+0x2b4/0x600 [ 978.536847] submit_bh_wbc+0x155/0x7c0 [ 978.540750] write_dirty_buffer+0xba/0x150 [ 978.544983] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 978.549736] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 978.555450] ? lock_downgrade+0x8e0/0x8e0 [ 978.559591] ? kasan_check_read+0x11/0x20 [ 978.563726] ? do_raw_spin_unlock+0x9e/0x2e0 [ 978.568119] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 978.572688] ? do_raw_spin_lock+0xc1/0x200 [ 978.576912] jbd2_journal_flush+0x156/0x540 [ 978.581230] ext4_ioctl_group_add+0x251/0x560 [ 978.585720] ? _copy_from_user+0xdf/0x150 [ 978.589867] ext4_ioctl+0x79d/0x4210 [ 978.593569] ? _parse_integer+0x13b/0x190 [ 978.597721] ? ext4_ioctl_group_add+0x560/0x560 [ 978.602383] ? _parse_integer+0x190/0x190 [ 978.606514] ? graph_lock+0x170/0x170 [ 978.610300] ? lock_release+0xa10/0xa10 [ 978.614268] ? check_same_owner+0x320/0x320 [ 978.618574] ? find_held_lock+0x36/0x1c0 [ 978.622626] ? graph_lock+0x170/0x170 [ 978.626498] ? find_held_lock+0x36/0x1c0 [ 978.630544] ? lock_downgrade+0x8e0/0x8e0 [ 978.634676] ? kasan_check_read+0x11/0x20 [ 978.638816] ? rcu_is_watching+0x85/0x140 [ 978.642947] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 978.648125] ? match_held_lock+0x841/0x8b0 [ 978.652349] ? expand_files.part.8+0x9a0/0x9a0 [ 978.656916] ? kasan_check_write+0x14/0x20 [ 978.661138] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 978.666056] ? wait_for_completion+0x870/0x870 [ 978.670645] ? ext4_ioctl_group_add+0x560/0x560 [ 978.675303] do_vfs_ioctl+0x1cf/0x16a0 [ 978.679177] ? ioctl_preallocate+0x2e0/0x2e0 [ 978.683590] ? fget_raw+0x20/0x20 [ 978.687035] ? __sb_end_write+0xac/0xe0 [ 978.691002] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 978.696522] ? fput+0x130/0x1a0 [ 978.699793] ? ksys_write+0x1a6/0x250 [ 978.703591] ? security_file_ioctl+0x94/0xc0 [ 978.707993] ksys_ioctl+0xa9/0xd0 [ 978.711434] __x64_sys_ioctl+0x73/0xb0 [ 978.715322] do_syscall_64+0x1b1/0x800 [ 978.719192] ? finish_task_switch+0x1ca/0x840 [ 978.723668] ? syscall_return_slowpath+0x5c0/0x5c0 [ 978.728581] ? syscall_return_slowpath+0x30f/0x5c0 [ 978.733499] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 978.738851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 978.743688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.748864] RIP: 0033:0x455a09 [ 978.752036] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.759745] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 978.767009] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 978.774269] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 978.781617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 978.788872] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000009 [ 978.808437] binder: 24674:24675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 978.815687] binder: 24674:24675 unknown command 0 [ 978.832372] binder: 24684:24693 transaction failed 29201/-28, size 536870912-0 line 2971 1970/01/01 00:16:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x104) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)=""/19) 1970/01/01 00:16:18 executing program 6 (fault-call:1 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 978.882686] binder: 24674:24675 ioctl c0306201 20007000 returned -22 [ 978.884145] binder: 24684:24701 transaction failed 29201/-28, size 536870912-0 line 2971 [ 978.923328] binder_alloc: binder_alloc_mmap_handler: 24674 20001000-20004000 already mapped failed -16 [ 978.949432] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 978.969531] binder: BINDER_SET_CONTEXT_MGR already set [ 978.974924] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.981797] binder: 24674:24675 ioctl 40046207 0 returned -16 [ 978.983958] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.988490] FAULT_INJECTION: forcing a failure. [ 978.988490] name failslab, interval 1, probability 0, space 0, times 0 [ 979.004798] CPU: 0 PID: 24710 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 979.004921] binder: 24674:24704 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 979.012265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.012272] Call Trace: [ 979.012300] dump_stack+0x1b9/0x294 [ 979.012314] ? dump_stack_print_info.cold.2+0x52/0x52 [ 979.012332] should_fail.cold.4+0xa/0x1a [ 979.012346] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 979.012364] ? kmem_cache_alloc+0x12e/0x760 [ 979.019619] binder: 24674:24704 unknown command 0 [ 979.028954] ? mempool_alloc_slab+0x44/0x60 [ 979.028972] ? submit_bh_wbc+0x155/0x7c0 [ 979.028992] ? blk_exit_rl+0x80/0x80 [ 979.032458] binder: 24674:24704 ioctl c0306201 20007000 returned -22 [ 979.035209] ? find_held_lock+0x36/0x1c0 [ 979.035221] ? graph_lock+0x170/0x170 [ 979.035231] ? lock_downgrade+0x8e0/0x8e0 [ 979.035243] ? __lock_is_held+0xb5/0x140 [ 979.035258] __should_failslab+0x124/0x180 [ 979.097606] should_failslab+0x9/0x14 [ 979.101434] kmem_cache_alloc+0x47/0x760 [ 979.105527] ? rcu_note_context_switch+0x710/0x710 [ 979.110491] ? blk_get_request+0x40/0x40 [ 979.114608] ? mempool_free+0x370/0x370 [ 979.118616] mempool_alloc_slab+0x44/0x60 [ 979.122788] mempool_alloc+0x18b/0x490 [ 979.126678] ? remove_element.isra.4+0x1c0/0x1c0 [ 979.131433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.136954] ? __lock_is_held+0xb5/0x140 [ 979.141029] bio_alloc_bioset+0x3a1/0x7f0 [ 979.145195] ? generic_make_request+0x1510/0x1510 [ 979.150026] ? bvec_alloc+0x2d0/0x2d0 [ 979.153813] ? check_same_owner+0x320/0x320 [ 979.158144] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 979.163158] ? guard_bio_eod+0x2b4/0x600 [ 979.167240] submit_bh_wbc+0x155/0x7c0 [ 979.171146] write_dirty_buffer+0xba/0x150 [ 979.175370] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 979.180126] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 979.185827] ? lock_downgrade+0x8e0/0x8e0 [ 979.189967] ? kasan_check_read+0x11/0x20 [ 979.194105] ? do_raw_spin_unlock+0x9e/0x2e0 [ 979.198507] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 979.203170] ? do_raw_spin_lock+0xc1/0x200 [ 979.207406] jbd2_journal_flush+0x156/0x540 [ 979.211720] ext4_ioctl_group_add+0x251/0x560 [ 979.216211] ? _copy_from_user+0xdf/0x150 [ 979.220348] ext4_ioctl+0x79d/0x4210 [ 979.224045] ? _parse_integer+0x13b/0x190 [ 979.228184] ? ext4_ioctl_group_add+0x560/0x560 [ 979.232840] ? _parse_integer+0x190/0x190 [ 979.236979] ? graph_lock+0x170/0x170 [ 979.240762] ? lock_release+0xa10/0xa10 [ 979.244724] ? check_same_owner+0x320/0x320 [ 979.249032] ? find_held_lock+0x36/0x1c0 [ 979.253079] ? graph_lock+0x170/0x170 [ 979.256865] ? find_held_lock+0x36/0x1c0 [ 979.260916] ? lock_downgrade+0x8e0/0x8e0 [ 979.265053] ? kasan_check_read+0x11/0x20 [ 979.269193] ? rcu_is_watching+0x85/0x140 [ 979.273342] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 979.278538] ? match_held_lock+0x841/0x8b0 [ 979.282775] ? expand_files.part.8+0x9a0/0x9a0 [ 979.287364] ? kasan_check_write+0x14/0x20 [ 979.291593] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 979.296515] ? wait_for_completion+0x870/0x870 [ 979.301095] ? ext4_ioctl_group_add+0x560/0x560 [ 979.305765] do_vfs_ioctl+0x1cf/0x16a0 [ 979.309646] ? ioctl_preallocate+0x2e0/0x2e0 [ 979.314052] ? fget_raw+0x20/0x20 [ 979.317500] ? __sb_end_write+0xac/0xe0 [ 979.321492] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 979.327022] ? fput+0x130/0x1a0 [ 979.330307] ? ksys_write+0x1a6/0x250 [ 979.334117] ? security_file_ioctl+0x94/0xc0 [ 979.338521] ksys_ioctl+0xa9/0xd0 [ 979.341964] __x64_sys_ioctl+0x73/0xb0 [ 979.345839] do_syscall_64+0x1b1/0x800 [ 979.349712] ? finish_task_switch+0x1ca/0x840 [ 979.354190] ? syscall_return_slowpath+0x5c0/0x5c0 [ 979.359150] ? syscall_return_slowpath+0x30f/0x5c0 [ 979.364067] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 979.369425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.374264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.379440] RIP: 0033:0x455a09 [ 979.382612] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.390481] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 979.397740] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 979.405008] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 979.412266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 979.419538] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000000a 1970/01/01 00:16:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0xffffffffffffffff, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x10]}}, 0x20) 1970/01/01 00:16:19 executing program 3: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000000)=""/98) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) socket(0x15, 0xf, 0x80) 1970/01/01 00:16:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406307, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in=@multicast2}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xfffffffffffffe46) 1970/01/01 00:16:19 executing program 6 (fault-call:1 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 979.629924] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 979.653910] FAULT_INJECTION: forcing a failure. [ 979.653910] name failslab, interval 1, probability 0, space 0, times 0 [ 979.665280] CPU: 0 PID: 24727 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 979.672680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.682068] Call Trace: [ 979.684660] dump_stack+0x1b9/0x294 [ 979.688280] ? dump_stack_print_info.cold.2+0x52/0x52 [ 979.693463] should_fail.cold.4+0xa/0x1a [ 979.697597] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 979.702687] ? kmem_cache_alloc+0x12e/0x760 [ 979.706995] ? mempool_alloc_slab+0x44/0x60 [ 979.711395] ? submit_bh_wbc+0x155/0x7c0 [ 979.715443] ? blk_exit_rl+0x80/0x80 [ 979.719151] ? find_held_lock+0x36/0x1c0 [ 979.723196] ? graph_lock+0x170/0x170 [ 979.726980] ? lock_downgrade+0x8e0/0x8e0 [ 979.731118] ? __lock_is_held+0xb5/0x140 [ 979.735170] __should_failslab+0x124/0x180 [ 979.739391] should_failslab+0x9/0x14 [ 979.743204] kmem_cache_alloc+0x47/0x760 [ 979.747251] ? rcu_note_context_switch+0x710/0x710 [ 979.752162] ? blk_get_request+0x40/0x40 [ 979.756224] ? mempool_free+0x370/0x370 [ 979.760184] mempool_alloc_slab+0x44/0x60 [ 979.764315] mempool_alloc+0x18b/0x490 [ 979.768186] ? remove_element.isra.4+0x1c0/0x1c0 [ 979.772935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.778463] ? __lock_is_held+0xb5/0x140 [ 979.782511] bio_alloc_bioset+0x3a1/0x7f0 [ 979.786646] ? generic_make_request+0x1510/0x1510 [ 979.792116] ? bvec_alloc+0x2d0/0x2d0 [ 979.795911] ? check_same_owner+0x320/0x320 [ 979.800219] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 979.805225] ? guard_bio_eod+0x2b4/0x600 [ 979.809270] submit_bh_wbc+0x155/0x7c0 [ 979.813141] write_dirty_buffer+0xba/0x150 [ 979.817366] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 979.822147] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 979.827871] ? lock_downgrade+0x8e0/0x8e0 [ 979.832008] ? kasan_check_read+0x11/0x20 [ 979.836135] ? do_raw_spin_unlock+0x9e/0x2e0 [ 979.840527] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 979.845100] ? do_raw_spin_lock+0xc1/0x200 [ 979.849330] jbd2_journal_flush+0x156/0x540 [ 979.853643] ext4_ioctl_group_add+0x251/0x560 [ 979.858126] ? _copy_from_user+0xdf/0x150 [ 979.862269] ext4_ioctl+0x79d/0x4210 [ 979.865979] ? _parse_integer+0x13b/0x190 [ 979.870128] ? ext4_ioctl_group_add+0x560/0x560 [ 979.874803] ? _parse_integer+0x190/0x190 [ 979.878943] ? graph_lock+0x170/0x170 [ 979.882731] ? lock_release+0xa10/0xa10 [ 979.886693] ? check_same_owner+0x320/0x320 [ 979.890998] ? find_held_lock+0x36/0x1c0 [ 979.895051] ? graph_lock+0x170/0x170 [ 979.898858] ? find_held_lock+0x36/0x1c0 [ 979.902934] ? lock_downgrade+0x8e0/0x8e0 [ 979.907091] ? kasan_check_read+0x11/0x20 [ 979.911224] ? rcu_is_watching+0x85/0x140 [ 979.915364] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 979.920543] ? match_held_lock+0x841/0x8b0 [ 979.924765] ? expand_files.part.8+0x9a0/0x9a0 [ 979.929332] ? kasan_check_write+0x14/0x20 [ 979.933574] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 979.938499] ? wait_for_completion+0x870/0x870 [ 979.943075] ? ext4_ioctl_group_add+0x560/0x560 [ 979.947729] do_vfs_ioctl+0x1cf/0x16a0 [ 979.951617] ? ioctl_preallocate+0x2e0/0x2e0 [ 979.956620] ? fget_raw+0x20/0x20 [ 979.960063] ? __sb_end_write+0xac/0xe0 [ 979.964029] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 979.969549] ? fput+0x130/0x1a0 [ 979.972816] ? ksys_write+0x1a6/0x250 [ 979.976604] ? security_file_ioctl+0x94/0xc0 [ 979.981008] ksys_ioctl+0xa9/0xd0 [ 979.984449] __x64_sys_ioctl+0x73/0xb0 [ 979.988324] do_syscall_64+0x1b1/0x800 [ 979.992199] ? finish_task_switch+0x1ca/0x840 [ 979.996681] ? syscall_return_slowpath+0x5c0/0x5c0 [ 980.001608] ? syscall_return_slowpath+0x30f/0x5c0 [ 980.006533] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 980.011881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 980.016714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.021885] RIP: 0033:0x455a09 [ 980.025059] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.032759] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 980.040017] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 980.047276] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 980.054539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 980.061802] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000000b 1970/01/01 00:16:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x40040, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x2bdc000080000, 0x80400) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x224000, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000180)=0xfef5, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xb5]}}, 0x20) [ 980.086841] binder: 24725:24728 unknown command 1077961479 [ 980.090556] binder: 24734:24739 got transaction to invalid handle [ 980.098851] binder: 24734:24739 transaction failed 29201/-22, size 536870912-0 line 2856 [ 980.101566] binder: 24725:24728 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:20 executing program 3: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 1970/01/01 00:16:20 executing program 6 (fault-call:1 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 980.148276] binder_alloc: binder_alloc_mmap_handler: 24725 20001000-20004000 already mapped failed -16 [ 980.184163] binder: 24734:24758 got transaction to invalid handle [ 980.190503] binder: 24734:24758 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x40, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000140)=0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x10000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:20 executing program 3: r0 = socket$inet(0x2, 0x0, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 980.208527] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 980.212216] binder: BINDER_SET_CONTEXT_MGR already set [ 980.227406] binder: 24725:24750 unknown command 1077961479 [ 980.235524] binder: 24725:24728 ioctl 40046207 0 returned -16 [ 980.250843] binder: 24725:24750 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040636c, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:20 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6800000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 980.257663] FAULT_INJECTION: forcing a failure. [ 980.257663] name failslab, interval 1, probability 0, space 0, times 0 [ 980.262204] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.269147] CPU: 0 PID: 24764 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 980.279249] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.281916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.281922] Call Trace: [ 980.281946] dump_stack+0x1b9/0x294 [ 980.281961] ? dump_stack_print_info.cold.2+0x52/0x52 [ 980.281980] should_fail.cold.4+0xa/0x1a [ 980.312213] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 980.317362] ? kmem_cache_alloc+0x12e/0x760 [ 980.321704] ? mempool_alloc_slab+0x44/0x60 [ 980.326017] ? submit_bh_wbc+0x155/0x7c0 [ 980.330069] ? blk_exit_rl+0x80/0x80 [ 980.333772] ? find_held_lock+0x36/0x1c0 [ 980.337827] ? graph_lock+0x170/0x170 [ 980.341646] ? lock_downgrade+0x8e0/0x8e0 [ 980.345808] ? __lock_is_held+0xb5/0x140 [ 980.349858] __should_failslab+0x124/0x180 [ 980.354088] should_failslab+0x9/0x14 [ 980.357887] kmem_cache_alloc+0x47/0x760 [ 980.361962] ? rcu_note_context_switch+0x710/0x710 [ 980.366896] ? blk_get_request+0x40/0x40 [ 980.370979] ? mempool_free+0x370/0x370 [ 980.374974] mempool_alloc_slab+0x44/0x60 [ 980.379140] mempool_alloc+0x18b/0x490 [ 980.383023] ? remove_element.isra.4+0x1c0/0x1c0 [ 980.387778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.393317] ? __lock_is_held+0xb5/0x140 [ 980.397377] bio_alloc_bioset+0x3a1/0x7f0 [ 980.401523] ? generic_make_request+0x1510/0x1510 [ 980.406368] ? bvec_alloc+0x2d0/0x2d0 [ 980.410164] ? check_same_owner+0x320/0x320 [ 980.414495] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 980.419517] ? guard_bio_eod+0x2b4/0x600 [ 980.423591] submit_bh_wbc+0x155/0x7c0 [ 980.427478] write_dirty_buffer+0xba/0x150 [ 980.431738] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 980.436491] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 980.442200] ? lock_downgrade+0x8e0/0x8e0 [ 980.446346] ? kasan_check_read+0x11/0x20 [ 980.450490] ? do_raw_spin_unlock+0x9e/0x2e0 [ 980.454914] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 980.459511] ? do_raw_spin_lock+0xc1/0x200 [ 980.463743] jbd2_journal_flush+0x156/0x540 [ 980.468055] ext4_ioctl_group_add+0x251/0x560 [ 980.472537] ? _copy_from_user+0xdf/0x150 [ 980.476758] ext4_ioctl+0x79d/0x4210 [ 980.480452] ? _parse_integer+0x13b/0x190 [ 980.484587] ? ext4_ioctl_group_add+0x560/0x560 [ 980.489240] ? graph_lock+0x170/0x170 [ 980.493029] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 980.498031] ? find_held_lock+0x36/0x1c0 [ 980.502074] ? graph_lock+0x170/0x170 [ 980.505856] ? find_held_lock+0x36/0x1c0 [ 980.509903] ? lock_downgrade+0x8e0/0x8e0 [ 980.514042] ? kasan_check_read+0x11/0x20 [ 980.518173] ? rcu_is_watching+0x85/0x140 [ 980.522304] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 980.527492] ? match_held_lock+0x841/0x8b0 [ 980.531721] ? expand_files.part.8+0x9a0/0x9a0 [ 980.536293] ? kasan_check_write+0x14/0x20 [ 980.540526] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 980.545462] ? wait_for_completion+0x870/0x870 [ 980.550039] ? ext4_ioctl_group_add+0x560/0x560 [ 980.554714] do_vfs_ioctl+0x1cf/0x16a0 [ 980.558601] ? ioctl_preallocate+0x2e0/0x2e0 [ 980.563008] ? fget_raw+0x20/0x20 [ 980.566463] ? __sb_end_write+0xac/0xe0 [ 980.570434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 980.576009] ? fput+0x130/0x1a0 [ 980.579287] ? ksys_write+0x1a6/0x250 [ 980.583081] ? security_file_ioctl+0x94/0xc0 [ 980.587487] ksys_ioctl+0xa9/0xd0 [ 980.590929] __x64_sys_ioctl+0x73/0xb0 [ 980.594814] do_syscall_64+0x1b1/0x800 [ 980.598740] ? finish_task_switch+0x1ca/0x840 [ 980.603234] ? syscall_return_slowpath+0x5c0/0x5c0 [ 980.608171] ? syscall_return_slowpath+0x30f/0x5c0 [ 980.613093] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 980.618443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 980.623273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.628454] RIP: 0033:0x455a09 [ 980.631624] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.639319] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 980.646572] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 980.653832] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 980.661093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 980.668352] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000000c 1970/01/01 00:16:20 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:20 executing program 6 (fault-call:1 fault-nth:13): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 980.717973] binder: 24779:24780 transaction failed 29189/-22, size 536870912-0 line 2856 [ 980.745852] binder: 24776:24783 unknown command 1077961580 1970/01/01 00:16:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/138) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x400000000000000]}}, 0x20) [ 980.774635] binder: 24776:24783 ioctl c0306201 20007000 returned -22 [ 980.789278] binder: 24779:24789 transaction failed 29201/-28, size 536870912-0 line 2971 [ 980.805301] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 1970/01/01 00:16:20 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 980.819554] binder_alloc: binder_alloc_mmap_handler: 24776 20001000-20004000 already mapped failed -16 [ 980.847868] FAULT_INJECTION: forcing a failure. [ 980.847868] name failslab, interval 1, probability 0, space 0, times 0 [ 980.851480] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.859212] CPU: 0 PID: 24793 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 980.866519] binder: 24776:24795 unknown command 1077961580 [ 980.871961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.871966] Call Trace: [ 980.871993] dump_stack+0x1b9/0x294 [ 980.872012] ? dump_stack_print_info.cold.2+0x52/0x52 [ 980.872029] should_fail.cold.4+0xa/0x1a [ 980.872042] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 980.872064] ? kmem_cache_alloc+0x12e/0x760 [ 980.872099] ? mempool_alloc_slab+0x44/0x60 [ 980.884189] binder: undelivered TRANSACTION_ERROR: 29189 [ 980.887111] ? submit_bh_wbc+0x155/0x7c0 [ 980.887125] ? blk_exit_rl+0x80/0x80 [ 980.887143] ? find_held_lock+0x36/0x1c0 [ 980.887159] ? graph_lock+0x170/0x170 [ 980.889904] binder: 24776:24795 ioctl c0306201 20007000 returned -22 [ 980.893415] ? lock_downgrade+0x8e0/0x8e0 [ 980.893429] ? __lock_is_held+0xb5/0x140 [ 980.893444] __should_failslab+0x124/0x180 [ 980.893458] should_failslab+0x9/0x14 [ 980.893469] kmem_cache_alloc+0x47/0x760 [ 980.893482] ? rcu_note_context_switch+0x710/0x710 [ 980.893496] ? blk_get_request+0x40/0x40 [ 980.893510] ? mempool_free+0x370/0x370 [ 980.893518] mempool_alloc_slab+0x44/0x60 [ 980.893527] mempool_alloc+0x18b/0x490 [ 980.893547] ? remove_element.isra.4+0x1c0/0x1c0 [ 980.906187] binder: BINDER_SET_CONTEXT_MGR already set [ 980.907911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.907922] ? __lock_is_held+0xb5/0x140 [ 980.907933] bio_alloc_bioset+0x3a1/0x7f0 [ 980.907943] ? generic_make_request+0x1510/0x1510 [ 980.907952] ? bvec_alloc+0x2d0/0x2d0 [ 980.907965] ? check_same_owner+0x320/0x320 [ 980.907974] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 980.907994] ? guard_bio_eod+0x2b4/0x600 [ 980.912542] binder: 24776:24783 ioctl 40046207 0 returned -16 [ 980.916675] submit_bh_wbc+0x155/0x7c0 [ 980.916690] write_dirty_buffer+0xba/0x150 [ 980.916703] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 980.916717] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 980.916726] ? lock_downgrade+0x8e0/0x8e0 [ 980.916740] ? kasan_check_read+0x11/0x20 [ 980.916750] ? do_raw_spin_unlock+0x9e/0x2e0 [ 980.916759] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 980.916770] ? do_raw_spin_lock+0xc1/0x200 [ 980.916782] jbd2_journal_flush+0x156/0x540 [ 980.916802] ext4_ioctl_group_add+0x251/0x560 [ 981.085598] ? _copy_from_user+0xdf/0x150 [ 981.089745] ext4_ioctl+0x79d/0x4210 [ 981.093439] ? _parse_integer+0x13b/0x190 [ 981.097571] ? ext4_ioctl_group_add+0x560/0x560 [ 981.102227] ? _parse_integer+0x190/0x190 [ 981.106361] ? graph_lock+0x170/0x170 [ 981.110144] ? lock_release+0xa10/0xa10 [ 981.114102] ? check_same_owner+0x320/0x320 [ 981.118406] ? find_held_lock+0x36/0x1c0 [ 981.122451] ? graph_lock+0x170/0x170 [ 981.126256] ? find_held_lock+0x36/0x1c0 [ 981.130305] ? lock_downgrade+0x8e0/0x8e0 [ 981.134444] ? kasan_check_read+0x11/0x20 [ 981.138575] ? rcu_is_watching+0x85/0x140 [ 981.142706] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 981.147890] ? match_held_lock+0x841/0x8b0 [ 981.152111] ? expand_files.part.8+0x9a0/0x9a0 [ 981.156681] ? kasan_check_write+0x14/0x20 [ 981.160905] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 981.165833] ? wait_for_completion+0x870/0x870 [ 981.170444] ? ext4_ioctl_group_add+0x560/0x560 [ 981.175137] do_vfs_ioctl+0x1cf/0x16a0 [ 981.179018] ? ioctl_preallocate+0x2e0/0x2e0 [ 981.183417] ? fget_raw+0x20/0x20 [ 981.186866] ? __sb_end_write+0xac/0xe0 [ 981.190834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 981.196373] ? fput+0x130/0x1a0 [ 981.199642] ? ksys_write+0x1a6/0x250 [ 981.203432] ? security_file_ioctl+0x94/0xc0 [ 981.207863] ksys_ioctl+0xa9/0xd0 [ 981.211338] __x64_sys_ioctl+0x73/0xb0 [ 981.215242] do_syscall_64+0x1b1/0x800 [ 981.219119] ? finish_task_switch+0x1ca/0x840 [ 981.223598] ? syscall_return_slowpath+0x5c0/0x5c0 [ 981.228514] ? syscall_return_slowpath+0x30f/0x5c0 [ 981.233449] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 981.238809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.243647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.248823] RIP: 0033:0x455a09 [ 981.252010] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.259727] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 981.266998] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 981.274271] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 981.281645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 981.288916] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000000d 1970/01/01 00:16:21 executing program 3: rt_sigtimedwait(&(0x7f0000000080)={0x3}, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3, 0xb000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffffff93, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:21 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40400a00, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d2e737b7374656d2e02007369785f61636c5f61636365737300"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) fallocate(r1, 0x1, 0x0, 0xb7c) sendto$inet6(r1, &(0x7f0000000180)="b5cbba0c70f937b891e01b1c6e3083d416182ebeb98e532fbd2e7388bfca0fe63527015793168332a0762258f4f95f703ac57db8ae50fbd8f64b26b381f0681efafe18fbd207aaf032fa76ed800e", 0x4e, 0x40, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x1d}, 0x3f}, 0x1c) accept4$bt_l2cap(r1, &(0x7f0000000140), &(0x7f0000000240)=0xe, 0x800) 1970/01/01 00:16:21 executing program 6 (fault-call:1 fault-nth:14): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000001c0)) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100)=0xfffffffffffffec2, 0x7fffd) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) r2 = getpid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) rt_tgsigqueueinfo(r2, r3, 0x3, &(0x7f00000000c0)={0x2c, 0x80, 0x9, 0x7}) pread64(r0, &(0x7f0000000140)=""/87, 0x57, 0x0) 1970/01/01 00:16:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xffffffffffffff7f]}}, 0x20) 1970/01/01 00:16:21 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:21 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)=0x0) timer_delete(r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 981.441675] binder: 24826:24829 got transaction to invalid handle [ 981.441990] binder: 24827:24830 unknown command 1077938688 [ 981.448238] binder: 24826:24829 transaction failed 29201/-22, size 536870912-0 line 2856 [ 981.456725] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 981.475661] binder: 24827:24830 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) [ 981.488356] FAULT_INJECTION: forcing a failure. [ 981.488356] name failslab, interval 1, probability 0, space 0, times 0 [ 981.499683] CPU: 0 PID: 24839 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 981.506966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.516307] Call Trace: [ 981.518893] dump_stack+0x1b9/0x294 [ 981.522516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 981.527706] should_fail.cold.4+0xa/0x1a [ 981.531755] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 981.536847] ? kmem_cache_alloc+0x12e/0x760 [ 981.541677] ? mempool_alloc_slab+0x44/0x60 [ 981.545987] ? submit_bh_wbc+0x155/0x7c0 [ 981.550036] ? blk_exit_rl+0x80/0x80 [ 981.553740] ? find_held_lock+0x36/0x1c0 [ 981.557787] ? graph_lock+0x170/0x170 [ 981.561576] ? lock_downgrade+0x8e0/0x8e0 [ 981.565728] ? __lock_is_held+0xb5/0x140 [ 981.569805] __should_failslab+0x124/0x180 [ 981.574039] should_failslab+0x9/0x14 [ 981.577853] kmem_cache_alloc+0x47/0x760 [ 981.581909] ? rcu_note_context_switch+0x710/0x710 [ 981.586824] ? blk_get_request+0x40/0x40 [ 981.590875] ? mempool_free+0x370/0x370 [ 981.594856] mempool_alloc_slab+0x44/0x60 [ 981.599024] mempool_alloc+0x18b/0x490 [ 981.602929] ? remove_element.isra.4+0x1c0/0x1c0 [ 981.607684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.613211] ? __lock_is_held+0xb5/0x140 [ 981.617258] bio_alloc_bioset+0x3a1/0x7f0 [ 981.621391] ? generic_make_request+0x1510/0x1510 [ 981.626216] ? bvec_alloc+0x2d0/0x2d0 [ 981.630000] ? check_same_owner+0x320/0x320 [ 981.634308] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 981.639326] ? guard_bio_eod+0x2b4/0x600 [ 981.643385] submit_bh_wbc+0x155/0x7c0 [ 981.647263] write_dirty_buffer+0xba/0x150 [ 981.651485] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 981.656230] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 981.661956] ? lock_downgrade+0x8e0/0x8e0 [ 981.666098] ? kasan_check_read+0x11/0x20 [ 981.670238] ? do_raw_spin_unlock+0x9e/0x2e0 [ 981.674636] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 981.679205] ? do_raw_spin_lock+0xc1/0x200 [ 981.683432] jbd2_journal_flush+0x156/0x540 [ 981.687765] ext4_ioctl_group_add+0x251/0x560 [ 981.692255] ? _copy_from_user+0xdf/0x150 [ 981.696393] ext4_ioctl+0x79d/0x4210 [ 981.700093] ? _parse_integer+0x13b/0x190 [ 981.704232] ? ext4_ioctl_group_add+0x560/0x560 [ 981.708892] ? _parse_integer+0x190/0x190 [ 981.713033] ? graph_lock+0x170/0x170 [ 981.716817] ? lock_release+0xa10/0xa10 [ 981.720775] ? check_same_owner+0x320/0x320 [ 981.725081] ? find_held_lock+0x36/0x1c0 [ 981.729127] ? graph_lock+0x170/0x170 [ 981.732912] ? find_held_lock+0x36/0x1c0 [ 981.736980] ? lock_downgrade+0x8e0/0x8e0 [ 981.741120] ? kasan_check_read+0x11/0x20 [ 981.745270] ? rcu_is_watching+0x85/0x140 [ 981.749408] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 981.754586] ? match_held_lock+0x841/0x8b0 [ 981.758808] ? expand_files.part.8+0x9a0/0x9a0 [ 981.763373] ? kasan_check_write+0x14/0x20 [ 981.767592] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 981.772514] ? wait_for_completion+0x870/0x870 [ 981.777082] ? ext4_ioctl_group_add+0x560/0x560 [ 981.781738] do_vfs_ioctl+0x1cf/0x16a0 [ 981.785615] ? ioctl_preallocate+0x2e0/0x2e0 [ 981.790203] ? fget_raw+0x20/0x20 [ 981.793650] ? __sb_end_write+0xac/0xe0 [ 981.797623] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 981.803151] ? fput+0x130/0x1a0 [ 981.806419] ? ksys_write+0x1a6/0x250 [ 981.810206] ? security_file_ioctl+0x94/0xc0 [ 981.814610] ksys_ioctl+0xa9/0xd0 [ 981.818050] __x64_sys_ioctl+0x73/0xb0 [ 981.821925] do_syscall_64+0x1b1/0x800 [ 981.825797] ? finish_task_switch+0x1ca/0x840 [ 981.830275] ? syscall_return_slowpath+0x5c0/0x5c0 [ 981.835187] ? syscall_return_slowpath+0x30f/0x5c0 [ 981.840122] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 981.845472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.850299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.855470] RIP: 0033:0x455a09 [ 981.858640] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.866335] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 981.873589] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 981.880842] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 981.888099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 981.895360] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000000e [ 981.918517] binder_alloc: binder_alloc_mmap_handler: 24827 20001000-20004000 already mapped failed -16 [ 981.928293] binder: 24826:24844 got transaction to invalid handle [ 981.934676] binder: 24826:24844 transaction failed 29201/-22, size 536870912-0 line 2856 [ 981.981318] binder: BINDER_SET_CONTEXT_MGR already set [ 982.008160] binder: 24827:24830 ioctl 40046207 0 returned -16 [ 982.019234] binder: 24827:24843 unknown command 1077938688 [ 982.025208] binder: 24827:24843 ioctl c0306201 20007000 returned -22 [ 982.026397] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.049186] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:22 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x4, @thr={&(0x7f0000000000)="07f8d1d4b536848a430e9e1885bf2821a2ef49be6202c54747abfa7d6b3731103044da5a146a16e93ffc93d133882941", &(0x7f0000000180)="152e712579c4371c308b28f11bffb41856124f9da1a27e3dd37ac851a06baa25957d5970cdfffdaf789178af2a82b6978376f27c1aa2b987721ff4f592a25e98b007f553cd22a0d947a69dc50d6931ae067d18f4a45126fcf63d21bd8667df1cdee13d7f6508e15b2f320d65bf45bd4003b7e0f0cd41c5b8fee1ac81b56987522af2471de8329cb9fab4f01204cc1c99f439709ae3d2ed95491a4db83dea828ab3d42fc7a8bb685082d06bd2c772f1d1c515b18f2d64f592b9ec1170c84f6feb095eca3297f218422de2fb3ad1ed2b488fc034f49157a464086d37e7161d8cee"}}, &(0x7f0000000080)) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1=0xe0000001}, {0x307, @link_local={0x1, 0x80, 0xc2}}, 0x10, {0x2, 0x4e20, @multicast1=0xe0000001}, 'tunl0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x8101, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 1970/01/01 00:16:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0xf00000000000000]}}, 0x20) 1970/01/01 00:16:22 executing program 6 (fault-call:1 fault-nth:15): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:22 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x1) 1970/01/01 00:16:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000140)) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'rose0\x00', 0x2}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 982.691735] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 982.772738] FAULT_INJECTION: forcing a failure. [ 982.772738] name failslab, interval 1, probability 0, space 0, times 0 [ 982.784151] CPU: 1 PID: 24879 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 982.791425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.800857] Call Trace: [ 982.803447] dump_stack+0x1b9/0x294 [ 982.807064] ? dump_stack_print_info.cold.2+0x52/0x52 [ 982.812244] should_fail.cold.4+0xa/0x1a [ 982.816298] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 982.821394] ? kmem_cache_alloc+0x12e/0x760 [ 982.825705] ? mempool_alloc_slab+0x44/0x60 [ 982.830030] ? submit_bh_wbc+0x155/0x7c0 [ 982.834104] ? blk_exit_rl+0x80/0x80 [ 982.837818] ? find_held_lock+0x36/0x1c0 [ 982.841872] ? graph_lock+0x170/0x170 [ 982.845660] ? lock_downgrade+0x8e0/0x8e0 [ 982.849796] ? __lock_is_held+0xb5/0x140 [ 982.853851] __should_failslab+0x124/0x180 [ 982.858088] should_failslab+0x9/0x14 [ 982.861879] kmem_cache_alloc+0x47/0x760 [ 982.865950] ? rcu_note_context_switch+0x710/0x710 [ 982.870871] ? blk_get_request+0x40/0x40 [ 982.874932] ? mempool_free+0x370/0x370 [ 982.878934] mempool_alloc_slab+0x44/0x60 [ 982.883085] mempool_alloc+0x18b/0x490 [ 982.886962] ? remove_element.isra.4+0x1c0/0x1c0 [ 982.891710] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.897240] ? __lock_is_held+0xb5/0x140 [ 982.901301] bio_alloc_bioset+0x3a1/0x7f0 [ 982.905434] ? generic_make_request+0x1510/0x1510 [ 982.910271] ? bvec_alloc+0x2d0/0x2d0 [ 982.914063] ? check_same_owner+0x320/0x320 [ 982.918377] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 982.923375] ? guard_bio_eod+0x2b4/0x600 [ 982.927420] submit_bh_wbc+0x155/0x7c0 [ 982.931319] write_dirty_buffer+0xba/0x150 [ 982.935556] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 982.940303] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 982.946007] ? lock_downgrade+0x8e0/0x8e0 [ 982.950146] ? kasan_check_read+0x11/0x20 [ 982.954303] ? do_raw_spin_unlock+0x9e/0x2e0 [ 982.958713] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 982.963290] ? do_raw_spin_lock+0xc1/0x200 [ 982.967528] jbd2_journal_flush+0x156/0x540 [ 982.971844] ext4_ioctl_group_add+0x251/0x560 [ 982.976343] ? _copy_from_user+0xdf/0x150 [ 982.980481] ext4_ioctl+0x79d/0x4210 [ 982.984182] ? _parse_integer+0x13b/0x190 [ 982.988322] ? ext4_ioctl_group_add+0x560/0x560 [ 982.992983] ? _parse_integer+0x190/0x190 [ 982.997122] ? graph_lock+0x170/0x170 [ 983.000915] ? lock_release+0xa10/0xa10 [ 983.004893] ? check_same_owner+0x320/0x320 [ 983.009236] ? find_held_lock+0x36/0x1c0 [ 983.013288] ? graph_lock+0x170/0x170 [ 983.017082] ? find_held_lock+0x36/0x1c0 [ 983.021152] ? lock_downgrade+0x8e0/0x8e0 [ 983.025300] ? kasan_check_read+0x11/0x20 [ 983.029448] ? rcu_is_watching+0x85/0x140 [ 983.033580] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 983.038762] ? match_held_lock+0x841/0x8b0 [ 983.042989] ? expand_files.part.8+0x9a0/0x9a0 [ 983.047562] ? kasan_check_write+0x14/0x20 [ 983.051790] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 983.056716] ? wait_for_completion+0x870/0x870 [ 983.061323] ? ext4_ioctl_group_add+0x560/0x560 [ 983.066015] do_vfs_ioctl+0x1cf/0x16a0 [ 983.069897] ? ioctl_preallocate+0x2e0/0x2e0 [ 983.074296] ? fget_raw+0x20/0x20 [ 983.077742] ? __sb_end_write+0xac/0xe0 [ 983.081715] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 983.087232] ? fput+0x130/0x1a0 [ 983.090495] ? ksys_write+0x1a6/0x250 [ 983.094286] ? security_file_ioctl+0x94/0xc0 [ 983.098687] ksys_ioctl+0xa9/0xd0 [ 983.102138] __x64_sys_ioctl+0x73/0xb0 [ 983.106028] do_syscall_64+0x1b1/0x800 [ 983.109926] ? finish_task_switch+0x1ca/0x840 [ 983.114433] ? syscall_return_slowpath+0x5c0/0x5c0 [ 983.119354] ? syscall_return_slowpath+0x30f/0x5c0 [ 983.124279] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 983.129646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 983.134504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.139692] RIP: 0033:0x455a09 [ 983.142863] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.150562] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 983.157826] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 983.165096] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 983.172355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 983.179613] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000000f [ 983.196950] binder: 24872:24875 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 983.197560] binder: 24874:24876 transaction failed 29201/-28, size 536870912-0 line 2971 [ 983.204010] binder: 24872:24875 unknown command 0 1970/01/01 00:16:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x97000000]}}, 0x20) 1970/01/01 00:16:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc\x00', 0x3ffffe, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000080), 0xfffffffffffffffc) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(r1, &(0x7f0000000140)=""/87, 0x387, 0x10) 1970/01/01 00:16:23 executing program 6 (fault-call:1 fault-nth:16): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101040, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x93) 1970/01/01 00:16:23 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 983.266705] binder: 24874:24902 transaction failed 29201/-28, size 536870912-0 line 2971 [ 983.284270] binder: 24872:24875 ioctl c0306201 20007000 returned -22 [ 983.336255] binder_alloc: binder_alloc_mmap_handler: 24872 20001000-20004000 already mapped failed -16 [ 983.344562] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 983.367985] FAULT_INJECTION: forcing a failure. [ 983.367985] name failslab, interval 1, probability 0, space 0, times 0 [ 983.379108] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.379382] CPU: 1 PID: 24919 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 983.385165] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.391965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.391970] Call Trace: [ 983.391995] dump_stack+0x1b9/0x294 [ 983.392010] ? dump_stack_print_info.cold.2+0x52/0x52 [ 983.392036] should_fail.cold.4+0xa/0x1a [ 983.400741] binder: BINDER_SET_CONTEXT_MGR already set [ 983.406876] ? fault_create_debugfs_attr+0x1f0/0x1f0 1970/01/01 00:16:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xffffff7f00000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xa8, 0x9, 0x0, 0x0, 0x18, 0xc, "b35efd4e5ec9e84e07b231abb1a67c89ad97375fabac773fb91ad2beb1e93c510d9844f5d36ec660ac31dd15b5c81e01961485128a2c73bf3a8234b92e4eebfa", "e6754c847ba589eeaa535470450a36e080fef4c3c716ea67948cb6763386aa50e02ffdd63ed296221693284359fdc0aa16cf944b2883afe05ed770d4aaca8a77", "e421f508ef2db22a976fbb12b106c20e8f0a4acfd6a536c5a5953aa43bb007b5", [0xffff, 0x800]}) fcntl$dupfd(r0, 0x406, r1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x84c00, 0x0) 1970/01/01 00:16:23 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40402500, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 983.406897] ? kmem_cache_alloc+0x12e/0x760 [ 983.406919] ? mempool_alloc_slab+0x44/0x60 [ 983.418704] binder: 24872:24918 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 983.422351] ? submit_bh_wbc+0x155/0x7c0 [ 983.422364] ? blk_exit_rl+0x80/0x80 [ 983.422378] ? find_held_lock+0x36/0x1c0 [ 983.422391] ? graph_lock+0x170/0x170 [ 983.427791] binder: 24872:24918 unknown command 0 [ 983.432836] ? lock_downgrade+0x8e0/0x8e0 [ 983.432851] ? __lock_is_held+0xb5/0x140 [ 983.432866] __should_failslab+0x124/0x180 [ 983.432880] should_failslab+0x9/0x14 [ 983.432897] kmem_cache_alloc+0x47/0x760 [ 983.437519] binder: 24872:24875 ioctl 40046207 0 returned -16 [ 983.441568] ? rcu_note_context_switch+0x710/0x710 [ 983.441581] ? blk_get_request+0x40/0x40 [ 983.441596] ? mempool_free+0x370/0x370 [ 983.441604] mempool_alloc_slab+0x44/0x60 [ 983.441613] mempool_alloc+0x18b/0x490 [ 983.441625] ? remove_element.isra.4+0x1c0/0x1c0 [ 983.441642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.441658] ? __lock_is_held+0xb5/0x140 [ 983.448794] binder: 24872:24918 ioctl c0306201 20007000 returned -22 [ 983.452676] bio_alloc_bioset+0x3a1/0x7f0 [ 983.452690] ? generic_make_request+0x1510/0x1510 [ 983.452698] ? bvec_alloc+0x2d0/0x2d0 [ 983.452712] ? check_same_owner+0x320/0x320 [ 983.452721] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 983.452732] ? guard_bio_eod+0x2b4/0x600 [ 983.452742] submit_bh_wbc+0x155/0x7c0 [ 983.452754] write_dirty_buffer+0xba/0x150 [ 983.452766] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 983.452780] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 983.452799] ? lock_downgrade+0x8e0/0x8e0 [ 983.585729] ? kasan_check_read+0x11/0x20 [ 983.589878] ? do_raw_spin_unlock+0x9e/0x2e0 [ 983.594286] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 983.598858] ? do_raw_spin_lock+0xc1/0x200 [ 983.603112] jbd2_journal_flush+0x156/0x540 [ 983.607430] ext4_ioctl_group_add+0x251/0x560 [ 983.611917] ? _copy_from_user+0xdf/0x150 [ 983.616066] ext4_ioctl+0x79d/0x4210 [ 983.619778] ? _parse_integer+0x13b/0x190 [ 983.623933] ? ext4_ioctl_group_add+0x560/0x560 [ 983.628593] ? _parse_integer+0x190/0x190 [ 983.632731] ? graph_lock+0x170/0x170 [ 983.636518] ? lock_release+0xa10/0xa10 [ 983.640494] ? check_same_owner+0x320/0x320 [ 983.644815] ? find_held_lock+0x36/0x1c0 [ 983.648886] ? graph_lock+0x170/0x170 [ 983.652761] ? find_held_lock+0x36/0x1c0 [ 983.656815] ? lock_downgrade+0x8e0/0x8e0 [ 983.660975] ? kasan_check_read+0x11/0x20 [ 983.665116] ? rcu_is_watching+0x85/0x140 [ 983.669256] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 983.674441] ? match_held_lock+0x841/0x8b0 [ 983.678667] ? expand_files.part.8+0x9a0/0x9a0 [ 983.683245] ? kasan_check_write+0x14/0x20 [ 983.687474] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 983.692410] ? wait_for_completion+0x870/0x870 [ 983.697003] ? ext4_ioctl_group_add+0x560/0x560 [ 983.701682] do_vfs_ioctl+0x1cf/0x16a0 [ 983.705579] ? ioctl_preallocate+0x2e0/0x2e0 [ 983.710010] ? fget_raw+0x20/0x20 [ 983.713484] ? __sb_end_write+0xac/0xe0 [ 983.717458] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 983.722987] ? fput+0x130/0x1a0 [ 983.726253] ? ksys_write+0x1a6/0x250 [ 983.730054] ? security_file_ioctl+0x94/0xc0 [ 983.734463] ksys_ioctl+0xa9/0xd0 [ 983.737906] __x64_sys_ioctl+0x73/0xb0 [ 983.741780] do_syscall_64+0x1b1/0x800 [ 983.745658] ? finish_task_switch+0x1ca/0x840 [ 983.750143] ? syscall_return_slowpath+0x5c0/0x5c0 [ 983.755060] ? syscall_return_slowpath+0x30f/0x5c0 [ 983.759986] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 983.765339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 983.770180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.775363] RIP: 0033:0x455a09 [ 983.778536] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 1970/01/01 00:16:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x1000000000000000]}}, 0x20) [ 983.786234] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 983.793489] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 983.800744] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 983.807999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 983.815275] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000010 1970/01/01 00:16:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4880, 0x183) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 983.883361] binder: 24926:24931 unknown command 1077945600 [ 983.899315] binder: 24935:24936 transaction failed 29201/-28, size 536870912-0 line 2971 1970/01/01 00:16:23 executing program 6 (fault-call:1 fault-nth:17): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000001840)=0xe8) r5 = getegid() r6 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001880)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001980)=0xe8) getresgid(&(0x7f00000019c0), &(0x7f0000001a00)=0x0, &(0x7f0000001a40)) sendmsg$netlink(r0, &(0x7f0000001b00)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc, &(0x7f0000001700)=[{&(0x7f0000000180)={0x1d4, 0x2b, 0x504, 0x70bd28, 0x25dfdbfc, "", [@nested={0x1c4, 0x96, [@generic="aeddb6ad185c1d9701253f38630ba4cd672748a06aacdce5c2ecf6d3024538a3e76e8d4f760890b730bd2d04113d4b0a3b2e4acb4a5ea9bf41059a7066a2d1db51d52e85745e7c6c5edfeb6732cec6a354ef7663fb24851ba9d18b2e4c8364485cc424d26f1e3f10eb026ad6cf6d2ba92246ed18e0341a7843b2edbfa656ac08489f700adb39864402de59c7877d7915dab9cd7d1a10e4932218639b8eef89c2a2be986b95f79c2958c55d1f9b01e3e1595273e598412bda93fad54d4bb5bba17be7d4f689266de787de65322f6285151761b17a9a1996c6c6a6000d52b55c9be8b0677c8617c1603ac717d8561c2b1feb7524f3", @typed={0x8, 0x26, @u32=0x9f}, @generic="970005a4bcc24e88200f67ceb8b9de3ed14cb00cd8a43008d90fc4d2f3ef336e31caa655ba7e6a76c2a6d5307b03caed9471f7f137281313293b07e1a9c899bd73a7900d4ca111537758da83c6bdd30a29e39d99063af080afdfa6fc0fa8f0f7f3e10a7ebd0c61382c665d", @generic="81a86b84aa3cec0b899b7a951cb93b53c6a967fdbf5876ae51a900788da9a7ea5b387b08c9f5442e1b0a2f8b0d3f78cdfa40e16960ebfabda582b105fbbb5916acc7307581490dfff9d854b6031dfe5d82c664bfb4efdd"]}]}, 0x1d4}, {&(0x7f0000000380)={0x1368, 0x2a, 0x800, 0x70bd2a, 0x25dfdbff, "", [@nested={0x160, 0x6c, [@typed={0x8, 0x6c, @ipv4}, @typed={0x14, 0x87, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x8, 0x6a, @pid=r2}, @typed={0xc, 0x6d, @u64=0x100}, @generic="aa9694e47d8cca29e8e9de0bc35d4e0e125c9c7a3ca91a2494d1f44bed9e51d7cbb8200f8b19507e2dc5e92fef5ba56d8e0601540e879b23da6b0b4e23d6fc12debee7d7284667bb84d6bae0d8de81024504209bf3acd140e839d929b2af4e295694d7a8dfe7049afd85eb6c972fbe187f2cfad6a7131e0667c7975bf3312812f5be5f1f01713b9c5216eab3f58f377e22eddf762acd2b7755bcb233df58187a2ba3fb9aa31cfd3278fb0a17ac749634e981b085aaf57e212fd4eb5ad15ab0b282ea73038929b6679add4264625c67163d5a7523ccaaffb8dd62de55d13f0c7ee0", @typed={0x8, 0x68, @fd=r1}, @generic="c8076ddf4d4df3f5a8d707a4c75b4dcf04e5c16884f8c64875193efec0f828bf3e457e454bfa13e2eb4924a5239bb36a3a3248129e2f77820a43b7962458c290"]}, @nested={0x11f8, 0xc, [@typed={0x8, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="1ab8cdabaa1c369a29b6a16035935ceb7907abf5cb6fb09c2e7cabd01ae9d7623d7fcfdf8a88b09d57702d7b", @typed={0x4, 0x72}, @generic="f4fa6b1992a59e051c11192b9446f8f432b29c98b64e533dd06225ad1fc1415d70cb63a116a5381754df6fc4dbdff8c96f2222e7dd", @generic="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", @typed={0x8, 0x88, @u32=0x7fffffff}, @typed={0x14, 0x21, @ipv6=@loopback={0x0, 0x1}}, @generic="1a3d9e62ea8c9eb3f88e8c160d3b4b92b44000253797b03a9603312002f77ba55f0a685c1f07d385b4ceb1dc9028033ff310abcc6cd2e71fe5e9c048d31df0fd028d8140c15b7ef8b56b9af86dc75bd02f031034cf141d6d42d53ece808d9ca067e06844d63a0b04d5e0382c9f3c2b54babcfc001ea609d1e09fab093b38a1412670985eeb310c11123ddb7a6099a2c06f688278590955c1b79c7a6e9b38", @generic="728cd4326f004f2cc680366dfc340d18359e8e0baff6584c00f8f669b04999c75a053899870ec0704127358ee0c96aae0a97e9b6481ead5c78bc597f111824ae6e2cb9fb5f2169402059a875c57b90771183ca5b4af02579a09a92b3fe37b05124a34e0b93653ada00549715e26ff03b0cf6aa70ea4300cc70fb84cf722c57094215bda8a6c7d61731ec19160bffcea0dfdd8bb5c8ff2f8d7ba9c8a4e45fa376059aa002556598a5688a5d2daae5dde0ba105138af1d7d7422da17e43ec7bafa09315b3256a7dc3ffa2088"]}]}, 0x1368}], 0x2, &(0x7f0000001a80)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x58, 0x4000080}, 0x8011) [ 983.940211] binder: 24926:24931 ioctl c0306201 20007000 returned -22 [ 983.955247] binder: 24935:24947 transaction failed 29201/-28, size 536870912-0 line 2971 [ 983.972792] binder_alloc: binder_alloc_mmap_handler: 24926 20001000-20004000 already mapped failed -16 [ 983.992425] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 984.020760] binder: BINDER_SET_CONTEXT_MGR already set [ 984.034566] FAULT_INJECTION: forcing a failure. [ 984.034566] name failslab, interval 1, probability 0, space 0, times 0 [ 984.046048] CPU: 0 PID: 24956 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 984.053326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.053428] binder: 24926:24931 ioctl 40046207 0 returned -16 [ 984.062674] Call Trace: [ 984.062704] dump_stack+0x1b9/0x294 [ 984.062718] ? dump_stack_print_info.cold.2+0x52/0x52 [ 984.062735] should_fail.cold.4+0xa/0x1a [ 984.062748] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 984.062759] ? kmem_cache_alloc+0x12e/0x760 [ 984.062776] ? mempool_alloc_slab+0x44/0x60 [ 984.071121] binder: 24926:24949 unknown command 1077945600 [ 984.071266] ? submit_bh_wbc+0x155/0x7c0 [ 984.075437] binder: 24926:24949 ioctl c0306201 20007000 returned -22 [ 984.080066] ? blk_exit_rl+0x80/0x80 [ 984.080085] ? find_held_lock+0x36/0x1c0 [ 984.080096] ? graph_lock+0x170/0x170 [ 984.080112] ? lock_downgrade+0x8e0/0x8e0 [ 984.097435] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.097894] ? __lock_is_held+0xb5/0x140 [ 984.104310] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.107587] __should_failslab+0x124/0x180 [ 984.107602] should_failslab+0x9/0x14 [ 984.107613] kmem_cache_alloc+0x47/0x760 [ 984.107629] ? rcu_note_context_switch+0x710/0x710 [ 984.161968] ? blk_get_request+0x40/0x40 [ 984.166023] ? mempool_free+0x370/0x370 [ 984.170073] mempool_alloc_slab+0x44/0x60 [ 984.174205] mempool_alloc+0x18b/0x490 [ 984.178078] ? remove_element.isra.4+0x1c0/0x1c0 [ 984.182828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.188437] ? __lock_is_held+0xb5/0x140 [ 984.192483] bio_alloc_bioset+0x3a1/0x7f0 [ 984.196622] ? generic_make_request+0x1510/0x1510 [ 984.201454] ? bvec_alloc+0x2d0/0x2d0 [ 984.205251] ? check_same_owner+0x320/0x320 [ 984.209586] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 984.214616] ? guard_bio_eod+0x2b4/0x600 [ 984.218678] submit_bh_wbc+0x155/0x7c0 [ 984.222567] write_dirty_buffer+0xba/0x150 [ 984.226799] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 984.231559] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 984.237268] ? lock_downgrade+0x8e0/0x8e0 [ 984.241407] ? kasan_check_read+0x11/0x20 [ 984.245543] ? do_raw_spin_unlock+0x9e/0x2e0 [ 984.249933] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 984.254498] ? do_raw_spin_lock+0xc1/0x200 [ 984.258717] jbd2_journal_flush+0x156/0x540 [ 984.263028] ext4_ioctl_group_add+0x251/0x560 [ 984.267515] ? _copy_from_user+0xdf/0x150 [ 984.271647] ext4_ioctl+0x79d/0x4210 [ 984.275344] ? _parse_integer+0x13b/0x190 [ 984.279479] ? ext4_ioctl_group_add+0x560/0x560 [ 984.284132] ? _parse_integer+0x190/0x190 [ 984.288268] ? graph_lock+0x170/0x170 [ 984.292052] ? lock_release+0xa10/0xa10 [ 984.296023] ? check_same_owner+0x320/0x320 [ 984.300330] ? find_held_lock+0x36/0x1c0 [ 984.304374] ? graph_lock+0x170/0x170 [ 984.308159] ? find_held_lock+0x36/0x1c0 [ 984.312209] ? lock_downgrade+0x8e0/0x8e0 [ 984.316345] ? kasan_check_read+0x11/0x20 [ 984.320490] ? rcu_is_watching+0x85/0x140 [ 984.324622] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 984.329806] ? match_held_lock+0x841/0x8b0 [ 984.334034] ? expand_files.part.8+0x9a0/0x9a0 [ 984.338612] ? kasan_check_write+0x14/0x20 [ 984.342833] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 984.347748] ? wait_for_completion+0x870/0x870 [ 984.352324] ? ext4_ioctl_group_add+0x560/0x560 [ 984.356987] do_vfs_ioctl+0x1cf/0x16a0 [ 984.360868] ? ioctl_preallocate+0x2e0/0x2e0 [ 984.365283] ? fget_raw+0x20/0x20 [ 984.368758] ? __sb_end_write+0xac/0xe0 [ 984.372751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 984.378275] ? fput+0x130/0x1a0 [ 984.381534] ? ksys_write+0x1a6/0x250 [ 984.385328] ? security_file_ioctl+0x94/0xc0 [ 984.389728] ksys_ioctl+0xa9/0xd0 [ 984.393164] __x64_sys_ioctl+0x73/0xb0 [ 984.397037] do_syscall_64+0x1b1/0x800 [ 984.400909] ? finish_task_switch+0x1ca/0x840 [ 984.405390] ? syscall_return_slowpath+0x5c0/0x5c0 [ 984.410312] ? syscall_return_slowpath+0x30f/0x5c0 [ 984.415248] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 984.420608] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 984.425437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.430614] RIP: 0033:0x455a09 [ 984.433786] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.441479] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 984.448730] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 984.455994] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 984.463247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 984.470498] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000011 1970/01/01 00:16:24 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x600000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406305, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d2e73797374656d2e706f7369785f61636c5f616363657373001cf0fb1a0973491100f46422c055904c41880eba2444fd435b476e8310e78c8251fb2bcef893759a626f1b441874a4dcbfc9131ba00d1eb7659d04b0e2677a5c311959fad7c121df1939b7994c6c2b3fd15fa2ba325042be59f11fed9028d9"], &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:24 executing program 6 (fault-call:1 fault-nth:18): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:24 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1970/01/01 00:16:24 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x9700000000000000]}}, 0x20) 1970/01/01 00:16:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x208000, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x9, 0x2, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0xffffffff}, &(0x7f0000000180)=0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/rtc\x00') 1970/01/01 00:16:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8081, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xd046, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) msgget(0x1, 0x40) [ 984.542736] binder: 24979:24981 unknown command 1077961477 [ 984.554825] binder: 24978:24980 transaction failed 29201/-28, size 536870912-0 line 2971 1970/01/01 00:16:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x7, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x50, &(0x7f0000000180)=[@in={0x2, 0x4e23, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r1, 0x8}, &(0x7f00000002c0)=0x8) [ 984.611153] binder: 24979:24981 ioctl c0306201 20007000 returned -22 [ 984.613088] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 984.647234] FAULT_INJECTION: forcing a failure. [ 984.647234] name failslab, interval 1, probability 0, space 0, times 0 [ 984.658515] CPU: 1 PID: 24995 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 984.665776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.675459] Call Trace: [ 984.678045] dump_stack+0x1b9/0x294 [ 984.681661] ? dump_stack_print_info.cold.2+0x52/0x52 [ 984.687449] should_fail.cold.4+0xa/0x1a [ 984.691523] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 984.696631] ? kmem_cache_alloc+0x12e/0x760 [ 984.700937] ? mempool_alloc_slab+0x44/0x60 [ 984.705241] ? submit_bh_wbc+0x155/0x7c0 [ 984.709298] ? blk_exit_rl+0x80/0x80 [ 984.713008] ? find_held_lock+0x36/0x1c0 [ 984.717055] ? graph_lock+0x170/0x170 [ 984.720842] ? lock_downgrade+0x8e0/0x8e0 [ 984.724986] ? __lock_is_held+0xb5/0x140 [ 984.729052] __should_failslab+0x124/0x180 [ 984.733283] should_failslab+0x9/0x14 [ 984.737083] kmem_cache_alloc+0x47/0x760 [ 984.741132] ? rcu_note_context_switch+0x710/0x710 [ 984.746051] ? blk_get_request+0x40/0x40 [ 984.750099] ? mempool_free+0x370/0x370 [ 984.754057] mempool_alloc_slab+0x44/0x60 [ 984.758290] mempool_alloc+0x18b/0x490 [ 984.762166] ? remove_element.isra.4+0x1c0/0x1c0 [ 984.766918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.772442] ? __lock_is_held+0xb5/0x140 [ 984.776490] bio_alloc_bioset+0x3a1/0x7f0 [ 984.780620] ? generic_make_request+0x1510/0x1510 [ 984.785443] ? bvec_alloc+0x2d0/0x2d0 [ 984.789252] ? check_same_owner+0x320/0x320 [ 984.793571] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 984.798574] ? guard_bio_eod+0x2b4/0x600 [ 984.802618] submit_bh_wbc+0x155/0x7c0 [ 984.806510] write_dirty_buffer+0xba/0x150 [ 984.810731] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 984.815482] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 984.821197] ? lock_downgrade+0x8e0/0x8e0 [ 984.825335] ? kasan_check_read+0x11/0x20 [ 984.829469] ? do_raw_spin_unlock+0x9e/0x2e0 [ 984.833868] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 984.838439] ? do_raw_spin_lock+0xc1/0x200 [ 984.842663] jbd2_journal_flush+0x156/0x540 [ 984.846976] ext4_ioctl_group_add+0x251/0x560 [ 984.851459] ? _copy_from_user+0xdf/0x150 [ 984.855593] ext4_ioctl+0x79d/0x4210 [ 984.859292] ? _parse_integer+0x13b/0x190 [ 984.863426] ? ext4_ioctl_group_add+0x560/0x560 [ 984.868078] ? _parse_integer+0x190/0x190 [ 984.872214] ? graph_lock+0x170/0x170 [ 984.875999] ? lock_release+0xa10/0xa10 [ 984.879958] ? check_same_owner+0x320/0x320 [ 984.884262] ? find_held_lock+0x36/0x1c0 [ 984.888305] ? graph_lock+0x170/0x170 [ 984.892090] ? find_held_lock+0x36/0x1c0 [ 984.896142] ? lock_downgrade+0x8e0/0x8e0 [ 984.900288] ? kasan_check_read+0x11/0x20 [ 984.904421] ? rcu_is_watching+0x85/0x140 [ 984.908558] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 984.913738] ? match_held_lock+0x841/0x8b0 [ 984.917958] ? expand_files.part.8+0x9a0/0x9a0 [ 984.922527] ? kasan_check_write+0x14/0x20 [ 984.926747] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 984.931664] ? wait_for_completion+0x870/0x870 [ 984.936234] ? ext4_ioctl_group_add+0x560/0x560 [ 984.940892] do_vfs_ioctl+0x1cf/0x16a0 [ 984.944768] ? ioctl_preallocate+0x2e0/0x2e0 [ 984.949164] ? fget_raw+0x20/0x20 [ 984.952610] ? __sb_end_write+0xac/0xe0 [ 984.956581] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 984.962460] ? fput+0x130/0x1a0 [ 984.965727] ? ksys_write+0x1a6/0x250 [ 984.969517] ? security_file_ioctl+0x94/0xc0 [ 984.973918] ksys_ioctl+0xa9/0xd0 [ 984.977382] __x64_sys_ioctl+0x73/0xb0 [ 984.981260] do_syscall_64+0x1b1/0x800 [ 984.985144] ? finish_task_switch+0x1ca/0x840 [ 984.989627] ? syscall_return_slowpath+0x5c0/0x5c0 [ 984.994542] ? syscall_return_slowpath+0x30f/0x5c0 [ 984.999465] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 985.004819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.009664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.014856] RIP: 0033:0x455a09 [ 985.018028] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.025717] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 985.032969] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 985.040229] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 985.047487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 985.054740] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000012 [ 985.079585] binder_alloc: binder_alloc_mmap_handler: 24979 20001000-20004000 already mapped failed -16 [ 985.091363] binder_alloc: 24979: binder_alloc_buf, no vma [ 985.097017] binder: 24978:25003 transaction failed 29189/-3, size 536870912-0 line 2971 [ 985.108567] binder: BINDER_SET_CONTEXT_MGR already set [ 985.110197] binder: 24979:25001 unknown command 1077961477 1970/01/01 00:16:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x5f00000000000000]}}, 0x20) 1970/01/01 00:16:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffff8, 0x20000) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:25 executing program 6 (fault-call:1 fault-nth:19): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 985.140113] binder: 24979:24981 ioctl 40046207 0 returned -16 [ 985.149453] binder: 24979:25001 ioctl c0306201 20007000 returned -22 [ 985.181682] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 985.200133] binder: undelivered TRANSACTION_ERROR: 29189 [ 985.206008] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.227434] FAULT_INJECTION: forcing a failure. [ 985.227434] name failslab, interval 1, probability 0, space 0, times 0 [ 985.238755] CPU: 1 PID: 25012 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 985.246033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.255382] Call Trace: [ 985.257965] dump_stack+0x1b9/0x294 [ 985.261581] ? dump_stack_print_info.cold.2+0x52/0x52 [ 985.266764] should_fail.cold.4+0xa/0x1a [ 985.270816] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 985.275924] ? kmem_cache_alloc+0x12e/0x760 [ 985.280250] ? mempool_alloc_slab+0x44/0x60 [ 985.284563] ? submit_bh_wbc+0x155/0x7c0 [ 985.288621] ? blk_exit_rl+0x80/0x80 [ 985.292339] ? find_held_lock+0x36/0x1c0 [ 985.296477] ? graph_lock+0x170/0x170 [ 985.300394] ? lock_downgrade+0x8e0/0x8e0 [ 985.304570] ? __lock_is_held+0xb5/0x140 [ 985.308674] __should_failslab+0x124/0x180 [ 985.312933] should_failslab+0x9/0x14 [ 985.316727] kmem_cache_alloc+0x47/0x760 [ 985.320775] ? rcu_note_context_switch+0x710/0x710 [ 985.325704] ? blk_get_request+0x40/0x40 [ 985.329933] ? mempool_free+0x370/0x370 [ 985.333894] mempool_alloc_slab+0x44/0x60 [ 985.338031] mempool_alloc+0x18b/0x490 [ 985.341914] ? remove_element.isra.4+0x1c0/0x1c0 [ 985.346684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.352224] ? __lock_is_held+0xb5/0x140 [ 985.356370] bio_alloc_bioset+0x3a1/0x7f0 [ 985.360511] ? generic_make_request+0x1510/0x1510 [ 985.365341] ? bvec_alloc+0x2d0/0x2d0 [ 985.369141] ? check_same_owner+0x320/0x320 [ 985.373452] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 985.378472] ? guard_bio_eod+0x2b4/0x600 [ 985.382541] submit_bh_wbc+0x155/0x7c0 [ 985.386442] write_dirty_buffer+0xba/0x150 [ 985.390670] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 985.395418] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 985.401129] ? lock_downgrade+0x8e0/0x8e0 [ 985.405283] ? kasan_check_read+0x11/0x20 [ 985.409423] ? do_raw_spin_unlock+0x9e/0x2e0 [ 985.413842] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 985.418426] ? do_raw_spin_lock+0xc1/0x200 [ 985.422673] jbd2_journal_flush+0x156/0x540 [ 985.426995] ext4_ioctl_group_add+0x251/0x560 [ 985.431482] ? _copy_from_user+0xdf/0x150 [ 985.435621] ext4_ioctl+0x79d/0x4210 [ 985.439328] ? _parse_integer+0x13b/0x190 [ 985.443470] ? ext4_ioctl_group_add+0x560/0x560 [ 985.448132] ? _parse_integer+0x190/0x190 [ 985.452275] ? graph_lock+0x170/0x170 [ 985.456065] ? lock_release+0xa10/0xa10 [ 985.460034] ? check_same_owner+0x320/0x320 [ 985.464341] ? find_held_lock+0x36/0x1c0 [ 985.468392] ? graph_lock+0x170/0x170 [ 985.472177] ? find_held_lock+0x36/0x1c0 [ 985.476228] ? lock_downgrade+0x8e0/0x8e0 [ 985.480372] ? kasan_check_read+0x11/0x20 [ 985.484513] ? rcu_is_watching+0x85/0x140 [ 985.488653] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 985.493856] ? match_held_lock+0x841/0x8b0 [ 985.498078] ? expand_files.part.8+0x9a0/0x9a0 [ 985.502656] ? kasan_check_write+0x14/0x20 [ 985.506891] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 985.511820] ? wait_for_completion+0x870/0x870 [ 985.516396] ? ext4_ioctl_group_add+0x560/0x560 [ 985.521052] do_vfs_ioctl+0x1cf/0x16a0 [ 985.524930] ? ioctl_preallocate+0x2e0/0x2e0 [ 985.529326] ? fget_raw+0x20/0x20 [ 985.532783] ? __sb_end_write+0xac/0xe0 [ 985.536776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 985.542301] ? fput+0x130/0x1a0 [ 985.545569] ? ksys_write+0x1a6/0x250 [ 985.549357] ? security_file_ioctl+0x94/0xc0 [ 985.553762] ksys_ioctl+0xa9/0xd0 [ 985.557205] __x64_sys_ioctl+0x73/0xb0 [ 985.561080] do_syscall_64+0x1b1/0x800 [ 985.564973] ? finish_task_switch+0x1ca/0x840 [ 985.569454] ? syscall_return_slowpath+0x5c0/0x5c0 [ 985.574370] ? syscall_return_slowpath+0x30f/0x5c0 [ 985.579290] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 985.584649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.589482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.594660] RIP: 0033:0x455a09 [ 985.597831] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.605524] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 985.612781] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 985.620034] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 985.627298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 985.634551] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000013 1970/01/01 00:16:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x97000000]}}, 0x20) 1970/01/01 00:16:25 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406306, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:25 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6c00, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100)=0xff36, 0x80000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) socketpair(0x0, 0x803, 0x739, &(0x7f0000000140)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001580)={'bridge_slave_1\x00', &(0x7f0000001540)=@ethtool_cmd={0x24, 0x6, 0x101, 0x3, 0x5, 0x4, 0x1, 0x1, 0x3, 0x6, 0xfffffffffffff800, 0xffffffff, 0x4, 0x800, 0x400, 0x0, [0x8, 0x6]}}) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) r2 = socket(0x200000000000011, 0x3, 0x4d87) r3 = accept4$inet(r2, &(0x7f00000002c0)={0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'gre0\x00'}) write$tun(r2, &(0x7f0000000040)={@void, @void, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x0, 0x0, @loopback=0x7f000001, @multicast2=0xe0000002}, @igmp={0x0, 0x0, 0x0, @loopback=0x7f000001}}}, 0x1c) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x4, 0x5, 0x0, 0x6, 0x0, 0x0, 0x20001, 0x9, 0x10001, 0x10001, 0x9719, 0x7, 0x3, 0x3, 0x1, 0x1, 0x4, 0x1, 0xbdd, 0x9, 0x78ac, 0x3, 0x8, 0x7, 0x5, 0x3, 0x8, 0xaf98, 0x2, 0x5, 0xfffffffffffffffc, 0x5, 0x0, 0xfffffffeffffffff, 0x5, 0x1000, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x208a0, 0x6, 0x1, 0x4, 0x0, 0x8001, 0x1}, r1, 0x6, r1, 0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x31, 0x1, 0x9, 0x200, 0x9, 0xcb0, 0x4, 0xff, 0xc000000000, 0xdf, 0x3, 0x5d}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x1000, "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"}, &(0x7f0000000380)=0x1008) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r4, 0x8}, &(0x7f0000000440)=0x8) fallocate(r1, 0x1, 0x0, 0xb7c) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000280)=0x9) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000001500)={0x7, 0xe23}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000340)={0x3, 0x1, 0x800, 0x5, 0xd0}, 0xc) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x7, {0xe2f, 0x6, 0x7, 0x5, 0x5, 0x1}, 0x7fff, 0x413}, 0xe) 1970/01/01 00:16:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x20000]}}, 0x20) 1970/01/01 00:16:25 executing program 6 (fault-call:1 fault-nth:20): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 985.739950] binder: 25044:25045 got transaction to invalid handle [ 985.742186] binder: 25038:25039 unknown command 1077961478 [ 985.746316] binder: 25044:25045 transaction failed 29201/-22, size 536870912-0 line 2856 [ 985.761791] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 985.770456] binder: 25038:25039 ioctl c0306201 20007000 returned -22 [ 985.795596] FAULT_INJECTION: forcing a failure. [ 985.795596] name failslab, interval 1, probability 0, space 0, times 0 [ 985.798391] binder_alloc: binder_alloc_mmap_handler: 25038 20001000-20004000 already mapped failed -16 [ 985.807038] CPU: 1 PID: 25051 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 985.817855] binder: BINDER_SET_CONTEXT_MGR already set [ 985.823779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.823784] Call Trace: [ 985.823810] dump_stack+0x1b9/0x294 1970/01/01 00:16:25 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406360, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 985.823825] ? dump_stack_print_info.cold.2+0x52/0x52 [ 985.823844] should_fail.cold.4+0xa/0x1a [ 985.823875] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 985.829329] binder: 25038:25055 unknown command 1077961478 [ 985.838528] ? kmem_cache_alloc+0x12e/0x760 [ 985.838541] ? mempool_alloc_slab+0x44/0x60 [ 985.838552] ? submit_bh_wbc+0x155/0x7c0 [ 985.838562] ? blk_exit_rl+0x80/0x80 [ 985.838576] ? find_held_lock+0x36/0x1c0 [ 985.838585] ? graph_lock+0x170/0x170 [ 985.838603] ? lock_downgrade+0x8e0/0x8e0 [ 985.841495] binder: 25038:25039 ioctl 40046207 0 returned -16 [ 985.844820] ? __lock_is_held+0xb5/0x140 [ 985.844835] __should_failslab+0x124/0x180 [ 985.844849] should_failslab+0x9/0x14 [ 985.844857] kmem_cache_alloc+0x47/0x760 [ 985.844873] ? rcu_note_context_switch+0x710/0x710 [ 985.850234] binder: 25038:25055 ioctl c0306201 20007000 returned -22 [ 985.854318] ? blk_get_request+0x40/0x40 [ 985.854331] ? mempool_free+0x370/0x370 [ 985.854340] mempool_alloc_slab+0x44/0x60 [ 985.854350] mempool_alloc+0x18b/0x490 [ 985.854363] ? remove_element.isra.4+0x1c0/0x1c0 [ 985.854384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.953153] ? __lock_is_held+0xb5/0x140 [ 985.957202] bio_alloc_bioset+0x3a1/0x7f0 [ 985.961345] ? generic_make_request+0x1510/0x1510 [ 985.966181] ? bvec_alloc+0x2d0/0x2d0 [ 985.969966] ? check_same_owner+0x320/0x320 [ 985.974274] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 985.979276] ? guard_bio_eod+0x2b4/0x600 [ 985.983326] submit_bh_wbc+0x155/0x7c0 [ 985.987214] write_dirty_buffer+0xba/0x150 [ 985.991453] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 985.996205] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 986.001920] ? lock_downgrade+0x8e0/0x8e0 [ 986.006064] ? kasan_check_read+0x11/0x20 [ 986.010200] ? do_raw_spin_unlock+0x9e/0x2e0 [ 986.014598] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 986.019195] ? do_raw_spin_lock+0xc1/0x200 [ 986.023438] jbd2_journal_flush+0x156/0x540 [ 986.027795] ext4_ioctl_group_add+0x251/0x560 [ 986.032319] ? _copy_from_user+0xdf/0x150 [ 986.036463] ext4_ioctl+0x79d/0x4210 [ 986.040183] ? _parse_integer+0x13b/0x190 [ 986.044329] ? ext4_ioctl_group_add+0x560/0x560 [ 986.048980] ? _parse_integer+0x190/0x190 [ 986.053113] ? graph_lock+0x170/0x170 [ 986.056896] ? lock_release+0xa10/0xa10 [ 986.060858] ? check_same_owner+0x320/0x320 [ 986.065166] ? find_held_lock+0x36/0x1c0 [ 986.069225] ? graph_lock+0x170/0x170 [ 986.073020] ? find_held_lock+0x36/0x1c0 [ 986.077101] ? lock_downgrade+0x8e0/0x8e0 [ 986.081286] ? kasan_check_read+0x11/0x20 [ 986.085458] ? rcu_is_watching+0x85/0x140 [ 986.089626] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 986.094812] ? match_held_lock+0x841/0x8b0 [ 986.099032] ? expand_files.part.8+0x9a0/0x9a0 [ 986.103616] ? kasan_check_write+0x14/0x20 [ 986.107844] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 986.112780] ? wait_for_completion+0x870/0x870 [ 986.117349] ? ext4_ioctl_group_add+0x560/0x560 [ 986.122014] do_vfs_ioctl+0x1cf/0x16a0 [ 986.125892] ? ioctl_preallocate+0x2e0/0x2e0 [ 986.130287] ? fget_raw+0x20/0x20 [ 986.133740] ? __sb_end_write+0xac/0xe0 [ 986.137705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 986.143230] ? fput+0x130/0x1a0 [ 986.146503] ? ksys_write+0x1a6/0x250 [ 986.150299] ? security_file_ioctl+0x94/0xc0 [ 986.154705] ksys_ioctl+0xa9/0xd0 [ 986.158145] __x64_sys_ioctl+0x73/0xb0 [ 986.162018] do_syscall_64+0x1b1/0x800 [ 986.165890] ? finish_task_switch+0x1ca/0x840 [ 986.170373] ? syscall_return_slowpath+0x5c0/0x5c0 [ 986.175307] ? syscall_return_slowpath+0x30f/0x5c0 [ 986.180225] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 986.185574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 986.190410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.195608] RIP: 0033:0x455a09 [ 986.198781] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.206473] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 986.213727] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 986.220989] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 986.228244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 986.235498] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000014 1970/01/01 00:16:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x97000000]}}, 0x20) [ 986.263673] binder: 25044:25056 got transaction to invalid handle [ 986.270135] binder: 25044:25056 transaction failed 29201/-22, size 536870912-0 line 2856 [ 986.298478] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.301771] binder: 25061:25062 unknown command 1077961568 1970/01/01 00:16:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:26 executing program 6 (fault-call:1 fault-nth:21): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 986.304502] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5090, 0xa8d6, 0xffffffffffffffff, 0x9, 0x8, 0x8, 0x9, {0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x4c77, 0xffffffffffffffd7, 0x1ff, 0x1, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0xffff}}, [0x1, 0x7f, 0x2d8, 0x0, 0x6, 0xbc, 0x7fffffff, 0x3, 0x1b5, 0x46, 0x4, 0x5, 0xe8, 0x6]}, &(0x7f0000000380)=0x100) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0xfffffffffffffffc, 0x0) accept4$ax25(r2, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 986.352739] binder: 25070:25071 got transaction to invalid handle [ 986.359099] binder: 25070:25071 transaction failed 29201/-22, size 536870912-0 line 2856 [ 986.378772] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 986.383646] binder: 25061:25062 ioctl c0306201 20007000 returned -22 [ 986.402778] FAULT_INJECTION: forcing a failure. [ 986.402778] name failslab, interval 1, probability 0, space 0, times 0 [ 986.414105] CPU: 0 PID: 25075 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 986.421366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.430795] Call Trace: [ 986.433385] dump_stack+0x1b9/0x294 [ 986.437020] ? dump_stack_print_info.cold.2+0x52/0x52 [ 986.442208] should_fail.cold.4+0xa/0x1a [ 986.446273] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 986.451365] ? kmem_cache_alloc+0x12e/0x760 [ 986.455702] ? mempool_alloc_slab+0x44/0x60 [ 986.460029] ? submit_bh_wbc+0x155/0x7c0 [ 986.464081] ? blk_exit_rl+0x80/0x80 [ 986.467797] ? find_held_lock+0x36/0x1c0 [ 986.471847] ? graph_lock+0x170/0x170 [ 986.475649] ? lock_downgrade+0x8e0/0x8e0 [ 986.479784] ? __lock_is_held+0xb5/0x140 [ 986.483854] __should_failslab+0x124/0x180 [ 986.488097] should_failslab+0x9/0x14 [ 986.491901] kmem_cache_alloc+0x47/0x760 [ 986.495950] ? rcu_note_context_switch+0x710/0x710 [ 986.500869] ? blk_get_request+0x40/0x40 [ 986.504926] ? mempool_free+0x370/0x370 [ 986.508990] mempool_alloc_slab+0x44/0x60 [ 986.513145] mempool_alloc+0x18b/0x490 [ 986.517036] ? remove_element.isra.4+0x1c0/0x1c0 [ 986.521804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.527341] ? __lock_is_held+0xb5/0x140 [ 986.531396] bio_alloc_bioset+0x3a1/0x7f0 [ 986.535535] ? generic_make_request+0x1510/0x1510 [ 986.540372] ? bvec_alloc+0x2d0/0x2d0 [ 986.544168] ? check_same_owner+0x320/0x320 [ 986.548486] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 986.553514] ? guard_bio_eod+0x2b4/0x600 [ 986.557565] submit_bh_wbc+0x155/0x7c0 [ 986.561447] write_dirty_buffer+0xba/0x150 [ 986.565668] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 986.570436] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 986.576145] ? lock_downgrade+0x8e0/0x8e0 [ 986.580306] ? kasan_check_read+0x11/0x20 [ 986.584449] ? do_raw_spin_unlock+0x9e/0x2e0 [ 986.588852] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 986.593420] ? do_raw_spin_lock+0xc1/0x200 [ 986.597646] jbd2_journal_flush+0x156/0x540 [ 986.601955] ext4_ioctl_group_add+0x251/0x560 [ 986.606439] ? _copy_from_user+0xdf/0x150 [ 986.610573] ext4_ioctl+0x79d/0x4210 [ 986.614358] ? _parse_integer+0x13b/0x190 [ 986.618495] ? ext4_ioctl_group_add+0x560/0x560 [ 986.623328] ? _parse_integer+0x190/0x190 [ 986.627460] ? graph_lock+0x170/0x170 [ 986.631248] ? lock_release+0xa10/0xa10 [ 986.635220] ? check_same_owner+0x320/0x320 [ 986.639530] ? find_held_lock+0x36/0x1c0 [ 986.643579] ? graph_lock+0x170/0x170 [ 986.647366] ? find_held_lock+0x36/0x1c0 [ 986.651504] ? lock_downgrade+0x8e0/0x8e0 [ 986.655642] ? kasan_check_read+0x11/0x20 [ 986.659781] ? rcu_is_watching+0x85/0x140 [ 986.663918] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 986.669103] ? match_held_lock+0x841/0x8b0 [ 986.673329] ? expand_files.part.8+0x9a0/0x9a0 [ 986.677896] ? kasan_check_write+0x14/0x20 [ 986.682128] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 986.687047] ? wait_for_completion+0x870/0x870 [ 986.691626] ? ext4_ioctl_group_add+0x560/0x560 [ 986.696290] do_vfs_ioctl+0x1cf/0x16a0 [ 986.700169] ? ioctl_preallocate+0x2e0/0x2e0 [ 986.704563] ? fget_raw+0x20/0x20 [ 986.708000] ? __sb_end_write+0xac/0xe0 [ 986.711963] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 986.717482] ? fput+0x130/0x1a0 [ 986.720743] ? ksys_write+0x1a6/0x250 [ 986.724531] ? security_file_ioctl+0x94/0xc0 [ 986.728922] ksys_ioctl+0xa9/0xd0 [ 986.732362] __x64_sys_ioctl+0x73/0xb0 [ 986.736246] do_syscall_64+0x1b1/0x800 [ 986.740126] ? finish_task_switch+0x1ca/0x840 [ 986.744606] ? syscall_return_slowpath+0x5c0/0x5c0 [ 986.749520] ? syscall_return_slowpath+0x30f/0x5c0 [ 986.754444] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 986.759821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 986.764651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.769838] RIP: 0033:0x455a09 [ 986.773117] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.780843] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 986.788112] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 986.795364] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 1970/01/01 00:16:26 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f00000ddff8), 0x102000001) [ 986.802623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 986.809874] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000015 [ 986.835476] binder: 25070:25083 got transaction to invalid handle [ 986.841801] binder: 25070:25083 transaction failed 29201/-22, size 536870912-0 line 2856 [ 986.850264] binder_alloc: binder_alloc_mmap_handler: 25061 20001000-20004000 already mapped failed -16 [ 986.868565] binder: BINDER_SET_CONTEXT_MGR already set [ 986.890170] binder: 25061:25062 ioctl 40046207 0 returned -16 [ 986.901374] binder: 25061:25095 unknown command 1077961568 [ 986.933148] binder: 25061:25095 ioctl c0306201 20007000 returned -22 [ 986.968644] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.980390] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:27 executing program 6 (fault-call:1 fault-nth:22): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:27 executing program 7: r0 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, r0, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0x17, 0xffffffff80000000, 0x9, 0x48, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x17, 0x4e23}, @sadb_address={0x3, 0x17, 0x3b, 0x80, 0x0, @in={0x2, 0x4e21, @rand_addr=0x1f}}, @sadb_key={0x1e, 0x9, 0x730, 0x0, "2040b4ccf1fda88ea2414e506fef69cb0bb47df02c6e8b51362bae594f7adde38350ddc3354db7cae5995645b9651f9191474aedc00ebb85524039b6577b0d769ce1dbc415459d2d40b502c47e93b2e204a402e6a520751818133f3ee49b936cbe03541138ba394e31a815600a3fc95b754f7c9bfb930b158526743366e91c9e920acf981adb8ecd53c25b9b16c5685255a950403b800fc59412b390bf6e29602b5d39edb6045bc52c99ed287b7acd4dff6dac76b12188239ab293ae5731064b44815ff6f3cf21ba8949ea6414816b22d592f5cad00e74ceba789ea72c60c8fe9cda3327392e"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x0, 0x5, {0x6, 0xff, 0x9, 0x4, 0x0, 0xfff, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xe}, @in6}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x87, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in={0x2, 0x4e20, @loopback=0x7f000001}}, @sadb_lifetime={0x4, 0x2, 0x7ff, 0x3ff, 0x1f, 0x5}, @sadb_x_filter={0x5, 0x1a, @in, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x5, 0x4, 0x10}, @sadb_x_policy={0x8, 0x12, 0x3, 0x7, 0x0, 0x6e6bb5, 0x7f, {0x6, 0x7e, 0x2, 0xd01c, 0x0, 0x233e, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2d, 0x3505}]}, 0x240}, 0x1}, 0x8000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) 1970/01/01 00:16:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x9]}}, 0x20) 1970/01/01 00:16:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000200)=""/234, 0xea) read(r0, &(0x7f0000000040)=""/11, 0x6) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x4040634c, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x18, 0x0, 0x10001, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000001c0)={0xc000000000000000, r1, 0x1, 0x2}) [ 987.061918] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 987.083456] FAULT_INJECTION: forcing a failure. [ 987.083456] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 987.095376] CPU: 0 PID: 25110 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 987.102636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.111974] Call Trace: [ 987.114569] dump_stack+0x1b9/0x294 [ 987.118274] ? dump_stack_print_info.cold.2+0x52/0x52 [ 987.123452] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.128981] should_fail.cold.4+0xa/0x1a [ 987.133032] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 987.138133] ? graph_lock+0x170/0x170 [ 987.141930] ? debug_check_no_locks_freed+0x310/0x310 [ 987.147116] ? __lock_is_held+0xb5/0x140 [ 987.151174] ? generic_make_request_checks+0x57a/0x2400 [ 987.156536] ? blk_init_queue+0x30/0x30 [ 987.160510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.166060] ? should_fail+0x21b/0xbcd [ 987.169950] __alloc_pages_nodemask+0x34e/0xd70 [ 987.174608] ? kmem_cache_alloc+0x12e/0x760 [ 987.178921] ? mempool_alloc_slab+0x44/0x60 [ 987.183236] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 987.188245] ? graph_lock+0x170/0x170 [ 987.192035] ? lock_downgrade+0x8e0/0x8e0 [ 987.196171] ? __lock_is_held+0xb5/0x140 [ 987.200224] cache_grow_begin+0x72/0x6c0 [ 987.204291] kmem_cache_alloc+0x689/0x760 [ 987.208430] ? mempool_free+0x370/0x370 [ 987.212393] mempool_alloc_slab+0x44/0x60 [ 987.216527] mempool_alloc+0x18b/0x490 [ 987.220406] ? remove_element.isra.4+0x1c0/0x1c0 [ 987.225157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.230702] ? __lock_is_held+0xb5/0x140 [ 987.234772] bio_alloc_bioset+0x3a1/0x7f0 [ 987.238911] ? generic_make_request+0x1510/0x1510 [ 987.243751] ? bvec_alloc+0x2d0/0x2d0 [ 987.247565] ? check_same_owner+0x320/0x320 [ 987.251925] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 987.256954] ? guard_bio_eod+0x2b4/0x600 [ 987.261002] submit_bh_wbc+0x155/0x7c0 [ 987.264879] write_dirty_buffer+0xba/0x150 [ 987.269461] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 987.274215] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 987.279913] ? lock_downgrade+0x8e0/0x8e0 [ 987.284054] ? kasan_check_read+0x11/0x20 [ 987.288194] ? do_raw_spin_unlock+0x9e/0x2e0 [ 987.292590] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 987.297166] ? do_raw_spin_lock+0xc1/0x200 [ 987.301399] jbd2_journal_flush+0x156/0x540 [ 987.305757] ext4_ioctl_group_add+0x251/0x560 [ 987.310237] ? _copy_from_user+0xdf/0x150 [ 987.314369] ext4_ioctl+0x79d/0x4210 [ 987.318065] ? _parse_integer+0x13b/0x190 [ 987.322216] ? ext4_ioctl_group_add+0x560/0x560 [ 987.326868] ? _parse_integer+0x190/0x190 [ 987.331000] ? graph_lock+0x170/0x170 [ 987.334803] ? lock_release+0xa10/0xa10 [ 987.338767] ? check_same_owner+0x320/0x320 [ 987.343078] ? find_held_lock+0x36/0x1c0 [ 987.347125] ? graph_lock+0x170/0x170 [ 987.350909] ? find_held_lock+0x36/0x1c0 [ 987.354960] ? lock_downgrade+0x8e0/0x8e0 [ 987.359189] ? kasan_check_read+0x11/0x20 [ 987.363332] ? rcu_is_watching+0x85/0x140 [ 987.367563] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 987.372759] ? match_held_lock+0x841/0x8b0 [ 987.377017] ? expand_files.part.8+0x9a0/0x9a0 [ 987.381613] ? kasan_check_write+0x14/0x20 [ 987.385848] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 987.390771] ? wait_for_completion+0x870/0x870 [ 987.395349] ? ext4_ioctl_group_add+0x560/0x560 [ 987.400023] do_vfs_ioctl+0x1cf/0x16a0 [ 987.403900] ? ioctl_preallocate+0x2e0/0x2e0 [ 987.408292] ? fget_raw+0x20/0x20 [ 987.411738] ? __sb_end_write+0xac/0xe0 [ 987.415716] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.421246] ? fput+0x130/0x1a0 [ 987.424508] ? ksys_write+0x1a6/0x250 [ 987.428318] ? security_file_ioctl+0x94/0xc0 [ 987.432746] ksys_ioctl+0xa9/0xd0 [ 987.436208] __x64_sys_ioctl+0x73/0xb0 [ 987.440101] do_syscall_64+0x1b1/0x800 [ 987.443978] ? finish_task_switch+0x1ca/0x840 [ 987.448460] ? syscall_return_slowpath+0x5c0/0x5c0 [ 987.453377] ? syscall_return_slowpath+0x30f/0x5c0 [ 987.458294] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 987.463669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 987.468513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.473690] RIP: 0033:0x455a09 [ 987.476859] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.484560] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 987.491817] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 987.499078] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 987.506333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 987.513588] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000016 [ 987.549988] binder: 25112:25118 unknown command 1077961548 1970/01/01 00:16:27 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 987.558830] binder: 25114:25124 got transaction to invalid handle [ 987.565154] binder: 25114:25124 transaction failed 29201/-22, size 536870912-0 line 2856 [ 987.572171] binder: 25112:25118 ioctl c0306201 20007000 returned -22 [ 987.593562] binder_alloc: binder_alloc_mmap_handler: 25112 20001000-20004000 already mapped failed -16 [ 987.605842] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xfffffffffffffffa) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:27 executing program 6 (fault-call:1 fault-nth:23): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 987.606125] binder: 25114:25134 got transaction to invalid handle [ 987.617534] binder: 25114:25134 transaction failed 29201/-22, size 536870912-0 line 2856 [ 987.645904] binder: 25112:25118 ioctl 40046207 0 returned -16 1970/01/01 00:16:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0xb500000000000000]}}, 0x20) 1970/01/01 00:16:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 987.659775] binder: 25112:25135 unknown command 1077961548 [ 987.661956] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 987.671197] binder: 25112:25135 ioctl c0306201 20007000 returned -22 [ 987.685894] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.691804] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.712171] FAULT_INJECTION: forcing a failure. [ 987.712171] name failslab, interval 1, probability 0, space 0, times 0 [ 987.723477] CPU: 1 PID: 25143 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 987.730743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.740086] Call Trace: [ 987.742691] dump_stack+0x1b9/0x294 [ 987.746306] ? dump_stack_print_info.cold.2+0x52/0x52 [ 987.751487] should_fail.cold.4+0xa/0x1a [ 987.755537] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 987.760634] ? kmem_cache_alloc+0x12e/0x760 [ 987.765042] ? mempool_alloc_slab+0x44/0x60 [ 987.769352] ? submit_bh_wbc+0x155/0x7c0 [ 987.773404] ? blk_exit_rl+0x80/0x80 [ 987.777112] ? find_held_lock+0x36/0x1c0 [ 987.781178] ? graph_lock+0x170/0x170 [ 987.784967] ? lock_downgrade+0x8e0/0x8e0 [ 987.789102] ? __lock_is_held+0xb5/0x140 [ 987.793163] __should_failslab+0x124/0x180 [ 987.797385] should_failslab+0x9/0x14 [ 987.801176] kmem_cache_alloc+0x47/0x760 [ 987.805231] ? rcu_note_context_switch+0x710/0x710 [ 987.810158] ? blk_get_request+0x40/0x40 [ 987.814210] ? mempool_free+0x370/0x370 [ 987.818174] mempool_alloc_slab+0x44/0x60 [ 987.822319] mempool_alloc+0x18b/0x490 [ 987.826203] ? remove_element.isra.4+0x1c0/0x1c0 [ 987.830949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.836476] ? __lock_is_held+0xb5/0x140 [ 987.840527] bio_alloc_bioset+0x3a1/0x7f0 [ 987.844669] ? generic_make_request+0x1510/0x1510 [ 987.849500] ? bvec_alloc+0x2d0/0x2d0 [ 987.853298] ? check_same_owner+0x320/0x320 [ 987.857604] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 987.862602] ? guard_bio_eod+0x2b4/0x600 [ 987.866648] submit_bh_wbc+0x155/0x7c0 [ 987.870521] write_dirty_buffer+0xba/0x150 [ 987.874743] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 987.879501] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 987.885196] ? lock_downgrade+0x8e0/0x8e0 [ 987.889333] ? kasan_check_read+0x11/0x20 [ 987.893464] ? do_raw_spin_unlock+0x9e/0x2e0 [ 987.897854] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 987.902429] ? do_raw_spin_lock+0xc1/0x200 [ 987.906663] jbd2_journal_flush+0x156/0x540 [ 987.910972] ext4_ioctl_group_add+0x251/0x560 [ 987.915465] ? _copy_from_user+0xdf/0x150 [ 987.919599] ext4_ioctl+0x79d/0x4210 [ 987.923292] ? _parse_integer+0x13b/0x190 [ 987.927512] ? ext4_ioctl_group_add+0x560/0x560 [ 987.932165] ? _parse_integer+0x190/0x190 [ 987.936301] ? graph_lock+0x170/0x170 [ 987.940085] ? lock_release+0xa10/0xa10 [ 987.944051] ? check_same_owner+0x320/0x320 [ 987.948359] ? find_held_lock+0x36/0x1c0 [ 987.952407] ? graph_lock+0x170/0x170 [ 987.956194] ? find_held_lock+0x36/0x1c0 [ 987.960248] ? lock_downgrade+0x8e0/0x8e0 [ 987.964386] ? kasan_check_read+0x11/0x20 [ 987.968522] ? rcu_is_watching+0x85/0x140 [ 987.972668] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 987.977846] ? match_held_lock+0x841/0x8b0 [ 987.982078] ? expand_files.part.8+0x9a0/0x9a0 [ 987.986666] ? kasan_check_write+0x14/0x20 [ 987.990890] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 987.995821] ? wait_for_completion+0x870/0x870 [ 988.000411] ? ext4_ioctl_group_add+0x560/0x560 [ 988.005081] do_vfs_ioctl+0x1cf/0x16a0 [ 988.008959] ? ioctl_preallocate+0x2e0/0x2e0 1970/01/01 00:16:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 988.013350] ? fget_raw+0x20/0x20 [ 988.016786] ? __sb_end_write+0xac/0xe0 [ 988.020751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 988.026269] ? fput+0x130/0x1a0 [ 988.029530] ? ksys_write+0x1a6/0x250 [ 988.033316] ? security_file_ioctl+0x94/0xc0 [ 988.037720] ksys_ioctl+0xa9/0xd0 [ 988.041163] __x64_sys_ioctl+0x73/0xb0 [ 988.045042] do_syscall_64+0x1b1/0x800 [ 988.048913] ? finish_task_switch+0x1ca/0x840 [ 988.053399] ? syscall_return_slowpath+0x5c0/0x5c0 [ 988.058320] ? syscall_return_slowpath+0x30f/0x5c0 [ 988.063238] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 988.068598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 988.073434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.078614] RIP: 0033:0x455a09 [ 988.081783] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.089482] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 988.096744] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 988.103999] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 988.111252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 988.118505] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000017 [ 988.150973] binder: 25147:25149 got transaction to invalid handle [ 988.157336] binder: 25147:25149 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:28 executing program 6 (fault-call:1 fault-nth:24): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:28 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:28 executing program 0: clock_gettime(0x7, &(0x7f0000002ac0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000140)=@ax25, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/37, 0x25}], 0x2, &(0x7f00000002c0)=""/115, 0x73, 0x8001}, 0x2}, {{&(0x7f0000000340)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000440)=""/213, 0xd5}, 0x8001}, {{&(0x7f0000000540)=@rc, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/6, 0x6}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000780)=""/90, 0x5a}, {&(0x7f0000000800)=""/83, 0x53}], 0x7, &(0x7f0000000900)=""/148, 0x94, 0x809}}, {{&(0x7f00000009c0)=@vsock, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/75, 0x4b}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000bc0)=""/139, 0x8b}], 0x3, &(0x7f0000000cc0)=""/208, 0xd0, 0xff}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/120, 0x78}, {&(0x7f0000000e40)=""/25, 0x19}, {&(0x7f0000000e80)=""/39, 0x27}], 0x3, &(0x7f0000000f00)=""/22, 0x16, 0xb59}, 0x3}, {{&(0x7f0000000f40), 0x80, &(0x7f0000001440)=[{&(0x7f0000000fc0)=""/180, 0xb4}, {&(0x7f0000001080)=""/251, 0xfb}, {&(0x7f0000001180)=""/172, 0xac}, {&(0x7f0000001240)=""/21, 0x15}, {&(0x7f0000001280)=""/189, 0xbd}, {&(0x7f0000001340)=""/252, 0xfc}], 0x6, &(0x7f00000014c0)=""/34, 0x22, 0x9}, 0x9}, {{&(0x7f0000001500)=@nfc_llcp, 0x80, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, &(0x7f00000025c0)=""/77, 0x4d, 0x3}, 0x8000}, {{&(0x7f0000002640)=@sco, 0x80, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/44, 0x2c}, {&(0x7f0000002700)=""/68, 0x44}], 0x2, 0x0, 0x0, 0x4}}], 0x8, 0x40000000, &(0x7f0000002a00)={r0, r1+30000000}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000002a40), &(0x7f0000002a80)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x100, 0x0) accept4$ax25(r3, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 988.178646] binder: 25153:25154 unknown command 1077961490 [ 988.200823] binder: 25153:25154 ioctl c0306201 20007000 returned -22 1970/01/01 00:16:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0xf3000000]}}, 0x20) [ 988.234660] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 988.265102] FAULT_INJECTION: forcing a failure. [ 988.265102] name failslab, interval 1, probability 0, space 0, times 0 [ 988.276419] CPU: 1 PID: 25163 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 988.283677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.293013] Call Trace: [ 988.295598] dump_stack+0x1b9/0x294 [ 988.299213] ? dump_stack_print_info.cold.2+0x52/0x52 [ 988.304403] should_fail.cold.4+0xa/0x1a [ 988.308452] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 988.313551] ? kmem_cache_alloc+0x12e/0x760 [ 988.317858] ? mempool_alloc_slab+0x44/0x60 [ 988.322173] ? submit_bh_wbc+0x155/0x7c0 [ 988.326228] ? blk_exit_rl+0x80/0x80 [ 988.329931] ? find_held_lock+0x36/0x1c0 [ 988.333979] ? graph_lock+0x170/0x170 [ 988.337775] ? lock_downgrade+0x8e0/0x8e0 [ 988.341912] ? __lock_is_held+0xb5/0x140 [ 988.345963] __should_failslab+0x124/0x180 [ 988.350186] should_failslab+0x9/0x14 [ 988.353970] kmem_cache_alloc+0x47/0x760 [ 988.358021] ? rcu_note_context_switch+0x710/0x710 [ 988.362938] ? blk_get_request+0x40/0x40 [ 988.366992] ? mempool_free+0x370/0x370 [ 988.370954] mempool_alloc_slab+0x44/0x60 [ 988.375091] mempool_alloc+0x18b/0x490 [ 988.378979] ? remove_element.isra.4+0x1c0/0x1c0 [ 988.383734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.389258] ? __lock_is_held+0xb5/0x140 [ 988.393305] bio_alloc_bioset+0x3a1/0x7f0 [ 988.397438] ? generic_make_request+0x1510/0x1510 [ 988.402263] ? bvec_alloc+0x2d0/0x2d0 [ 988.406050] ? check_same_owner+0x320/0x320 [ 988.410355] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 988.415353] ? guard_bio_eod+0x2b4/0x600 [ 988.419405] submit_bh_wbc+0x155/0x7c0 [ 988.423276] write_dirty_buffer+0xba/0x150 [ 988.427496] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 988.432239] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 988.437934] ? lock_downgrade+0x8e0/0x8e0 [ 988.442077] ? kasan_check_read+0x11/0x20 [ 988.446207] ? do_raw_spin_unlock+0x9e/0x2e0 [ 988.450601] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 988.455165] ? do_raw_spin_lock+0xc1/0x200 [ 988.459562] jbd2_journal_flush+0x156/0x540 [ 988.463876] ext4_ioctl_group_add+0x251/0x560 [ 988.468525] ? _copy_from_user+0xdf/0x150 [ 988.472654] ext4_ioctl+0x79d/0x4210 [ 988.476346] ? _parse_integer+0x13b/0x190 [ 988.480478] ? ext4_ioctl_group_add+0x560/0x560 [ 988.485124] ? _parse_integer+0x190/0x190 [ 988.489254] ? graph_lock+0x170/0x170 [ 988.493126] ? lock_release+0xa10/0xa10 [ 988.497082] ? check_same_owner+0x320/0x320 [ 988.501389] ? find_held_lock+0x36/0x1c0 [ 988.505434] ? graph_lock+0x170/0x170 [ 988.509214] ? find_held_lock+0x36/0x1c0 [ 988.513262] ? lock_downgrade+0x8e0/0x8e0 [ 988.517398] ? kasan_check_read+0x11/0x20 [ 988.521530] ? rcu_is_watching+0x85/0x140 [ 988.525671] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 988.530860] ? match_held_lock+0x841/0x8b0 [ 988.535085] ? expand_files.part.8+0x9a0/0x9a0 [ 988.539650] ? kasan_check_write+0x14/0x20 [ 988.543868] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 988.548780] ? wait_for_completion+0x870/0x870 [ 988.553433] ? ext4_ioctl_group_add+0x560/0x560 [ 988.558083] do_vfs_ioctl+0x1cf/0x16a0 [ 988.561954] ? ioctl_preallocate+0x2e0/0x2e0 [ 988.566348] ? fget_raw+0x20/0x20 [ 988.569783] ? __sb_end_write+0xac/0xe0 [ 988.573742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 988.579268] ? fput+0x130/0x1a0 [ 988.582526] ? ksys_write+0x1a6/0x250 [ 988.586336] ? security_file_ioctl+0x94/0xc0 [ 988.590729] ksys_ioctl+0xa9/0xd0 [ 988.594169] __x64_sys_ioctl+0x73/0xb0 [ 988.598038] do_syscall_64+0x1b1/0x800 [ 988.601907] ? finish_task_switch+0x1ca/0x840 [ 988.606383] ? syscall_return_slowpath+0x5c0/0x5c0 [ 988.611293] ? syscall_return_slowpath+0x30f/0x5c0 [ 988.616206] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 988.621574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 988.626402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.631572] RIP: 0033:0x455a09 [ 988.634749] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.642449] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 988.649702] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 988.656955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 988.664206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 988.671457] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000018 1970/01/01 00:16:28 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:28 executing program 6 (fault-call:1 fault-nth:25): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 988.693356] binder: 25147:25175 got transaction to invalid handle [ 988.699861] binder: 25147:25175 transaction failed 29201/-22, size 536870912-0 line 2856 [ 988.702784] binder_alloc: binder_alloc_mmap_handler: 25153 20001000-20004000 already mapped failed -16 1970/01/01 00:16:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000180)={0x800, 0x9, 0x1f}) read(r0, &(0x7f0000000240)=""/11, 0xffffffffffffffd9) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x6804, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000180)=0x172, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x400000) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x40) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 988.773750] binder: BINDER_SET_CONTEXT_MGR already set [ 988.792244] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 988.799992] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.812147] binder: 25153:25177 unknown command 1077961490 [ 988.812689] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.823902] binder: 25153:25154 ioctl 40046207 0 returned -16 [ 988.844937] binder: 25153:25177 ioctl c0306201 20007000 returned -22 [ 988.862047] FAULT_INJECTION: forcing a failure. [ 988.862047] name failslab, interval 1, probability 0, space 0, times 0 [ 988.873410] CPU: 1 PID: 25193 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 988.880673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.890010] Call Trace: [ 988.892594] dump_stack+0x1b9/0x294 [ 988.896210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 988.901400] should_fail.cold.4+0xa/0x1a [ 988.905448] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 988.910551] ? preempt_notifier_register+0x1e0/0x1e0 [ 988.915646] ? lock_repin_lock+0x410/0x410 [ 988.919876] ? __schedule+0x809/0x1e30 [ 988.923756] ? lock_repin_lock+0x410/0x410 [ 988.927989] ? __sched_text_start+0x8/0x8 [ 988.932130] ? kernel_text_address+0x79/0xf0 [ 988.936533] ? __lock_is_held+0xb5/0x140 [ 988.940589] __should_failslab+0x124/0x180 [ 988.945327] should_failslab+0x9/0x14 [ 988.949124] kmem_cache_alloc+0x47/0x760 [ 988.953174] ? graph_lock+0x170/0x170 [ 988.956963] ? __kasan_slab_free+0x11a/0x170 [ 988.961358] ? kasan_slab_free+0xe/0x10 [ 988.965325] ? mempool_free+0x370/0x370 [ 988.969293] mempool_alloc_slab+0x44/0x60 [ 988.973436] mempool_alloc+0x18b/0x490 [ 988.977319] ? remove_element.isra.4+0x1c0/0x1c0 [ 988.982076] ? lock_downgrade+0x8e0/0x8e0 [ 988.986212] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 988.990965] bio_alloc_bioset+0x3a1/0x7f0 [ 988.995107] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 988.999680] ? bvec_alloc+0x2d0/0x2d0 [ 989.003472] ? kasan_check_write+0x14/0x20 [ 989.007694] ? kasan_check_write+0x14/0x20 [ 989.011913] ? do_raw_read_unlock+0x3f/0x60 [ 989.016221] blkdev_issue_flush+0xf3/0x320 [ 989.020442] jbd2_cleanup_journal_tail+0x21c/0x2a0 [ 989.025356] ? jbd2_journal_skip_recovery.cold.13+0x5c/0x5c [ 989.031066] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 989.035643] ? kasan_check_write+0x14/0x20 [ 989.039870] ? do_raw_spin_lock+0xc1/0x200 [ 989.044093] jbd2_log_do_checkpoint+0x9f7/0x1340 [ 989.048837] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 989.054533] ? lock_downgrade+0x8e0/0x8e0 [ 989.058668] ? kasan_check_read+0x11/0x20 [ 989.062801] ? do_raw_spin_unlock+0x9e/0x2e0 [ 989.067202] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 989.071775] ? do_raw_spin_lock+0xc1/0x200 [ 989.075997] jbd2_journal_flush+0x156/0x540 [ 989.080307] ext4_ioctl_group_add+0x251/0x560 [ 989.084793] ? _copy_from_user+0xdf/0x150 [ 989.088928] ext4_ioctl+0x79d/0x4210 [ 989.092629] ? _parse_integer+0x13b/0x190 [ 989.096764] ? ext4_ioctl_group_add+0x560/0x560 [ 989.101429] ? _parse_integer+0x190/0x190 [ 989.105561] ? graph_lock+0x170/0x170 [ 989.109342] ? lock_release+0xa10/0xa10 [ 989.113313] ? check_same_owner+0x320/0x320 [ 989.117619] ? find_held_lock+0x36/0x1c0 [ 989.121662] ? graph_lock+0x170/0x170 [ 989.125444] ? find_held_lock+0x36/0x1c0 [ 989.129494] ? lock_downgrade+0x8e0/0x8e0 [ 989.133638] ? kasan_check_read+0x11/0x20 [ 989.137771] ? rcu_is_watching+0x85/0x140 [ 989.141902] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 989.147089] ? match_held_lock+0x841/0x8b0 [ 989.151309] ? expand_files.part.8+0x9a0/0x9a0 [ 989.155875] ? kasan_check_write+0x14/0x20 [ 989.160096] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 989.165013] ? wait_for_completion+0x870/0x870 [ 989.169592] ? ext4_ioctl_group_add+0x560/0x560 [ 989.174245] do_vfs_ioctl+0x1cf/0x16a0 [ 989.178121] ? ioctl_preallocate+0x2e0/0x2e0 [ 989.182515] ? fget_raw+0x20/0x20 [ 989.185964] ? __sb_end_write+0xac/0xe0 [ 989.189929] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.195448] ? fput+0x130/0x1a0 [ 989.198711] ? ksys_write+0x1a6/0x250 [ 989.202499] ? security_file_ioctl+0x94/0xc0 [ 989.206903] ksys_ioctl+0xa9/0xd0 [ 989.210349] __x64_sys_ioctl+0x73/0xb0 [ 989.214230] do_syscall_64+0x1b1/0x800 [ 989.218101] ? finish_task_switch+0x1ca/0x840 [ 989.222580] ? syscall_return_slowpath+0x5c0/0x5c0 [ 989.227491] ? syscall_return_slowpath+0x30f/0x5c0 [ 989.232417] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 989.237771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 989.242600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.247774] RIP: 0033:0x455a09 [ 989.250949] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.258642] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 989.265892] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 989.273146] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 989.280395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 989.287647] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000019 1970/01/01 00:16:29 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:29 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:29 executing program 6 (fault-call:1 fault-nth:26): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000240)) fallocate(r1, 0x1, 0xfb, 0x5) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x3fe, 0xa000) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x10002, 0x0) 1970/01/01 00:16:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000180)={'veth1_to_team\x00', {0x4, 0x571, 0x6, "b953779adebf", 0xc000000000000000}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x1b, 0x1000, &(0x7f00000001c0)="0ef7b62ba2c4c15a8f4818f076324893521d7b85b88c355185bb9e", &(0x7f00000004c0)=""/4096, 0xc1fa}, 0x28) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000014c0)={"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"}) 1970/01/01 00:16:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x10000000]}}, 0x20) [ 989.770313] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 989.776893] binder: 25221:25223 unknown command 0 [ 989.804353] binder: 25221:25223 ioctl c0306201 20007000 returned -22 [ 989.813098] binder_alloc: binder_alloc_mmap_handler: 25221 20001000-20004000 already mapped failed -16 [ 989.823995] FAULT_INJECTION: forcing a failure. [ 989.823995] name failslab, interval 1, probability 0, space 0, times 0 [ 989.831209] binder: BINDER_SET_CONTEXT_MGR already set [ 989.835303] CPU: 1 PID: 25226 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 989.835316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.840832] binder: 25221:25235 unknown command 0 [ 989.847867] Call Trace: [ 989.847897] dump_stack+0x1b9/0x294 1970/01/01 00:16:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 989.847911] ? dump_stack_print_info.cold.2+0x52/0x52 [ 989.847932] should_fail.cold.4+0xa/0x1a [ 989.847943] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 989.847955] ? kmem_cache_alloc+0x12e/0x760 [ 989.847965] ? mempool_alloc_slab+0x44/0x60 [ 989.847978] ? submit_bh_wbc+0x155/0x7c0 [ 989.847991] ? blk_exit_rl+0x80/0x80 [ 989.848003] ? find_held_lock+0x36/0x1c0 [ 989.848012] ? graph_lock+0x170/0x170 [ 989.848023] ? lock_downgrade+0x8e0/0x8e0 [ 989.848035] ? __lock_is_held+0xb5/0x140 [ 989.848047] __should_failslab+0x124/0x180 [ 989.848063] should_failslab+0x9/0x14 [ 989.857685] binder: 25221:25223 ioctl 40046207 0 returned -16 [ 989.862319] kmem_cache_alloc+0x47/0x760 [ 989.862334] ? rcu_note_context_switch+0x710/0x710 [ 989.862344] ? blk_get_request+0x40/0x40 [ 989.862358] ? mempool_free+0x370/0x370 [ 989.862366] mempool_alloc_slab+0x44/0x60 [ 989.862380] mempool_alloc+0x18b/0x490 [ 989.865148] binder: 25221:25235 ioctl c0306201 20007000 returned -22 [ 989.868569] ? remove_element.isra.4+0x1c0/0x1c0 [ 989.868588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.868599] ? __lock_is_held+0xb5/0x140 [ 989.868612] bio_alloc_bioset+0x3a1/0x7f0 [ 989.868625] ? generic_make_request+0x1510/0x1510 [ 989.984178] ? bvec_alloc+0x2d0/0x2d0 [ 989.987969] ? check_same_owner+0x320/0x320 [ 989.992275] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 989.997274] ? guard_bio_eod+0x2b4/0x600 [ 990.001321] submit_bh_wbc+0x155/0x7c0 [ 990.005204] write_dirty_buffer+0xba/0x150 [ 990.009423] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 990.014174] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 990.019868] ? lock_downgrade+0x8e0/0x8e0 [ 990.024004] ? kasan_check_read+0x11/0x20 [ 990.028131] ? do_raw_spin_unlock+0x9e/0x2e0 [ 990.032521] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 990.037087] ? do_raw_spin_lock+0xc1/0x200 [ 990.041310] jbd2_journal_flush+0x156/0x540 [ 990.045631] ext4_ioctl_group_add+0x251/0x560 [ 990.050120] ? _copy_from_user+0xdf/0x150 [ 990.054256] ext4_ioctl+0x79d/0x4210 [ 990.057953] ? _parse_integer+0x13b/0x190 [ 990.062100] ? ext4_ioctl_group_add+0x560/0x560 [ 990.066753] ? _parse_integer+0x190/0x190 [ 990.070885] ? graph_lock+0x170/0x170 [ 990.074676] ? lock_release+0xa10/0xa10 [ 990.078632] ? check_same_owner+0x320/0x320 [ 990.082936] ? find_held_lock+0x36/0x1c0 [ 990.086982] ? graph_lock+0x170/0x170 [ 990.090767] ? find_held_lock+0x36/0x1c0 [ 990.094814] ? lock_downgrade+0x8e0/0x8e0 [ 990.098954] ? kasan_check_read+0x11/0x20 [ 990.103086] ? rcu_is_watching+0x85/0x140 [ 990.107218] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 990.112400] ? match_held_lock+0x841/0x8b0 [ 990.116619] ? expand_files.part.8+0x9a0/0x9a0 [ 990.121194] ? kasan_check_write+0x14/0x20 [ 990.125414] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 990.130329] ? wait_for_completion+0x870/0x870 [ 990.134905] ? ext4_ioctl_group_add+0x560/0x560 [ 990.139560] do_vfs_ioctl+0x1cf/0x16a0 [ 990.143436] ? ioctl_preallocate+0x2e0/0x2e0 [ 990.147832] ? fget_raw+0x20/0x20 [ 990.151269] ? __sb_end_write+0xac/0xe0 [ 990.155228] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 990.160750] ? fput+0x130/0x1a0 [ 990.164010] ? ksys_write+0x1a6/0x250 [ 990.167795] ? security_file_ioctl+0x94/0xc0 [ 990.172187] ksys_ioctl+0xa9/0xd0 [ 990.175634] __x64_sys_ioctl+0x73/0xb0 [ 990.179510] do_syscall_64+0x1b1/0x800 [ 990.183382] ? finish_task_switch+0x1ca/0x840 [ 990.187863] ? syscall_return_slowpath+0x5c0/0x5c0 [ 990.192776] ? syscall_return_slowpath+0x30f/0x5c0 [ 990.197692] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 990.203039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 990.207869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.213052] RIP: 0033:0x455a09 [ 990.216227] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.223920] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 990.231176] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 990.238430] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 990.245682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 990.252938] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000001a [ 990.268495] binder: 25217:25220 got transaction to invalid handle [ 990.275474] binder: 25217:25220 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:30 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 990.286160] binder: 25217:25239 got transaction to invalid handle [ 990.286174] binder: 25217:25239 transaction failed 29201/-22, size 536870912-0 line 2856 [ 990.303403] binder: 25238:25240 ioctl c0306201 20007000 returned -14 [ 990.308446] binder_alloc: binder_alloc_mmap_handler: 25238 20001000-20004000 already mapped failed -16 [ 990.311230] binder: BINDER_SET_CONTEXT_MGR already set [ 990.311241] binder: 25238:25240 ioctl 40046207 0 returned -16 [ 990.311288] binder_alloc: 25238: binder_alloc_buf, no vma [ 990.311311] binder: 25238:25243 transaction failed 29189/-3, size 0-0 line 2971 [ 990.311329] binder: 25238:25243 ioctl c0306201 20007000 returned -14 [ 990.322242] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.322376] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.349103] binder: 25248:25251 got transaction to invalid handle [ 990.349116] binder: 25248:25251 transaction failed 29201/-22, size 536870912-0 line 2856 [ 990.351092] binder: 25248:25252 got transaction to invalid handle [ 990.351105] binder: 25248:25252 transaction failed 29201/-22, size 536870912-0 line 2856 [ 990.359486] binder: undelivered TRANSACTION_ERROR: 29189 [ 990.359583] binder: undelivered transaction 1259, process died. [ 990.359738] binder: undelivered TRANSACTION_COMPLETE [ 990.401917] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.503204] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8e8e437e44a6786ca9e0e56db463c93ae09b203078edf1b46371a17ed484d9a2eab1d5a5066d94f31dc3b63f83382460032286ea05bb4541ea73f24da206c85a40ab1e254d52570e01b8729c8e030d19639fcd997ff3385c88ea548a5652e5f18b5a59c0a01fd7bf5a486976f52496a54066b0c230e91f9c160cbaf9cf25e21b2b987a423fd7ede69f3d35053318435b2f4889c7f837231cd7edb5a58e7c7f6b000c274338bffd9d519a67", 0xab, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) accept4$packet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000700)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'nr0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast2, @multicast1}, &(0x7f0000000840)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000980)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) getsockname$packet(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x14) accept4$packet(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000bc0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005a40)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000005ac0)=0x14) recvmmsg(r0, &(0x7f00000097c0)=[{{&(0x7f0000005b00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000007140)=[{&(0x7f0000005b80)=""/215, 0xd7}, {&(0x7f0000005c80)=""/214, 0xd6}, {&(0x7f0000005d80)=""/28, 0x1c}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/212, 0xd4}, {&(0x7f0000006ec0)=""/73, 0x49}, {&(0x7f0000006f40)=""/30, 0x1e}, {&(0x7f0000006f80)=""/169, 0xa9}, {&(0x7f0000007040)=""/225, 0xe1}], 0x9, &(0x7f0000007200)=""/29, 0x1d, 0x200}, 0x5}, {{&(0x7f0000007240)=@nfc_llcp, 0x80, &(0x7f0000007300)=[{&(0x7f00000072c0)=""/21, 0x15}], 0x1, &(0x7f0000007340)=""/156, 0x9c, 0x8}, 0x3f}, {{&(0x7f0000007400)=@alg, 0x80, &(0x7f0000009680)=[{&(0x7f0000007480)=""/73, 0x49}, {&(0x7f0000007500)=""/39, 0x27}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/156, 0x9c}, {&(0x7f0000008600)=""/4096, 0x1000}, {&(0x7f0000009600)=""/74, 0x4a}], 0x6, &(0x7f0000009700)=""/135, 0x87}, 0x3f}], 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000009880)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000098c0)={0x0, @multicast1, @multicast2}, &(0x7f0000009900)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000009940)={@dev, 0x0}, &(0x7f0000009980)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009fc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000009f80)={&(0x7f00000099c0)={0x5a0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x224, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x1a0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x730d}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7b}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4000000000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1b0, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r18}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0xffffffffffffffff, 0x9, 0x0, 0x21a4}, {0x1f, 0x200, 0x8}, {0x100000001, 0x9, 0x9, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r19 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) fstat(r19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r19, &(0x7f00000004c0)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000380)) fchown(r19, r20, r21) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x8000, 0x0) set_mempolicy(0x3, &(0x7f0000000300)=0x5, 0x40) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:31 executing program 6 (fault-call:1 fault-nth:27): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x1f00000000000000]}}, 0x20) 1970/01/01 00:16:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0xe7f8}, @val={0x1, 0x83, 0x8001, 0x1, 0x400, 0x7}, @eth={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [{[], {0x8100, 0x3d9c44b8, 0xc, 0x2}}], {@can={0xc, {{0x3, 0x5, 0xfffffffffffffffc, 0x400}, 0xff, 0x3, 0x0, 0x0, "0558a9d7d50cddc5"}}}}}, 0x30) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/220) 1970/01/01 00:16:31 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 991.583934] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 991.588005] binder: 25272:25275 ioctl c0306201 20007000 returned -14 [ 991.594896] binder: 25264:25265 transaction failed 29201/-28, size 536870912-0 line 2971 [ 991.620162] FAULT_INJECTION: forcing a failure. [ 991.620162] name failslab, interval 1, probability 0, space 0, times 0 [ 991.631618] CPU: 0 PID: 25274 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 991.638899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.648248] Call Trace: [ 991.650850] dump_stack+0x1b9/0x294 [ 991.654473] ? dump_stack_print_info.cold.2+0x52/0x52 [ 991.659667] should_fail.cold.4+0xa/0x1a [ 991.663769] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 991.668916] ? kmem_cache_alloc+0x12e/0x760 [ 991.673247] ? mempool_alloc_slab+0x44/0x60 [ 991.677558] ? submit_bh_wbc+0x155/0x7c0 [ 991.681617] ? blk_exit_rl+0x80/0x80 [ 991.685322] ? find_held_lock+0x36/0x1c0 [ 991.689379] ? graph_lock+0x170/0x170 [ 991.693179] ? lock_downgrade+0x8e0/0x8e0 [ 991.697323] ? __lock_is_held+0xb5/0x140 [ 991.701389] __should_failslab+0x124/0x180 [ 991.705619] should_failslab+0x9/0x14 [ 991.709408] kmem_cache_alloc+0x47/0x760 [ 991.713469] ? rcu_note_context_switch+0x710/0x710 [ 991.718402] ? blk_get_request+0x40/0x40 [ 991.722454] ? mempool_free+0x370/0x370 [ 991.726412] mempool_alloc_slab+0x44/0x60 [ 991.730567] mempool_alloc+0x18b/0x490 [ 991.734441] ? remove_element.isra.4+0x1c0/0x1c0 [ 991.739221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.744749] ? __lock_is_held+0xb5/0x140 [ 991.748808] bio_alloc_bioset+0x3a1/0x7f0 [ 991.752949] ? generic_make_request+0x1510/0x1510 [ 991.757790] ? bvec_alloc+0x2d0/0x2d0 [ 991.761595] ? check_same_owner+0x320/0x320 [ 991.765911] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 991.770921] ? guard_bio_eod+0x2b4/0x600 [ 991.774972] submit_bh_wbc+0x155/0x7c0 [ 991.778852] write_dirty_buffer+0xba/0x150 [ 991.783078] jbd2_log_do_checkpoint+0xbe6/0x1340 [ 991.787843] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 991.793548] ? lock_downgrade+0x8e0/0x8e0 [ 991.797727] ? kasan_check_read+0x11/0x20 [ 991.801873] ? do_raw_spin_unlock+0x9e/0x2e0 [ 991.806271] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 991.810850] ? do_raw_spin_lock+0xc1/0x200 [ 991.815076] jbd2_journal_flush+0x156/0x540 [ 991.819389] ext4_ioctl_group_add+0x251/0x560 [ 991.823875] ? _copy_from_user+0xdf/0x150 [ 991.828007] ext4_ioctl+0x79d/0x4210 [ 991.831704] ? _parse_integer+0x13b/0x190 [ 991.835837] ? ext4_ioctl_group_add+0x560/0x560 [ 991.840489] ? _parse_integer+0x190/0x190 [ 991.844632] ? graph_lock+0x170/0x170 [ 991.848418] ? lock_release+0xa10/0xa10 [ 991.852381] ? check_same_owner+0x320/0x320 [ 991.856697] ? find_held_lock+0x36/0x1c0 [ 991.860744] ? graph_lock+0x170/0x170 [ 991.864532] ? find_held_lock+0x36/0x1c0 [ 991.868580] ? lock_downgrade+0x8e0/0x8e0 [ 991.872723] ? kasan_check_read+0x11/0x20 [ 991.876860] ? rcu_is_watching+0x85/0x140 [ 991.880997] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 991.886186] ? match_held_lock+0x841/0x8b0 [ 991.890427] ? expand_files.part.8+0x9a0/0x9a0 [ 991.895001] ? kasan_check_write+0x14/0x20 [ 991.899242] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 991.904188] ? wait_for_completion+0x870/0x870 [ 991.908787] ? ext4_ioctl_group_add+0x560/0x560 [ 991.913447] do_vfs_ioctl+0x1cf/0x16a0 [ 991.917329] ? ioctl_preallocate+0x2e0/0x2e0 [ 991.921734] ? fget_raw+0x20/0x20 [ 991.925174] ? __sb_end_write+0xac/0xe0 [ 991.929150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 991.934680] ? fput+0x130/0x1a0 [ 991.937947] ? ksys_write+0x1a6/0x250 [ 991.941742] ? security_file_ioctl+0x94/0xc0 [ 991.946141] ksys_ioctl+0xa9/0xd0 [ 991.949591] __x64_sys_ioctl+0x73/0xb0 [ 991.953487] do_syscall_64+0x1b1/0x800 [ 991.957366] ? finish_task_switch+0x1ca/0x840 [ 991.961852] ? syscall_return_slowpath+0x5c0/0x5c0 [ 991.966782] ? syscall_return_slowpath+0x30f/0x5c0 [ 991.971732] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 991.977098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 991.981942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.987117] RIP: 0033:0x455a09 [ 991.990319] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.998014] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 992.005316] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 992.012575] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 992.019850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 992.027103] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000001b [ 992.048701] binder: 25264:25280 transaction failed 29201/-28, size 536870912-0 line 2971 [ 992.059259] binder_alloc: binder_alloc_mmap_handler: 25272 20001000-20004000 already mapped failed -16 [ 992.087619] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{r1, r2/1000+30000}, {r3, r4/1000+10000}}, 0x100) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x5}}, 0x1000, 0x4, 0x401, 0xffffffff, 0x20}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x4000000000, 0x5, 0x6, 0x80000000, 0xfff, 0x7, 0x8, 0x100, r5}, &(0x7f0000000380)=0x20) 1970/01/01 00:16:32 executing program 6 (fault-call:1 fault-nth:28): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xffffff7f, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 992.103184] binder: 25272:25275 ioctl 40046207 0 returned -16 [ 992.114490] binder_alloc: 25272: binder_alloc_buf, no vma [ 992.120250] binder: 25272:25290 transaction failed 29189/-3, size 0-0 line 2971 [ 992.126201] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.128176] binder: 25272:25290 ioctl c0306201 20007000 returned -14 [ 992.157886] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x4000000000000000]}}, 0x20) 1970/01/01 00:16:32 executing program 0: r0 = dup(0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000140)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 992.192486] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 992.235421] FAULT_INJECTION: forcing a failure. [ 992.235421] name failslab, interval 1, probability 0, space 0, times 0 [ 992.242410] binder: undelivered TRANSACTION_ERROR: 29189 [ 992.246778] CPU: 0 PID: 25301 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 992.252718] binder: undelivered TRANSACTION_COMPLETE [ 992.259509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.259515] Call Trace: [ 992.259543] dump_stack+0x1b9/0x294 [ 992.259557] ? dump_stack_print_info.cold.2+0x52/0x52 [ 992.259576] should_fail.cold.4+0xa/0x1a [ 992.259590] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 992.259603] ? print_usage_bug+0xc0/0xc0 [ 992.259617] ? print_usage_bug+0xc0/0xc0 [ 992.265361] binder: undelivered transaction 1264, process died. [ 992.274095] ? mark_held_locks+0xc9/0x160 [ 992.274110] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 992.274123] ? _raw_spin_unlock_irq+0x27/0x70 [ 992.274133] ? graph_lock+0x170/0x170 [ 992.274146] ? __lock_acquire+0x7f5/0x5140 [ 992.274165] ? kasan_check_write+0x14/0x20 [ 992.334157] ? graph_lock+0x170/0x170 [ 992.337954] ? __lock_is_held+0xb5/0x140 [ 992.342001] ? drm_calc_vbltimestamp_from_scanoutpos+0x168/0xaf0 [ 992.348137] __should_failslab+0x124/0x180 [ 992.352374] should_failslab+0x9/0x14 [ 992.356173] kmem_cache_alloc+0x47/0x760 [ 992.360224] ? rcu_note_context_switch+0x710/0x710 [ 992.365142] ? lock_downgrade+0x8e0/0x8e0 [ 992.369282] ? mempool_free+0x370/0x370 [ 992.373244] mempool_alloc_slab+0x44/0x60 [ 992.377412] mempool_alloc+0x18b/0x490 [ 992.381299] ? remove_element.isra.4+0x1c0/0x1c0 [ 992.386042] ? graph_lock+0x170/0x170 [ 992.389832] ? is_bpf_text_address+0xd7/0x170 [ 992.394325] ? kernel_text_address+0x79/0xf0 [ 992.398735] ? __unwind_start+0x166/0x330 [ 992.402873] ? __kernel_text_address+0xd/0x40 [ 992.407375] ? unwind_get_return_address+0x61/0xa0 [ 992.412322] bio_alloc_bioset+0x3a1/0x7f0 [ 992.416460] ? bvec_alloc+0x2d0/0x2d0 [ 992.420287] ? check_same_owner+0x320/0x320 [ 992.424608] submit_bh_wbc+0x155/0x7c0 [ 992.428483] submit_bh+0x28/0x30 [ 992.431847] jbd2_write_superblock+0x584/0xba0 [ 992.436418] ? jbd2_journal_abort+0x30/0x30 [ 992.440726] ? graph_lock+0x170/0x170 [ 992.444544] ? trace_hardirqs_off+0xd/0x10 [ 992.448807] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 992.453933] ? debug_check_no_obj_freed+0x2ff/0x584 [ 992.458963] ? __lock_is_held+0xb5/0x140 [ 992.463027] jbd2_journal_update_sb_log_tail+0x1f2/0x380 [ 992.468473] ? jbd2_journal_get_log_tail+0x550/0x550 [ 992.473771] ? kmem_cache_free+0x25c/0x2d0 [ 992.478087] __jbd2_update_log_tail+0x137/0x640 [ 992.482748] ? jbd2_journal_update_sb_log_tail+0x380/0x380 [ 992.488373] ? bio_put+0x182/0x1f0 [ 992.491902] ? bio_free+0x1a0/0x1a0 [ 992.495524] ? kasan_check_write+0x14/0x20 [ 992.499755] ? do_raw_read_unlock+0x3f/0x60 [ 992.504069] ? blkdev_issue_flush+0x287/0x320 [ 992.508584] jbd2_cleanup_journal_tail+0x198/0x2a0 [ 992.513565] ? jbd2_journal_skip_recovery.cold.13+0x5c/0x5c [ 992.519292] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 992.523891] ? kasan_check_write+0x14/0x20 [ 992.528117] ? do_raw_spin_lock+0xc1/0x200 [ 992.532347] jbd2_log_do_checkpoint+0x9f7/0x1340 [ 992.537131] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 992.542855] ? lock_downgrade+0x8e0/0x8e0 [ 992.547027] ? kasan_check_read+0x11/0x20 [ 992.551183] ? do_raw_spin_unlock+0x9e/0x2e0 [ 992.555584] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 992.560151] ? do_raw_spin_lock+0xc1/0x200 [ 992.564381] jbd2_journal_flush+0x156/0x540 [ 992.568702] ext4_ioctl_group_add+0x251/0x560 [ 992.573188] ? _copy_from_user+0xdf/0x150 [ 992.577328] ext4_ioctl+0x79d/0x4210 [ 992.581033] ? _parse_integer+0x13b/0x190 [ 992.585178] ? ext4_ioctl_group_add+0x560/0x560 [ 992.589851] ? _parse_integer+0x190/0x190 [ 992.593992] ? graph_lock+0x170/0x170 [ 992.597786] ? lock_release+0xa10/0xa10 [ 992.601764] ? check_same_owner+0x320/0x320 [ 992.606079] ? find_held_lock+0x36/0x1c0 [ 992.610132] ? graph_lock+0x170/0x170 [ 992.613923] ? find_held_lock+0x36/0x1c0 [ 992.617978] ? lock_downgrade+0x8e0/0x8e0 [ 992.622134] ? kasan_check_read+0x11/0x20 [ 992.626283] ? rcu_is_watching+0x85/0x140 [ 992.630429] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 992.635705] ? match_held_lock+0x841/0x8b0 [ 992.639936] ? expand_files.part.8+0x9a0/0x9a0 [ 992.644515] ? kasan_check_write+0x14/0x20 [ 992.648743] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 992.653748] ? wait_for_completion+0x870/0x870 [ 992.658324] ? ext4_ioctl_group_add+0x560/0x560 [ 992.662997] do_vfs_ioctl+0x1cf/0x16a0 [ 992.666910] ? ioctl_preallocate+0x2e0/0x2e0 [ 992.671342] ? fget_raw+0x20/0x20 [ 992.674788] ? __sb_end_write+0xac/0xe0 [ 992.678759] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 992.684285] ? fput+0x130/0x1a0 [ 992.687560] ? ksys_write+0x1a6/0x250 [ 992.691363] ? security_file_ioctl+0x94/0xc0 [ 992.695766] ksys_ioctl+0xa9/0xd0 [ 992.699212] __x64_sys_ioctl+0x73/0xb0 [ 992.703293] do_syscall_64+0x1b1/0x800 [ 992.707171] ? finish_task_switch+0x1ca/0x840 [ 992.711658] ? syscall_return_slowpath+0x5c0/0x5c0 [ 992.716585] ? syscall_return_slowpath+0x30f/0x5c0 [ 992.721515] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 992.726873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.731717] entry_SYSCALL_64_after_hwframe+0x49/0xbe 1970/01/01 00:16:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 992.736904] RIP: 0033:0x455a09 [ 992.740077] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.747781] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 992.755036] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 992.762308] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 992.769571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 992.776831] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000001c [ 992.800075] binder: 25302:25308 got transaction to invalid handle [ 992.806429] binder: 25302:25308 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:32 executing program 6 (fault-call:1 fault-nth:29): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 992.856073] binder: 25318:25320 got transaction to invalid handle [ 992.862410] binder: 25318:25320 transaction failed 29201/-22, size 0-0 line 2856 1970/01/01 00:16:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0xf300000000000000]}}, 0x20) [ 992.917102] binder: 25302:25331 got transaction to invalid handle [ 992.923440] binder: 25302:25331 transaction failed 29201/-22, size 536870912-0 line 2856 [ 992.940849] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 992.954960] binder: 25318:25320 ioctl c0306201 20007000 returned -14 [ 992.988939] FAULT_INJECTION: forcing a failure. [ 992.988939] name failslab, interval 1, probability 0, space 0, times 0 [ 992.989326] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.000346] CPU: 0 PID: 25337 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 993.007648] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.013025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.013031] Call Trace: [ 993.013056] dump_stack+0x1b9/0x294 [ 993.013070] ? dump_stack_print_info.cold.2+0x52/0x52 [ 993.013088] should_fail.cold.4+0xa/0x1a [ 993.013099] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 993.013116] ? __lock_acquire+0x7f5/0x5140 [ 993.052600] ? lock_downgrade+0x8e0/0x8e0 [ 993.056754] ? debug_check_no_locks_freed+0x310/0x310 [ 993.061939] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 993.067148] ? graph_lock+0x170/0x170 [ 993.070991] ? lock_repin_lock+0x410/0x410 [ 993.075257] ? is_bpf_text_address+0xd7/0x170 [ 993.079744] ? kernel_text_address+0x79/0xf0 [ 993.084140] ? __lock_is_held+0xb5/0x140 [ 993.088188] __should_failslab+0x124/0x180 [ 993.092410] should_failslab+0x9/0x14 [ 993.096192] kmem_cache_alloc+0x47/0x760 [ 993.100239] ? rcu_note_context_switch+0x710/0x710 [ 993.105157] ? graph_lock+0x170/0x170 [ 993.108950] ? __kasan_slab_free+0x11a/0x170 [ 993.113347] ? kasan_slab_free+0xe/0x10 [ 993.117314] ? mempool_free+0x370/0x370 [ 993.121277] mempool_alloc_slab+0x44/0x60 [ 993.125416] mempool_alloc+0x18b/0x490 [ 993.129296] ? remove_element.isra.4+0x1c0/0x1c0 [ 993.134043] ? lock_downgrade+0x8e0/0x8e0 [ 993.138184] bio_alloc_bioset+0x3a1/0x7f0 [ 993.142326] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 993.146897] ? bvec_alloc+0x2d0/0x2d0 [ 993.150689] ? kasan_check_write+0x14/0x20 [ 993.154917] ? kasan_check_write+0x14/0x20 [ 993.159137] ? do_raw_read_unlock+0x3f/0x60 [ 993.163458] blkdev_issue_flush+0xf3/0x320 [ 993.167683] jbd2_cleanup_journal_tail+0x21c/0x2a0 [ 993.172630] ? jbd2_journal_skip_recovery.cold.13+0x5c/0x5c [ 993.178332] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 993.182907] ? kasan_check_write+0x14/0x20 [ 993.187129] ? do_raw_spin_lock+0xc1/0x200 [ 993.191356] jbd2_log_do_checkpoint+0x9f7/0x1340 [ 993.196103] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 993.201802] ? lock_downgrade+0x8e0/0x8e0 [ 993.205948] ? kasan_check_read+0x11/0x20 [ 993.210091] ? do_raw_spin_unlock+0x9e/0x2e0 [ 993.214499] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 993.219086] ? do_raw_spin_lock+0xc1/0x200 [ 993.223316] jbd2_journal_flush+0x156/0x540 [ 993.227632] ext4_ioctl_group_add+0x251/0x560 [ 993.232123] ? _copy_from_user+0xdf/0x150 [ 993.236272] ext4_ioctl+0x79d/0x4210 [ 993.239973] ? _parse_integer+0x13b/0x190 [ 993.244115] ? ext4_ioctl_group_add+0x560/0x560 [ 993.248788] ? _parse_integer+0x190/0x190 [ 993.252935] ? graph_lock+0x170/0x170 [ 993.256728] ? lock_release+0xa10/0xa10 [ 993.260696] ? check_same_owner+0x320/0x320 [ 993.265024] ? find_held_lock+0x36/0x1c0 [ 993.269076] ? graph_lock+0x170/0x170 [ 993.272868] ? find_held_lock+0x36/0x1c0 [ 993.276930] ? lock_downgrade+0x8e0/0x8e0 [ 993.281066] ? kasan_check_read+0x11/0x20 [ 993.285204] ? rcu_is_watching+0x85/0x140 [ 993.289349] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 993.294551] ? match_held_lock+0x841/0x8b0 [ 993.298787] ? expand_files.part.8+0x9a0/0x9a0 [ 993.303362] ? kasan_check_write+0x14/0x20 [ 993.307598] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 993.312518] ? wait_for_completion+0x870/0x870 [ 993.317089] ? ext4_ioctl_group_add+0x560/0x560 [ 993.321747] do_vfs_ioctl+0x1cf/0x16a0 [ 993.325628] ? ioctl_preallocate+0x2e0/0x2e0 [ 993.330150] ? fget_raw+0x20/0x20 [ 993.333628] ? __sb_end_write+0xac/0xe0 [ 993.337605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 993.343327] ? fput+0x130/0x1a0 [ 993.346614] ? ksys_write+0x1a6/0x250 [ 993.350466] ? security_file_ioctl+0x94/0xc0 [ 993.354915] ksys_ioctl+0xa9/0xd0 [ 993.358399] __x64_sys_ioctl+0x73/0xb0 [ 993.362289] do_syscall_64+0x1b1/0x800 [ 993.366166] ? finish_task_switch+0x1ca/0x840 [ 993.370669] ? syscall_return_slowpath+0x5c0/0x5c0 [ 993.375665] ? syscall_return_slowpath+0x30f/0x5c0 [ 993.380654] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 993.386056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 993.390938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.396156] RIP: 0033:0x455a09 [ 993.399462] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.407584] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 993.414848] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 993.422119] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 993.429386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 993.436643] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000001d [ 993.463478] binder_alloc: binder_alloc_mmap_handler: 25318 20001000-20004000 already mapped failed -16 [ 993.492667] binder: BINDER_SET_CONTEXT_MGR already set [ 993.524971] binder: 25318:25320 ioctl 40046207 0 returned -16 [ 993.565087] binder: 25318:25356 got transaction to invalid handle [ 993.571524] binder: 25318:25356 transaction failed 29201/-22, size 0-0 line 2856 [ 993.592665] binder: 25318:25356 ioctl c0306201 20007000 returned -14 1970/01/01 00:16:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa00, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r2, &(0x7f00000000c0)=0x640000, 0xffffff90) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:33 executing program 6 (fault-call:1 fault-nth:30): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x1000000000000]}}, 0x20) 1970/01/01 00:16:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:33 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x3, 0x3, 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x8}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 993.626493] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.651247] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.658290] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 993.659215] binder: 25364:25365 got transaction to invalid handle [ 993.673952] binder: 25364:25365 transaction failed 29201/-22, size 536870912-0 line 2856 [ 993.678882] FAULT_INJECTION: forcing a failure. [ 993.678882] name failslab, interval 1, probability 0, space 0, times 0 [ 993.693452] binder: 25364:25375 got transaction to invalid handle [ 993.693941] CPU: 0 PID: 25369 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 993.700225] binder: 25364:25375 transaction failed 29201/-22, size 536870912-0 line 2856 [ 993.707361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1970/01/01 00:16:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0xfffffffffffffffc, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000180)={0x2, 0x0, 0x7f, 0x0, "3ac289651faf2a56ad2a50abde3816c221ebcc81087a541dc496710bb5ed3b9cc1f41846dce82ec82e4f7a6a", 0x6c7}) fcntl$dupfd(r1, 0x406, r1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140)=0x1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0xfffffffffffffe04, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x312, 0x485, 0xfffffffffffffbff, 0x9, 0xfffffffffffffff8, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x10) 1970/01/01 00:16:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 993.707368] Call Trace: [ 993.707400] dump_stack+0x1b9/0x294 [ 993.707421] ? dump_stack_print_info.cold.2+0x52/0x52 [ 993.736415] should_fail.cold.4+0xa/0x1a [ 993.736442] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.740494] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 993.740516] ? print_usage_bug+0xc0/0xc0 [ 993.740534] ? print_usage_bug+0xc0/0xc0 [ 993.740549] ? mark_held_locks+0xc9/0x160 [ 993.740563] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 993.740578] ? _raw_spin_unlock_irq+0x27/0x70 [ 993.740593] ? graph_lock+0x170/0x170 [ 993.746513] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.751131] ? __lock_acquire+0x7f5/0x5140 [ 993.751150] ? kasan_check_write+0x14/0x20 [ 993.751164] ? graph_lock+0x170/0x170 [ 993.751184] ? __lock_is_held+0xb5/0x140 [ 993.751205] __should_failslab+0x124/0x180 [ 993.751223] should_failslab+0x9/0x14 [ 993.751239] kmem_cache_alloc+0x47/0x760 [ 993.810014] ? rcu_note_context_switch+0x710/0x710 [ 993.814944] ? lock_downgrade+0x8e0/0x8e0 [ 993.819111] ? mempool_free+0x370/0x370 [ 993.823078] mempool_alloc_slab+0x44/0x60 [ 993.827227] mempool_alloc+0x18b/0x490 [ 993.831124] ? remove_element.isra.4+0x1c0/0x1c0 [ 993.835877] ? graph_lock+0x170/0x170 [ 993.839678] ? is_bpf_text_address+0xd7/0x170 [ 993.844176] ? kernel_text_address+0x79/0xf0 [ 993.848587] ? __unwind_start+0x166/0x330 [ 993.852725] ? __kernel_text_address+0xd/0x40 [ 993.857245] ? unwind_get_return_address+0x61/0xa0 [ 993.862169] bio_alloc_bioset+0x3a1/0x7f0 [ 993.866305] ? bvec_alloc+0x2d0/0x2d0 [ 993.870097] ? check_same_owner+0x320/0x320 [ 993.874417] submit_bh_wbc+0x155/0x7c0 [ 993.878294] submit_bh+0x28/0x30 [ 993.881667] jbd2_write_superblock+0x584/0xba0 [ 993.886265] ? jbd2_journal_abort+0x30/0x30 [ 993.890579] ? graph_lock+0x170/0x170 [ 993.894368] ? trace_hardirqs_off+0xd/0x10 [ 993.898605] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 993.903700] ? debug_check_no_obj_freed+0x2ff/0x584 [ 993.908709] ? __lock_is_held+0xb5/0x140 [ 993.912759] jbd2_journal_update_sb_log_tail+0x1f2/0x380 [ 993.918214] ? jbd2_journal_get_log_tail+0x550/0x550 [ 993.923325] ? kmem_cache_free+0x25c/0x2d0 [ 993.927565] __jbd2_update_log_tail+0x137/0x640 [ 993.932235] ? jbd2_journal_update_sb_log_tail+0x380/0x380 [ 993.937861] ? bio_put+0x182/0x1f0 [ 993.941409] ? bio_free+0x1a0/0x1a0 [ 993.945036] ? kasan_check_write+0x14/0x20 [ 993.949271] ? do_raw_read_unlock+0x3f/0x60 [ 993.953587] ? blkdev_issue_flush+0x287/0x320 [ 993.958074] jbd2_cleanup_journal_tail+0x198/0x2a0 [ 993.963011] ? jbd2_journal_skip_recovery.cold.13+0x5c/0x5c [ 993.968725] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 993.973308] ? kasan_check_write+0x14/0x20 [ 993.977537] ? do_raw_spin_lock+0xc1/0x200 [ 993.981782] jbd2_log_do_checkpoint+0x9f7/0x1340 [ 993.986528] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 993.992247] ? lock_downgrade+0x8e0/0x8e0 [ 993.996419] ? kasan_check_read+0x11/0x20 [ 994.000552] ? do_raw_spin_unlock+0x9e/0x2e0 [ 994.004956] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 994.009542] ? do_raw_spin_lock+0xc1/0x200 [ 994.013781] jbd2_journal_flush+0x156/0x540 [ 994.018100] ext4_ioctl_group_add+0x251/0x560 [ 994.022603] ? _copy_from_user+0xdf/0x150 [ 994.026749] ext4_ioctl+0x79d/0x4210 [ 994.030456] ? _parse_integer+0x13b/0x190 [ 994.034605] ? ext4_ioctl_group_add+0x560/0x560 [ 994.039273] ? _parse_integer+0x190/0x190 [ 994.043410] ? graph_lock+0x170/0x170 [ 994.047200] ? lock_release+0xa10/0xa10 [ 994.051812] ? check_same_owner+0x320/0x320 [ 994.056125] ? find_held_lock+0x36/0x1c0 [ 994.060172] ? graph_lock+0x170/0x170 [ 994.063958] ? find_held_lock+0x36/0x1c0 [ 994.068016] ? lock_downgrade+0x8e0/0x8e0 [ 994.072161] ? kasan_check_read+0x11/0x20 [ 994.076301] ? rcu_is_watching+0x85/0x140 [ 994.080452] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 994.085640] ? match_held_lock+0x841/0x8b0 [ 994.089862] ? expand_files.part.8+0x9a0/0x9a0 [ 994.094431] ? kasan_check_write+0x14/0x20 [ 994.098666] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 994.103601] ? wait_for_completion+0x870/0x870 [ 994.108175] ? ext4_ioctl_group_add+0x560/0x560 [ 994.112837] do_vfs_ioctl+0x1cf/0x16a0 [ 994.116719] ? ioctl_preallocate+0x2e0/0x2e0 [ 994.121120] ? fget_raw+0x20/0x20 [ 994.124572] ? __sb_end_write+0xac/0xe0 [ 994.128543] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 994.134067] ? fput+0x130/0x1a0 [ 994.137432] ? ksys_write+0x1a6/0x250 [ 994.141228] ? security_file_ioctl+0x94/0xc0 [ 994.145636] ksys_ioctl+0xa9/0xd0 [ 994.149082] __x64_sys_ioctl+0x73/0xb0 [ 994.152957] do_syscall_64+0x1b1/0x800 [ 994.156830] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 994.161659] ? syscall_return_slowpath+0x5c0/0x5c0 [ 994.166576] ? syscall_return_slowpath+0x30f/0x5c0 [ 994.171493] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 994.176848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 994.181678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.186860] RIP: 0033:0x455a09 [ 994.190042] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.197757] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 994.205028] RDX: 0000000020000040 RSI: 0000000040286608 RDI: 0000000000000013 [ 994.212287] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 994.219544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 994.226798] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 000000000000001e 1970/01/01 00:16:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 994.281528] binder: 25379:25380 got transaction to invalid handle [ 994.283096] binder: 25386:25387 got transaction to invalid handle [ 994.287888] binder: 25379:25380 transaction failed 29201/-22, size 0-0 line 2856 [ 994.294161] binder: 25386:25387 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:34 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:34 executing program 6 (fault-call:1 fault-nth:31): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) [ 994.330854] binder: 25379:25380 ioctl c0306201 20007000 returned -14 [ 994.364490] binder_alloc: binder_alloc_mmap_handler: 25379 20001000-20004000 already mapped failed -16 1970/01/01 00:16:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc4e, 0x12, 0x13, 0x11, "b42dc458ecd17f38cba8b9be5ea583305ce2f44da0f1642bc90dd9306f2a5f2863e23152274b6354382e132b8a6c42c218a331efb706b5820d52e0d6abf09cca", "debd54f77fb007647b11768e9829d3c82edec1b19cfe6d65585e83023be2c6ec", [0x3, 0x2]}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 994.376863] binder: 25386:25397 got transaction to invalid handle [ 994.383244] binder: 25386:25397 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x3b000000]}}, 0x20) 1970/01/01 00:16:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)) 1970/01/01 00:16:34 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 994.395602] binder: BINDER_SET_CONTEXT_MGR already set [ 994.395622] binder: 25379:25380 ioctl 40046207 0 returned -16 1970/01/01 00:16:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rtc\x00', 0x218002, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000005c0)) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000140)=0x5) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x20) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x18, 0x6, 0x9, 0x5}) pread64(r1, &(0x7f0000000080)=""/87, 0xfffffc42, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000400)={0xfffffffffffffff7, 0x2, 0xfc6, @empty, 'vlan0\x00'}) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)="6d34e8855b5e4b8ec18b3f4e1f40c031f2fae53e5c676eaece1f5129018fd54059017661b1562a16180c6263b8b9b76584bfca1f628c1dacee4245fdf527a0ca09b51cd5b5dd259fd25b4e7d5d32cdc3bda8", 0x52}, {&(0x7f0000000240)="1015a40506bdfe564ed114b8048d3079daac3f397fe6fa53e4a480948ad9723cae1621c87e09a0315f2ce5b23a87bba51f13c957933d2dea1ae7e9e7060a3add65f88d75a215e22845bd97920b73046056e3ee1f00da24a6887341f106ad49686da64c44f6bae7a1e8d000746523f812ff54d11a2f38e821fbf0ce6db1894f159d864cda381569475ee177fc53f707729529df", 0x93}, {&(0x7f0000000300)="b8447967fdec83649aaec2c8ab36dbe0b6188cbc28fc41ea518365f0f92b7ca28f97f3e53d0535000617b228e9614437b784180f7d30e58e1f21c163962af713edcf7c80afb925ec373a8c24d342f7982187b7807c50297039ad06bc238036f3ca2a73c624771b34c4118ff8ef6abb55e72c3498514c5258e1c814639dcf39fa30ac2702b1cf0363d0c0", 0x8a}, {&(0x7f00000003c0)="217355b2488f6e86fe7a41279fb0a3d9a8bff9e41b5e408096ab15e209316c45dc9b9c", 0x23}, {&(0x7f0000000400)}, {&(0x7f0000000440)="d92aba47afc0aa7440ec1f11215642a780318f17cbd61bbd1eb588724f5dbc18f32864a51dd0ba2399ddd0ac6c5a9c18f40f1b63c99e510c3e89c014dd47dc1910b2f683efbedc30ec4876e8a57062d1261b356f7c03fe6beea7a06eeeb48b0da846bf9d206208141a262e3916c37d046e7a58f5d5de6ca3011ee7362a7916eb6fdef18c6a341e883f82dddee5c76bfb45f7fc523d89759fc2e57cfe9b3c7dbc0523f34af230c3c62cca9592e38f1fc3f652c225f88ad67b2093b77cb964bd97730476e5501d496ded447e2c4794364c7558823f4d3e1f247cd14b9e594c5aaeb7d7f12805da3271484e388b6215", 0xee}], 0x6, 0x5) [ 994.439923] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 994.467848] binder: 25379:25411 got transaction to invalid handle [ 994.467868] binder: 25379:25411 transaction failed 29201/-22, size 0-0 line 2856 [ 994.467894] binder: 25379:25411 ioctl c0306201 20007000 returned -14 [ 994.506884] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.507089] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.566246] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 994.574211] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.574534] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.603810] binder: 25423:25429 got transaction to invalid handle [ 994.603828] binder: 25423:25429 transaction failed 29201/-22, size 536870912-0 line 2856 [ 994.606830] binder: 25423:25430 got transaction to invalid handle [ 994.606848] binder: 25423:25430 transaction failed 29201/-22, size 536870912-0 line 2856 [ 994.723095] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.723255] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:34 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x400c6615, &(0x7f0000000040)) 1970/01/01 00:16:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6c000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100)=0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000240)=@can={0x0, 0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/162, 0xa2}], 0x1, &(0x7f00000003c0)=""/182, 0xb6, 0x8001}, 0x2142) recvfrom$packet(r0, &(0x7f0000000140)=""/211, 0xd3, 0x12141, &(0x7f00000004c0)={0x11, 0xf7, r1, 0x1, 0xfffffffffffffffa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x5a00]}}, 0x20) 1970/01/01 00:16:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) [ 994.894144] binder: 25457:25458 got transaction to invalid handle [ 994.898337] binder: 25462:25464 got transaction to invalid handle [ 994.900463] binder: 25457:25458 transaction failed 29201/-22, size 536870912-0 line 2856 [ 994.915089] binder: 25462:25464 transaction failed 29201/-22, size 0-0 line 2856 [ 994.921615] binder: 25457:25470 got transaction to invalid handle [ 994.928993] binder: 25457:25470 transaction failed 29201/-22, size 536870912-0 line 2856 [ 994.990214] binder: 25462:25464 ioctl c0306201 20007000 returned -14 [ 995.009212] binder_alloc: binder_alloc_mmap_handler: 25462 20001000-20004000 already mapped failed -16 [ 995.063398] binder: BINDER_SET_CONTEXT_MGR already set [ 995.070259] binder: undelivered TRANSACTION_ERROR: 29201 [ 995.071630] binder: 25462:25478 got transaction to invalid handle [ 995.076183] binder: undelivered TRANSACTION_ERROR: 29201 [ 995.082154] binder: 25462:25478 transaction failed 29201/-22, size 0-0 line 2856 [ 995.087856] binder: 25462:25464 ioctl 40046207 0 returned -16 [ 995.099747] binder: 25462:25478 ioctl c0306201 20007000 returned -14 [ 995.129623] binder: undelivered TRANSACTION_ERROR: 29201 [ 995.135558] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000040)) 1970/01/01 00:16:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0xffffffffffffffff]}}, 0x20) 1970/01/01 00:16:36 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x9, 0x9]) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x1000, 0x4) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:36 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x74, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 996.088449] binder: 25494:25506 got transaction to invalid handle [ 996.094880] binder: 25494:25506 transaction failed 29201/-22, size 536870912-0 line 2856 [ 996.111972] binder: 25501:25502 got transaction to invalid handle [ 996.118356] binder: 25501:25502 transaction failed 29201/-22, size 0-0 line 2856 1970/01/01 00:16:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={r0, 0x6, 0x0, 0x1000, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) 1970/01/01 00:16:36 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)) 1970/01/01 00:16:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x8008]}}, 0x20) [ 996.165189] binder: 25501:25502 ioctl c0306201 20007000 returned -14 1970/01/01 00:16:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 996.248110] binder: 25494:25529 got transaction to invalid handle [ 996.254479] binder: 25494:25529 transaction failed 29201/-22, size 536870912-0 line 2856 [ 996.255510] binder_alloc: binder_alloc_mmap_handler: 25501 20001000-20004000 already mapped failed -16 1970/01/01 00:16:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100)=0xfeca, 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000240)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x5451, &(0x7f0000000040)) [ 996.389790] binder: undelivered TRANSACTION_ERROR: 29201 [ 996.403423] binder: undelivered TRANSACTION_ERROR: 29201 [ 996.410333] binder: BINDER_SET_CONTEXT_MGR already set [ 996.411402] binder: 25501:25531 got transaction to invalid handle [ 996.422152] binder: 25501:25531 transaction failed 29201/-22, size 0-0 line 2856 [ 996.437291] binder: 25501:25502 ioctl 40046207 0 returned -16 [ 996.466350] binder: 25501:25531 ioctl c0306201 20007000 returned -14 [ 996.521234] binder: undelivered TRANSACTION_ERROR: 29201 [ 996.526802] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:37 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7400000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x2000000000000]}}, 0x20) 1970/01/01 00:16:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0xfffffffffffffff8, 0x100, 0x0, 0x101, 0x100000000, 0x80}) 1970/01/01 00:16:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x5421, &(0x7f0000000040)) 1970/01/01 00:16:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x200, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80000, 0x0) r2 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0xca, "0f66bf13df15a40e0fc79748df637985fe73b7a303a9d65bf4fb6346f10afb023e96eaf02a5d69320661c29a3d8871f486eea04be98c3ed69a1b88732a07c2b73c1d08186a6974a7169a93ba5c313ad0fa302a4a506973467fea2543801fde2b71042a3e32923fecb28fd60ef0c02de12e4578d682a11bd2dffad73b7a4f33745a7a2a8e3327ccb2c381693f401ac93fa0b13750d9049ebab88fe853cbaa8d08064766b568dbece2168c7f04c9501e88245d232f3e60cda127873d6916209d304922b13292d333e84775"}, &(0x7f0000000140)=0xd2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r4, 0x8440}, &(0x7f00000003c0)=0x8) fallocate(r3, 0x1, 0x0, 0xb7c) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000200)="9b1c39401e37bdbcb5d2955899b60466987c17924055cac2b59973ce1cabf9fd3fcef4f6deccfd3fc084ac2c756a65c17fb52d73292555a412030e6cd1b8cd58150bdfcb339b0162675a910c14ea07bae255f7ef14079b30610ca9f48047331a2915ac206406b55d717a272df3b6e70ec6c16c09bd4797a1fe7d969a72c5d8d669c30e085ac3ca75aa23b5a7b24d09890b2a8fcb413c9802dcb81cf555f7f3a615d468799935c5391d83d29eac372d371ab3501c609fe5611ec0ee29cd85aa469e299ddea38892e37e1c0058b45c47979792e7a336ff1d41de3b4314a87474dd25b3160238f4d17dccce72521dbec3") dup(r2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x2}) 1970/01/01 00:16:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 997.292720] binder: 25569:25571 transaction failed 29189/-22, size 536870912-0 line 2856 [ 997.304204] binder: 25570:25574 got transaction to invalid handle [ 997.310548] binder: 25570:25574 transaction failed 29201/-22, size 0-0 line 2856 1970/01/01 00:16:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0x801c581f, &(0x7f0000000040)) 1970/01/01 00:16:37 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000", @ANYRES32=0xffffffff, @ANYBLOB="000001001b000001000000081d2960ccadc37e889d5f5e0e29190eee0000000000000004000000000000000838000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xa0) write$rdma_cm(r0, &(0x7f0000000e00)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000dc0), 0x13f, 0x100f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000000000020000000072d83d3336cd5125b83a756beb80243c293e56a33773a466e5ba9c7b648c05f6aa4a0d05de47729e395b979557dc2c9d459952ced733c1551429e3ec95697bded00eeb39b2c40adf6fc6065815c2e61acb3cdb95b754ff42f2f5a0472fdfcb8076ff0b0f0d2f19214d6671d8f802b87079db72fd1de863024beb34235433b3dd9af763a12328e884f133328e9e57e15b1368933d3b992a13dede2a15a169b23e21f74e0382352fb7159f53a9c268211858f552457877c010b1f2319a1d2c182055296a5f9015371d21a8fc97a5335e70194180db34e0b7657367", @ANYPTR=&(0x7f0000001d40)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200040000000000"], 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@loopback, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) recvfrom$packet(r0, &(0x7f0000000240)=""/189, 0xbd, 0x2000, &(0x7f0000000680)={0x11, 0x17, r1, 0x1, 0x4, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) write$rdma_cm(r0, &(0x7f0000003d00)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000003cc0)={0xffffffff}, 0x0, 0x8}}, 0x20) write$rdma_cm(r0, &(0x7f0000003fc0)=@resolve_addr={0x15, 0x110, 0xfa00, {r2, 0xfffffffffffffffa, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xc9ec, @loopback={0x0, 0x1}, 0xff}, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x5}}, 0x1000}}}, 0xfffffffffffffddb) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000300)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) readahead(r3, 0x7, 0x80000004) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='team_slave_0\x00', 0x10) r4 = add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000600)='/dev/rtc\x00', r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000740)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000700)='team_slave_0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x81, 0x99f3, 0xa0, 0xf71, 0x8}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) r6 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x4, r5, r6}, {0x3ba2, 0x1, 0x10000, 0x2, 0x1, 0x57, 0xfffffffffffffff8, 0x59}, {0x1, 0xa29, 0x8000}, 0x46b, 0x6e6bbd, 0x1, 0x1, 0x3, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d5, 0x2b}, 0x2, @in6, 0x3502, 0x3, 0x3, 0x1f, 0x1, 0x1, 0x4}}, 0xe8) syz_open_dev$mice(&(0x7f0000000ac0)='/dev/input/mice\x00', 0x0, 0x20040) timerfd_gettime(r0, &(0x7f00000006c0)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x800800000000]}}, 0x20) 1970/01/01 00:16:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 997.344974] binder: 25569:25581 transaction failed 29201/-28, size 536870912-0 line 2971 [ 997.364528] binder: 25570:25574 ioctl c0306201 20007000 returned -14 [ 997.431131] binder_alloc: binder_alloc_mmap_handler: 25570 20001000-20004000 already mapped failed -16 1970/01/01 00:16:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2000000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286612, &(0x7f0000000040)) [ 997.490400] binder: undelivered TRANSACTION_ERROR: 29201 [ 997.496536] binder: undelivered TRANSACTION_ERROR: 29189 [ 997.503145] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 997.542177] binder: 25570:25574 ioctl 40046207 0 returned -16 [ 997.567613] binder_alloc: 25570: binder_alloc_buf, no vma [ 997.571894] binder: 25570:25593 got transaction to invalid handle [ 997.573345] binder: 25608:25609 transaction failed 29189/-3, size 536870912-0 line 2971 1970/01/01 00:16:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x80086601, &(0x7f0000000040)) 1970/01/01 00:16:37 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, &(0x7f00000ddff8), 0x102000001) [ 997.579582] binder: 25570:25593 transaction failed 29201/-22, size 0-0 line 2856 [ 997.590822] binder: 25570:25593 ioctl c0306201 20007000 returned -14 [ 997.701357] binder: undelivered TRANSACTION_ERROR: 29201 [ 997.707837] binder: undelivered TRANSACTION_ERROR: 29201 [ 997.736109] binder_alloc: 25570: binder_alloc_buf, no vma [ 997.741847] binder: 25608:25628 transaction failed 29189/-3, size 536870912-0 line 2971 [ 997.776432] binder: undelivered TRANSACTION_ERROR: 29189 [ 997.782485] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:16:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) accept4$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'eql\x00', 0x8}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x7900]}}, 0x20) 1970/01/01 00:16:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x80087601, &(0x7f0000000040)) 1970/01/01 00:16:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x0) 1970/01/01 00:16:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r0, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 998.461137] binder: 25636:25638 transaction failed 29189/-22, size 536870912-0 line 2856 [ 998.474495] binder: 25641:25642 ioctl c0306201 20007000 returned -14 1970/01/01 00:16:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) readahead(r0, 0x4, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x541b, &(0x7f0000000040)) [ 998.513626] binder_alloc: binder_alloc_mmap_handler: 25641 20001000-20004000 already mapped failed -16 [ 998.527184] binder_alloc: 25641: binder_alloc_buf, no vma [ 998.532885] binder: 25636:25659 transaction failed 29189/-3, size 536870912-0 line 2971 1970/01/01 00:16:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x78]}}, 0x20) [ 998.559171] binder: BINDER_SET_CONTEXT_MGR already set [ 998.564887] binder: 25641:25642 ioctl 40046207 0 returned -16 1970/01/01 00:16:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x0) 1970/01/01 00:16:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x7a00000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc020660b, &(0x7f0000000040)) [ 998.617281] binder_alloc: 25641: binder_alloc_buf, no vma [ 998.623010] binder: 25641:25657 transaction failed 29189/-3, size 0-0 line 2971 [ 998.641154] binder: undelivered TRANSACTION_ERROR: 29189 [ 998.649226] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:16:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000040)) [ 998.698574] binder: 25641:25657 ioctl c0306201 20007000 returned -14 [ 998.709115] binder_alloc: 25641: binder_alloc_buf, no vma [ 998.714809] binder: 25681:25682 transaction failed 29189/-3, size 536870912-0 line 2971 [ 998.785039] binder_alloc: 25641: binder_alloc_buf, no vma [ 998.790773] binder: 25681:25694 transaction failed 29189/-3, size 536870912-0 line 2971 [ 998.795785] binder: undelivered TRANSACTION_ERROR: 29189 [ 998.821449] binder: undelivered TRANSACTION_COMPLETE [ 998.835131] binder: undelivered transaction 1301, process died. [ 998.895489] binder: undelivered TRANSACTION_ERROR: 29189 [ 998.901086] binder: undelivered TRANSACTION_ERROR: 29189 1970/01/01 00:16:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/182}, 0x18) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @loopback}, &(0x7f0000001280)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001500)=@assoc_value, &(0x7f0000001540)=0x8) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r0, 0x50, &(0x7f00000012c0)={0x0, 0x0}}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000001440)={{0xa, 0x4e21, 0x8, @loopback={0x0, 0x1}, 0x8}, {0xa, 0x4e21, 0xfffffffffffffffe, @dev={0xfe, 0x80, [], 0x14}, 0x1000}, 0x61, [0xfffffffffffffff7, 0x4, 0x3, 0x2, 0xfffffffffffffffe, 0x5, 0xfdb, 0x1]}, 0x5c) r2 = gettid() migrate_pages(r2, 0x5, &(0x7f00000013c0)=0x5, &(0x7f0000001400)=0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001380)=r1, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000014c0)={0xaa, 0xc}) 1970/01/01 00:16:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x60]}}, 0x20) 1970/01/01 00:16:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286610, &(0x7f0000000040)) 1970/01/01 00:16:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x0) 1970/01/01 00:16:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ptrace$peek(0xffffffffffffffff, r2, &(0x7f0000000180)) fallocate(r1, 0x1, 0x0, 0x101) 1970/01/01 00:16:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x60000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x800c6613, &(0x7f0000000040)) [ 999.588371] binder: 25715:25716 got transaction to invalid handle [ 999.594768] binder: 25715:25716 transaction failed 29201/-22, size 536870912-0 line 2856 [ 999.615770] binder: 25721:25723 got transaction to invalid handle [ 999.622149] binder: 25721:25723 transaction failed 29201/-22, size 0-0 line 2856 1970/01/01 00:16:39 executing program 7 (fault-call:4 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0xfffffffffffffffe, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000b40)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r1, &(0x7f0000000c40)=@bind={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x90) modify_ldt$read(0x0, &(0x7f0000000180)=""/114, 0x72) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}}, 0x20) [ 999.685691] binder: 25715:25733 got transaction to invalid handle [ 999.692181] binder: 25715:25733 transaction failed 29201/-22, size 536870912-0 line 2856 [ 999.696112] binder: 25721:25723 ioctl c0306201 20007000 returned -14 [ 999.759523] FAULT_INJECTION: forcing a failure. [ 999.759523] name failslab, interval 1, probability 0, space 0, times 0 [ 999.770947] CPU: 1 PID: 25743 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 999.778238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.787606] Call Trace: [ 999.790220] dump_stack+0x1b9/0x294 [ 999.793870] ? dump_stack_print_info.cold.2+0x52/0x52 [ 999.794346] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.799084] ? debug_check_no_locks_freed+0x310/0x310 [ 999.799103] ? debug_check_no_locks_freed+0x310/0x310 [ 999.799127] should_fail.cold.4+0xa/0x1a [ 999.799145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 999.799165] ? perf_trace_lock+0xd6/0x900 [ 999.820703] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.824130] ? debug_check_no_locks_freed+0x310/0x310 [ 999.824156] ? find_held_lock+0x36/0x1c0 [ 999.824198] ? check_same_owner+0x320/0x320 [ 999.824217] ? rcu_note_context_switch+0x710/0x710 [ 999.852299] __should_failslab+0x124/0x180 [ 999.856565] should_failslab+0x9/0x14 [ 999.860376] kmem_cache_alloc_trace+0x2cb/0x780 [ 999.865073] alloc_pipe_info+0x16d/0x580 [ 999.869146] ? pipe_read+0x940/0x940 [ 999.872874] ? __fget+0x40c/0x650 [ 999.876353] ? expand_files.part.8+0x9a0/0x9a0 [ 999.880946] ? find_held_lock+0x36/0x1c0 [ 999.884364] binder_alloc: binder_alloc_mmap_handler: 25721 20001000-20004000 already mapped failed -16 [ 999.886011] splice_direct_to_actor+0x6e7/0x8d0 [ 999.886031] ? pipe_to_sendpage+0x3f0/0x3f0 [ 999.886043] ? lock_downgrade+0x8e0/0x8e0 [ 999.886067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.914275] ? do_splice_to+0x190/0x190 [ 999.918398] ? rw_verify_area+0x118/0x360 [ 999.922566] do_splice_direct+0x2cc/0x400 [ 999.926739] ? splice_direct_to_actor+0x8d0/0x8d0 [ 999.931608] ? rw_verify_area+0x118/0x360 [ 999.935777] do_sendfile+0x60f/0xe00 [ 999.939524] ? do_compat_pwritev64+0x1b0/0x1b0 [ 999.944129] ? __might_sleep+0x95/0x190 [ 999.948131] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 999.953434] binder: BINDER_SET_CONTEXT_MGR already set 1970/01/01 00:16:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x68000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40106614, &(0x7f0000000040)) [ 999.953683] ? _copy_from_user+0xdf/0x150 [ 999.963107] __x64_sys_sendfile64+0x155/0x240 [ 999.967623] ? __ia32_sys_sendfile+0x290/0x290 [ 999.972225] ? do_syscall_64+0x92/0x800 [ 999.976228] do_syscall_64+0x1b1/0x800 [ 999.980127] ? finish_task_switch+0x1ca/0x840 [ 999.984650] ? syscall_return_slowpath+0x5c0/0x5c0 [ 999.989600] ? syscall_return_slowpath+0x30f/0x5c0 [ 999.994551] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 999.999943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1000.001729] binder: 25721:25759 got transaction to invalid handle [ 1000.004805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.004818] RIP: 0033:0x455a09 [ 1000.004825] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1000.004841] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1000.004851] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 [ 1000.004861] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.004870] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1000.004880] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 1000.010772] binder: 25721:25756 ioctl 40046207 0 returned -16 [ 1000.011433] binder: 25721:25759 transaction failed 29201/-22, size 0-0 line 2856 [ 1000.089662] binder: 25753:25754 got transaction to invalid handle [ 1000.096066] binder: 25753:25754 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1000.107673] binder: 25721:25759 ioctl c0306201 20007000 returned -14 [ 1000.114755] binder: 25753:25767 got transaction to invalid handle [ 1000.121136] binder: 25753:25767 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1000.162947] binder: undelivered TRANSACTION_ERROR: 29201 [ 1000.168576] binder: undelivered TRANSACTION_ERROR: 29201 [ 1000.185211] binder: undelivered TRANSACTION_ERROR: 29201 [ 1000.194176] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:40 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0xd00]}}, 0x20) 1970/01/01 00:16:40 executing program 7 (fault-call:4 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40087602, &(0x7f0000000040)) 1970/01/01 00:16:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000140)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x68000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x1000, 0x3, 0x8, 0x7fff}, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 1000.979501] binder: 25783:25784 got transaction to invalid handle [ 1000.981271] binder: 25788:25789 got transaction to invalid handle [ 1000.985976] binder: 25783:25784 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1000.992271] binder: 25788:25789 transaction failed 29201/-22, size 0-0 line 2856 [ 1001.015642] FAULT_INJECTION: forcing a failure. [ 1001.015642] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.026964] CPU: 1 PID: 25782 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 1001.033226] binder: 25783:25798 got transaction to invalid handle [ 1001.034255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.034261] Call Trace: [ 1001.034287] dump_stack+0x1b9/0x294 [ 1001.034313] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1001.040591] binder: 25783:25798 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1001.049901] ? __save_stack_trace+0x7e/0xd0 [ 1001.049925] should_fail.cold.4+0xa/0x1a [ 1001.049944] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1001.049960] ? save_stack+0x43/0xd0 [ 1001.049976] ? kasan_kmalloc+0xc4/0xe0 [ 1001.090566] ? kmem_cache_alloc_trace+0x152/0x780 [ 1001.095423] ? alloc_pipe_info+0x16d/0x580 [ 1001.099676] ? splice_direct_to_actor+0x6e7/0x8d0 [ 1001.104536] ? do_sendfile+0x60f/0xe00 [ 1001.108432] ? __x64_sys_sendfile64+0x155/0x240 [ 1001.113110] ? do_syscall_64+0x1b1/0x800 [ 1001.117183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.122562] ? find_held_lock+0x36/0x1c0 [ 1001.126644] ? bfq_init_queue+0x330/0x1290 [ 1001.130903] ? check_same_owner+0x320/0x320 [ 1001.135238] ? rcu_is_watching+0x85/0x140 [ 1001.139396] ? rcu_note_context_switch+0x710/0x710 [ 1001.142208] binder: 25788:25789 ioctl c0306201 20007000 returned -14 [ 1001.144331] __should_failslab+0x124/0x180 [ 1001.144351] should_failslab+0x9/0x14 [ 1001.144367] __kmalloc+0x2c8/0x760 [ 1001.144385] ? kmem_cache_alloc_trace+0x616/0x780 [ 1001.167255] ? alloc_pipe_info+0x2a0/0x580 [ 1001.171511] alloc_pipe_info+0x2a0/0x580 1970/01/01 00:16:41 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4c000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 1001.172347] binder_alloc: binder_alloc_mmap_handler: 25788 20001000-20004000 already mapped failed -16 [ 1001.175581] ? pipe_read+0x940/0x940 [ 1001.175601] ? __fget+0x40c/0x650 [ 1001.175624] ? expand_files.part.8+0x9a0/0x9a0 [ 1001.175639] ? find_held_lock+0x36/0x1c0 [ 1001.175660] splice_direct_to_actor+0x6e7/0x8d0 [ 1001.175676] ? pipe_to_sendpage+0x3f0/0x3f0 [ 1001.175694] ? lock_downgrade+0x8e0/0x8e0 [ 1001.189170] binder: undelivered TRANSACTION_ERROR: 29201 [ 1001.192362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.192380] ? do_splice_to+0x190/0x190 [ 1001.192398] ? rw_verify_area+0x118/0x360 [ 1001.192418] do_splice_direct+0x2cc/0x400 [ 1001.192437] ? splice_direct_to_actor+0x8d0/0x8d0 [ 1001.192454] ? rw_verify_area+0x118/0x360 [ 1001.192469] do_sendfile+0x60f/0xe00 [ 1001.200645] binder: undelivered TRANSACTION_ERROR: 29201 [ 1001.201117] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1001.201134] ? __might_sleep+0x95/0x190 [ 1001.201156] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1001.234631] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.237454] ? _copy_from_user+0xdf/0x150 [ 1001.237478] __x64_sys_sendfile64+0x155/0x240 [ 1001.237495] ? __ia32_sys_sendfile+0x290/0x290 [ 1001.237514] ? do_syscall_64+0x92/0x800 [ 1001.237534] do_syscall_64+0x1b1/0x800 [ 1001.237554] ? finish_task_switch+0x1ca/0x840 [ 1001.265644] binder: 25788:25805 got transaction to invalid handle [ 1001.269740] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1001.269759] ? syscall_return_slowpath+0x30f/0x5c0 [ 1001.269780] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1001.269799] ? trace_hardirqs_off_thunk+0x1a/0x1c 1970/01/01 00:16:41 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0x660c, &(0x7f0000000040)) 1970/01/01 00:16:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x1fe, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000200)={0x303, 0x33}, 0x4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xb529}, 0x4) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 1001.269820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.269831] RIP: 0033:0x455a09 [ 1001.269839] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1001.269855] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1001.269862] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 [ 1001.269868] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1001.269875] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1001.269882] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000001 1970/01/01 00:16:41 executing program 7 (fault-call:4 fault-nth:2): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 1001.304142] binder: 25788:25789 ioctl 40046207 0 returned -16 [ 1001.307350] binder: 25788:25805 transaction failed 29201/-22, size 0-0 line 2856 [ 1001.372391] binder: 25810:25811 got transaction to invalid handle [ 1001.395599] binder: 25788:25805 ioctl c0306201 20007000 returned -14 [ 1001.400112] binder: 25810:25811 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1001.418495] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x3f00]}}, 0x20) [ 1001.447429] binder: undelivered TRANSACTION_ERROR: 29201 [ 1001.507736] FAULT_INJECTION: forcing a failure. [ 1001.507736] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.519126] CPU: 1 PID: 25830 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 1001.526413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.535775] Call Trace: [ 1001.538382] dump_stack+0x1b9/0x294 [ 1001.542030] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1001.547239] ? __save_stack_trace+0x7e/0xd0 [ 1001.551576] should_fail.cold.4+0xa/0x1a 1970/01/01 00:16:41 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x4020940d, &(0x7f0000000040)) 1970/01/01 00:16:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) recvmsg$netrom(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@ax25={0x3, {"cf072c0d10e2bc"}, 0x67a}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000180)="656a7f7199a5809cc449f709d7c0e09bff425cf25e00323fcbb6f1d7467e4a93b28922369cc274ac71a62e8ab3f452c6c148ef47685134674ad5e2ef0163ea617308bb8a43baacf92e441ace89f3ebfc424c60b7a52b92973c84fd0f73c27eefe99a0cdac3f4e4c4222552e1edd94e4bebbbad5e6e45e38189e5d75a80e5e3d203d04a142b7c94c867ae643b272200a2955c41fed6dcaa5c6e6b5045ed8368d6549f5c3c944dc009683c8f8db717367bf8158132c8c236f9d3263f5af8f823e9880f508cd82b339877d2a7d939271c05db7f2c988da6fd00a73a78810b2c2c2d1ad44c6b6206b80ac40f4e443b05eb65232eba77c5", 0xf5}, {&(0x7f0000000280)="c969df8e6f832790a420831ed5c6b3031398e5a6dd0093ec5148ef47554c3e63a8af6dbfcf0faa09ead0e4353b8a8995005847922c82c180c852f8ffb06b028c583b17894f64c6ac6e98e3e425c3d484d8f1bb472238f191f7a5fec08e3cd54e904eabcb699eb84e73b0ee4dc62895daea87154bf9ed2cd69db1d5a5b1243c2756b24de4f16cd6f954d5185af0442d9dd6861762f8b8aead62e415ab9ec428ebd8ce5a2e5862aefda92b3989565a7b1fccaa3d", 0xb3}, {&(0x7f0000000340)="bd5445cff5591880f189173ce8023a230b02b7cb0f072942a3c31f96c10cd5e78df41ba0c7d9389df40acbf544471ceb0545406a044e31dcbb8886637b133693db54d1b613186996fc42ab8a1881b72943ccf7fe34524c2ac5765898105e251652349c24504c80bc4ed0ac75ca80d991d34f02f62bcbf26555ccbc804bd142227f25c9ea26133518102d4d1d515abc9407fe3100e8835b9f3037ee8be24c40e4c63a95b49aa5f3c6", 0xa8}, {&(0x7f0000000400)="2465fe042702ec3de6f661246f5a34bc7112da45b5a32a7f534db50ce0acc75ad4a5a079ed927838bf8927d40b427399e898fde0d897e5be9dba9cc460c3427894e7ab6806645ca210216ba0a0ef597021191de828b74b4eaa3ff58cf12e82ed135c51a84c4d6a3c432e690234db74d64d3a623be428fd594da386bc6597888644a97c986655cd70c71e7111ee631a88d333a3a982430e06e8d6c7454c08b965e5f4cfcc592317442b26566f54fde4bc4c13c7a80f6e417a47f013b58515edfb702bbf4fb91e0f751d2533a0d859e782692448715a13b8f055dd755863800b53cd63bac4524d4eac52e4be727f981ec838122d", 0xf3}, {&(0x7f0000000500)="f799f264542fa2fb2170e300576b70bbc40b57dfb637b87aba7ae406bd4ba5e22895d88e2fe6a879bb99986421809a15c44d33692332eb486a355c5a2cec33a56f54f80112812784774500f124b086303c5e922c359e80ea2397c65186a3f38b3f55ed99b51f2b2fdcc4a70070c5e852c77099c25a2e43531ac35cd89b719da23a7a41d9f5030fb359189b2d0087462c50fef6ad23bbe1ada9c5255dcac0", 0x9e}], 0x5, &(0x7f0000000640)=[{0xb8, 0x10f, 0x1, "8ed201e5f20baf1310509ca783d8329031a87416785c14217f6ef04687fbf9341601cc1a71f84557f73df828d80c913237943746122b16e4ff6c3ecd64b378ae6b655c5f59f95b592ba7341e0991b74877f1572ea2206365fc28097bdaca535193e4c9e2c491f098a67bcdc097c87c11b690870ef8a87c2f03b875c98b275ad13e2536b57898cfb9fad90dcf885518b0f2c2bc95e9171e903667035898837aab87"}, {0xc0, 0x10f, 0x8ec, "338bd470f16bf776f346c7db9247cc16bc2c4f8acbf5777c3ce3fada8f86649936badab67a8c7c47c3e777670eef1a74970179145e2f1a733aca01ca0f5127f201342ae15fdd110f9bb14ae81ba4ef22590c0933c742edc1159c3e4cd40c0a22ae1f7e8ab78a4c339d4aa59f017f1e94973484397ef6df52bc8b7d23b449641cd5365b6ffb2ac973be9bcc145cd580af1cb60dcb9eea05b7da4a87f6edcf585638e71c57eda96a6541cf229e77af"}], 0x178, 0x4}, 0x100) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000800)={0x2, 0x2, 0x100000001, 0x101, 0x4, 0x59b1}) [ 1001.555656] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1001.560772] ? save_stack+0x43/0xd0 [ 1001.564407] ? kasan_kmalloc+0xc4/0xe0 [ 1001.568339] ? kmem_cache_alloc_trace+0x152/0x780 [ 1001.573192] ? alloc_pipe_info+0x16d/0x580 [ 1001.577444] ? splice_direct_to_actor+0x6e7/0x8d0 [ 1001.582302] ? do_sendfile+0x60f/0xe00 [ 1001.586207] ? __x64_sys_sendfile64+0x155/0x240 [ 1001.590888] ? do_syscall_64+0x1b1/0x800 [ 1001.594962] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.600342] ? find_held_lock+0x36/0x1c0 [ 1001.604443] ? check_same_owner+0x320/0x320 [ 1001.608796] ? rcu_is_watching+0x85/0x140 [ 1001.611427] binder: 25828:25832 got transaction to invalid handle [ 1001.612958] ? rcu_note_context_switch+0x710/0x710 [ 1001.612980] __should_failslab+0x124/0x180 [ 1001.613000] should_failslab+0x9/0x14 [ 1001.613016] __kmalloc+0x2c8/0x760 [ 1001.613030] ? kmem_cache_alloc_trace+0x616/0x780 [ 1001.613046] ? alloc_pipe_info+0x2a0/0x580 [ 1001.613060] alloc_pipe_info+0x2a0/0x580 [ 1001.613075] ? pipe_read+0x940/0x940 [ 1001.619348] binder: 25828:25832 transaction failed 29201/-22, size 0-0 line 2856 [ 1001.624235] ? __fget+0x40c/0x650 [ 1001.624257] ? expand_files.part.8+0x9a0/0x9a0 [ 1001.624272] ? find_held_lock+0x36/0x1c0 [ 1001.624293] splice_direct_to_actor+0x6e7/0x8d0 [ 1001.659637] binder: 25828:25832 ioctl c0306201 20007000 returned -14 [ 1001.660215] ? pipe_to_sendpage+0x3f0/0x3f0 [ 1001.660231] ? lock_downgrade+0x8e0/0x8e0 [ 1001.660252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1001.660268] ? do_splice_to+0x190/0x190 [ 1001.660285] ? rw_verify_area+0x118/0x360 [ 1001.660300] do_splice_direct+0x2cc/0x400 [ 1001.660319] ? splice_direct_to_actor+0x8d0/0x8d0 [ 1001.675639] binder_alloc: binder_alloc_mmap_handler: 25828 20001000-20004000 already mapped failed -16 [ 1001.677060] ? rw_verify_area+0x118/0x360 [ 1001.677078] do_sendfile+0x60f/0xe00 [ 1001.677101] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1001.677118] ? __might_sleep+0x95/0x190 [ 1001.677143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1001.677160] ? _copy_from_user+0xdf/0x150 [ 1001.677176] __x64_sys_sendfile64+0x155/0x240 1970/01/01 00:16:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0x4030582a, &(0x7f0000000040)) 1970/01/01 00:16:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0xffffffffffffffff, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) [ 1001.677197] ? __ia32_sys_sendfile+0x290/0x290 [ 1001.685395] binder: 25810:25839 got transaction to invalid handle [ 1001.688006] ? do_syscall_64+0x92/0x800 [ 1001.688027] do_syscall_64+0x1b1/0x800 [ 1001.688043] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1001.688059] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1001.688073] ? syscall_return_slowpath+0x30f/0x5c0 [ 1001.688091] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1001.692272] binder: 25810:25839 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1001.697769] ? trace_hardirqs_off_thunk+0x1a/0x1c 1970/01/01 00:16:41 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 1001.697788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.697799] RIP: 0033:0x455a09 [ 1001.697806] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1001.697819] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1001.697827] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 [ 1001.697840] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1001.709831] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.710078] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1001.710088] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000002 [ 1001.757686] binder: 25828:25848 got transaction to invalid handle [ 1001.872198] binder: 25828:25848 transaction failed 29201/-22, size 0-0 line 2856 [ 1001.881102] binder: 25828:25848 ioctl c0306201 20007000 returned -14 [ 1001.909243] binder: 25828:25832 ioctl 40046207 0 returned -16 [ 1001.956716] binder: undelivered TRANSACTION_ERROR: 29201 [ 1001.962381] binder: undelivered TRANSACTION_ERROR: 29201 [ 1002.019781] binder: undelivered TRANSACTION_ERROR: 29201 [ 1002.025911] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0189436, &(0x7f0000000040)) 1970/01/01 00:16:42 executing program 7 (fault-call:4 fault-nth:3): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x101000, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x40400, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ptrace(0x4218, r3) socket$inet_sctp(0x2, 0x5, 0x84) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', &(0x7f0000000280)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xff, 0x5, 0xff, 0x8, 0x8, 0x5, 0x4, 0x6, 0xfffffffffffffffb, 0x16d, 0x40e00000000000, 0x6}) uname(&(0x7f00000002c0)=""/214) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fallocate(r2, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x8004]}}, 0x20) 1970/01/01 00:16:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x48, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:42 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 1002.507213] binder: 25894:25895 got transaction to invalid handle [ 1002.511255] binder: 25886:25887 got transaction to invalid handle [ 1002.513589] binder: 25894:25895 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1002.519801] binder: 25886:25887 transaction failed 29201/-22, size 0-0 line 2856 [ 1002.553366] FAULT_INJECTION: forcing a failure. [ 1002.553366] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.561346] binder: 25886:25887 ioctl c0306201 20007000 returned -14 [ 1002.565063] CPU: 0 PID: 25897 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 1002.565136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.588273] Call Trace: [ 1002.590882] dump_stack+0x1b9/0x294 [ 1002.594541] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1002.599746] ? rb_erase_cached+0xc6a/0x32a0 1970/01/01 00:16:42 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 1002.601949] binder: 25894:25905 got transaction to invalid handle [ 1002.604079] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1002.604104] should_fail.cold.4+0xa/0x1a [ 1002.604123] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1002.604144] ? __save_stack_trace+0x7e/0xd0 [ 1002.604163] ? print_usage_bug+0xc0/0xc0 [ 1002.610426] binder: 25894:25905 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1002.615580] ? debug_check_no_locks_freed+0x310/0x310 [ 1002.615594] ? print_usage_bug+0xc0/0xc0 [ 1002.615607] ? __lock_acquire+0x7f5/0x5140 1970/01/01 00:16:42 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) [ 1002.615646] ? print_usage_bug+0xc0/0xc0 [ 1002.636794] binder_alloc: binder_alloc_mmap_handler: 25886 20001000-20004000 already mapped failed -16 [ 1002.641366] ? shmem_getpage_gfp+0x800/0x4190 [ 1002.641381] ? shmem_write_begin+0x110/0x1e0 [ 1002.641402] ? __lock_acquire+0x7f5/0x5140 [ 1002.641417] ? print_usage_bug+0xc0/0xc0 [ 1002.641440] __should_failslab+0x124/0x180 [ 1002.689783] should_failslab+0x9/0x14 [ 1002.693599] kmem_cache_alloc+0x47/0x760 [ 1002.697675] ? __lock_acquire+0x7f5/0x5140 [ 1002.701923] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 1002.707654] __radix_tree_create+0x4ce/0x820 [ 1002.712083] ? radix_tree_maybe_preload_order+0x110/0x110 [ 1002.716511] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.717645] ? graph_lock+0x170/0x170 [ 1002.717668] ? kasan_check_read+0x11/0x20 [ 1002.717685] ? rcu_is_watching+0x85/0x140 [ 1002.735032] ? find_held_lock+0x36/0x1c0 [ 1002.739088] __radix_tree_insert+0xff/0x8d0 [ 1002.743397] ? graph_lock+0x170/0x170 [ 1002.747185] ? __radix_tree_create+0x820/0x820 [ 1002.751754] ? lock_acquire+0x1dc/0x520 [ 1002.755715] ? shmem_add_to_page_cache+0x494/0xdf0 [ 1002.760635] ? lock_release+0xa10/0xa10 [ 1002.764619] ? kasan_check_write+0x14/0x20 [ 1002.768848] ? do_raw_spin_lock+0xc1/0x200 [ 1002.773075] shmem_add_to_page_cache+0x96d/0xdf0 [ 1002.777818] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1002.782999] ? shmem_put_link+0x270/0x270 [ 1002.787137] ? percpu_ref_put_many+0x132/0x230 [ 1002.791716] ? percpu_ref_tryget+0x2b0/0x2b0 [ 1002.796116] ? find_lock_entry+0x2db/0x8a0 [ 1002.800350] ? mem_cgroup_try_charge+0x52f/0xa40 [ 1002.805095] ? mem_cgroup_low+0x1d0/0x1d0 [ 1002.809239] ? security_vm_enough_memory_mm+0x9d/0xc0 [ 1002.814417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1002.819939] ? shmem_alloc_and_acct_page+0x312/0x800 [ 1002.825031] ? shmem_alloc_hugepage+0x5e0/0x5e0 [ 1002.829687] ? __save_stack_trace+0x7e/0xd0 [ 1002.833997] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1002.839011] ? __radix_tree_preload+0x173/0x1d0 [ 1002.843676] shmem_getpage_gfp+0x800/0x4190 [ 1002.847983] ? __lock_acquire+0x7f5/0x5140 [ 1002.852203] ? kasan_slab_alloc+0x12/0x20 [ 1002.856347] ? shmem_mfill_atomic_pte+0x1c40/0x1c40 [ 1002.861346] ? __lock_acquire+0x7f5/0x5140 [ 1002.865574] ? print_usage_bug+0xc0/0xc0 [ 1002.869629] ? print_usage_bug+0xc0/0xc0 [ 1002.873685] ? __lock_acquire+0x7f5/0x5140 [ 1002.877907] ? __lock_acquire+0x7f5/0x5140 [ 1002.882146] ? debug_check_no_locks_freed+0x310/0x310 [ 1002.887323] ? print_usage_bug+0xc0/0xc0 [ 1002.891379] ? __lock_acquire+0x7f5/0x5140 [ 1002.895599] ? page_add_new_anon_rmap+0x850/0x850 [ 1002.900429] ? print_usage_bug+0xc0/0xc0 [ 1002.904474] ? debug_check_no_locks_freed+0x310/0x310 [ 1002.909659] ? print_usage_bug+0xc0/0xc0 [ 1002.913705] ? print_usage_bug+0xc0/0xc0 [ 1002.917759] ? print_usage_bug+0xc0/0xc0 [ 1002.921806] ? __lock_acquire+0x7f5/0x5140 [ 1002.926025] ? lock_acquire+0x1dc/0x520 [ 1002.929987] ? print_usage_bug+0xc0/0xc0 [ 1002.934037] ? graph_lock+0x170/0x170 [ 1002.937827] ? __lock_acquire+0x7f5/0x5140 [ 1002.942052] ? find_held_lock+0x36/0x1c0 [ 1002.946107] ? lock_downgrade+0x8e0/0x8e0 [ 1002.950244] ? kasan_check_read+0x11/0x20 [ 1002.954377] ? rcu_is_watching+0x85/0x140 [ 1002.958515] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1002.963695] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1002.968875] ? is_bpf_text_address+0xd7/0x170 [ 1002.973359] ? kernel_text_address+0x79/0xf0 [ 1002.977757] ? __unwind_start+0x166/0x330 [ 1002.981903] ? __kernel_text_address+0xd/0x40 [ 1002.986388] ? unwind_get_return_address+0x61/0xa0 [ 1002.991306] ? __save_stack_trace+0x7e/0xd0 [ 1002.995627] shmem_file_read_iter+0x397/0x1070 [ 1003.000204] ? kasan_kmalloc+0xc4/0xe0 [ 1003.004077] ? alloc_pipe_info+0x2a0/0x580 [ 1003.008314] ? shmem_fallocate+0x12e0/0x12e0 [ 1003.012715] ? lock_downgrade+0x8e0/0x8e0 [ 1003.016856] ? kasan_check_read+0x11/0x20 [ 1003.020993] ? debug_mutex_init+0x1c/0x60 [ 1003.025128] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1003.030133] ? __lockdep_init_map+0x105/0x590 [ 1003.034617] ? lockdep_init_map+0x9/0x10 [ 1003.038664] ? debug_mutex_init+0x2d/0x60 [ 1003.042800] ? __mutex_init+0x1ef/0x280 [ 1003.046770] ? __ia32_sys_membarrier+0x150/0x150 [ 1003.051519] ? __lockdep_init_map+0x105/0x590 [ 1003.056008] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1003.061009] ? iov_iter_pipe+0xc2/0x2f0 [ 1003.064974] generic_file_splice_read+0x552/0x910 [ 1003.069805] ? add_to_pipe+0x360/0x360 [ 1003.073690] ? rw_verify_area+0x118/0x360 [ 1003.077824] ? add_to_pipe+0x360/0x360 [ 1003.081700] do_splice_to+0x12e/0x190 [ 1003.085502] splice_direct_to_actor+0x268/0x8d0 [ 1003.090159] ? pipe_to_sendpage+0x3f0/0x3f0 [ 1003.094472] ? do_splice_to+0x190/0x190 [ 1003.098443] ? rw_verify_area+0x118/0x360 [ 1003.102580] do_splice_direct+0x2cc/0x400 [ 1003.106738] ? splice_direct_to_actor+0x8d0/0x8d0 [ 1003.111568] ? rw_verify_area+0x118/0x360 [ 1003.115705] do_sendfile+0x60f/0xe00 [ 1003.119410] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1003.123981] ? __might_sleep+0x95/0x190 [ 1003.128035] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1003.133562] ? _copy_from_user+0xdf/0x150 [ 1003.137705] __x64_sys_sendfile64+0x155/0x240 [ 1003.142187] ? __ia32_sys_sendfile+0x290/0x290 [ 1003.146768] ? do_syscall_64+0x92/0x800 [ 1003.150747] do_syscall_64+0x1b1/0x800 [ 1003.154621] ? finish_task_switch+0x1ca/0x840 [ 1003.159106] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1003.164026] ? syscall_return_slowpath+0x30f/0x5c0 [ 1003.168959] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1003.174315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1003.179148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.184326] RIP: 0033:0x455a09 [ 1003.187499] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1003.195205] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1003.202462] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 1970/01/01 00:16:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x4028662f, &(0x7f0000000040)) 1970/01/01 00:16:43 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x100) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000180)=0x5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/87, 0xffffffffffffffce, 0x0) 1970/01/01 00:16:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0xf4ffffff00000000]}}, 0x20) [ 1003.209720] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.216979] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1003.224255] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000003 [ 1003.234799] binder: 25886:25910 got transaction to invalid handle [ 1003.241143] binder: 25886:25910 transaction failed 29201/-22, size 0-0 line 2856 [ 1003.252357] binder: 25886:25887 ioctl 40046207 0 returned -16 [ 1003.307486] binder: 25886:25910 ioctl c0306201 20007000 returned -14 1970/01/01 00:16:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:43 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:43 executing program 7 (fault-call:4 fault-nth:4): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:43 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x5452, &(0x7f0000000040)) [ 1003.353329] binder: undelivered TRANSACTION_ERROR: 29201 [ 1003.359450] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4c, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 1003.447094] binder: undelivered TRANSACTION_ERROR: 29201 [ 1003.456132] binder: undelivered TRANSACTION_ERROR: 29201 [ 1003.469417] binder: 25929:25944 got transaction to invalid handle [ 1003.475794] binder: 25929:25944 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1003.524010] FAULT_INJECTION: forcing a failure. [ 1003.524010] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.535273] CPU: 0 PID: 25947 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 1003.539565] binder: 25950:25952 got transaction to invalid handle [ 1003.542551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.542562] Call Trace: [ 1003.542588] dump_stack+0x1b9/0x294 [ 1003.542608] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1003.542623] ? rb_erase_cached+0xc6a/0x32a0 [ 1003.542643] should_fail.cold.4+0xa/0x1a [ 1003.548935] binder: 25950:25952 transaction failed 29201/-22, size 0-0 line 2856 [ 1003.558249] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1003.558273] ? __save_stack_trace+0x7e/0xd0 [ 1003.558292] ? print_usage_bug+0xc0/0xc0 [ 1003.558311] ? debug_check_no_locks_freed+0x310/0x310 [ 1003.558332] ? kasan_unpoison_shadow+0x35/0x50 [ 1003.608826] ? print_usage_bug+0xc0/0xc0 [ 1003.612917] ? __lock_acquire+0x7f5/0x5140 [ 1003.617172] ? print_usage_bug+0xc0/0xc0 [ 1003.619520] binder: 25929:25954 got transaction to invalid handle [ 1003.621248] __should_failslab+0x124/0x180 [ 1003.621271] should_failslab+0x9/0x14 [ 1003.621288] kmem_cache_alloc+0x47/0x760 [ 1003.621307] ? __lock_acquire+0x7f5/0x5140 [ 1003.627607] binder: 25929:25954 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1003.631772] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 1003.631791] __radix_tree_create+0x4ce/0x820 [ 1003.631814] ? radix_tree_maybe_preload_order+0x110/0x110 [ 1003.657788] binder: 25950:25952 ioctl c0306201 20007000 returned -14 [ 1003.663753] binder_alloc: binder_alloc_mmap_handler: 25950 20001000-20004000 already mapped failed -16 [ 1003.667740] ? graph_lock+0x170/0x170 [ 1003.667765] ? kasan_check_read+0x11/0x20 [ 1003.667778] ? rcu_is_watching+0x85/0x140 [ 1003.667795] ? find_held_lock+0x36/0x1c0 [ 1003.696912] binder: undelivered TRANSACTION_ERROR: 29201 [ 1003.699846] __radix_tree_insert+0xff/0x8d0 [ 1003.699865] ? graph_lock+0x170/0x170 [ 1003.699882] ? __radix_tree_create+0x820/0x820 [ 1003.699897] ? lock_acquire+0x1dc/0x520 [ 1003.699915] ? shmem_add_to_page_cache+0x494/0xdf0 [ 1003.707753] binder: BINDER_SET_CONTEXT_MGR already set [ 1003.709675] ? lock_release+0xa10/0xa10 [ 1003.709701] ? kasan_check_write+0x14/0x20 [ 1003.709716] ? do_raw_spin_lock+0xc1/0x200 [ 1003.709737] shmem_add_to_page_cache+0x96d/0xdf0 [ 1003.717454] binder: undelivered TRANSACTION_ERROR: 29201 [ 1003.718110] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1003.718133] ? shmem_put_link+0x270/0x270 [ 1003.730191] binder: 25950:25952 ioctl 40046207 0 returned -16 [ 1003.732395] ? percpu_ref_put_many+0x132/0x230 [ 1003.732414] ? percpu_ref_tryget+0x2b0/0x2b0 [ 1003.732432] ? find_lock_entry+0x2db/0x8a0 [ 1003.732449] ? mem_cgroup_try_charge+0x52f/0xa40 [ 1003.743358] binder: 25950:25955 got transaction to invalid handle [ 1003.744874] ? mem_cgroup_low+0x1d0/0x1d0 [ 1003.744895] ? security_vm_enough_memory_mm+0x9d/0xc0 [ 1003.744916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1003.744930] ? shmem_alloc_and_acct_page+0x312/0x800 [ 1003.744948] ? shmem_alloc_hugepage+0x5e0/0x5e0 [ 1003.749728] binder: 25950:25955 transaction failed 29201/-22, size 0-0 line 2856 [ 1003.755134] ? __save_stack_trace+0x7e/0xd0 [ 1003.755154] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1003.755168] ? __radix_tree_preload+0x173/0x1d0 [ 1003.755190] shmem_getpage_gfp+0x800/0x4190 [ 1003.755202] ? __lock_acquire+0x7f5/0x5140 [ 1003.755215] ? kasan_slab_alloc+0x12/0x20 [ 1003.755241] ? shmem_mfill_atomic_pte+0x1c40/0x1c40 [ 1003.858579] ? __lock_acquire+0x7f5/0x5140 [ 1003.862809] ? print_usage_bug+0xc0/0xc0 [ 1003.866861] ? print_usage_bug+0xc0/0xc0 [ 1003.870921] ? __lock_acquire+0x7f5/0x5140 [ 1003.875147] ? __lock_acquire+0x7f5/0x5140 [ 1003.879377] ? debug_check_no_locks_freed+0x310/0x310 [ 1003.884583] ? print_usage_bug+0xc0/0xc0 [ 1003.888632] ? __lock_acquire+0x7f5/0x5140 [ 1003.892864] ? page_add_new_anon_rmap+0x850/0x850 [ 1003.897697] ? print_usage_bug+0xc0/0xc0 [ 1003.901755] ? debug_check_no_locks_freed+0x310/0x310 [ 1003.906933] ? print_usage_bug+0xc0/0xc0 [ 1003.910988] ? print_usage_bug+0xc0/0xc0 [ 1003.915045] ? print_usage_bug+0xc0/0xc0 [ 1003.919093] ? __lock_acquire+0x7f5/0x5140 [ 1003.923315] ? lock_acquire+0x1dc/0x520 [ 1003.927285] ? print_usage_bug+0xc0/0xc0 [ 1003.931341] ? graph_lock+0x170/0x170 [ 1003.935135] ? __lock_acquire+0x7f5/0x5140 [ 1003.939362] ? find_held_lock+0x36/0x1c0 [ 1003.943415] ? lock_downgrade+0x8e0/0x8e0 [ 1003.947554] ? kasan_check_read+0x11/0x20 [ 1003.951691] ? rcu_is_watching+0x85/0x140 [ 1003.955827] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1003.961007] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1003.966192] ? is_bpf_text_address+0xd7/0x170 [ 1003.970684] ? kernel_text_address+0x79/0xf0 [ 1003.975087] ? __unwind_start+0x166/0x330 [ 1003.979219] ? __kernel_text_address+0xd/0x40 [ 1003.983706] ? unwind_get_return_address+0x61/0xa0 [ 1003.988626] ? __save_stack_trace+0x7e/0xd0 [ 1003.992950] shmem_file_read_iter+0x397/0x1070 [ 1003.997533] ? kasan_kmalloc+0xc4/0xe0 [ 1004.001423] ? alloc_pipe_info+0x2a0/0x580 [ 1004.005647] ? shmem_fallocate+0x12e0/0x12e0 [ 1004.010048] ? lock_downgrade+0x8e0/0x8e0 [ 1004.014187] ? kasan_check_read+0x11/0x20 [ 1004.018320] ? debug_mutex_init+0x1c/0x60 [ 1004.022468] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1004.027479] ? __lockdep_init_map+0x105/0x590 [ 1004.031964] ? lockdep_init_map+0x9/0x10 [ 1004.036033] ? debug_mutex_init+0x2d/0x60 [ 1004.040172] ? __mutex_init+0x1ef/0x280 [ 1004.044145] ? __ia32_sys_membarrier+0x150/0x150 [ 1004.049937] ? __lockdep_init_map+0x105/0x590 [ 1004.054430] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1004.059436] ? iov_iter_pipe+0xc2/0x2f0 [ 1004.063401] generic_file_splice_read+0x552/0x910 [ 1004.068234] ? add_to_pipe+0x360/0x360 [ 1004.072117] ? rw_verify_area+0x118/0x360 [ 1004.076261] ? add_to_pipe+0x360/0x360 [ 1004.080151] do_splice_to+0x12e/0x190 [ 1004.083945] splice_direct_to_actor+0x268/0x8d0 [ 1004.088604] ? pipe_to_sendpage+0x3f0/0x3f0 [ 1004.092913] ? do_splice_to+0x190/0x190 [ 1004.096875] ? rw_verify_area+0x118/0x360 [ 1004.101013] do_splice_direct+0x2cc/0x400 [ 1004.105154] ? splice_direct_to_actor+0x8d0/0x8d0 [ 1004.109986] ? rw_verify_area+0x118/0x360 [ 1004.114123] do_sendfile+0x60f/0xe00 [ 1004.117829] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1004.122399] ? __might_sleep+0x95/0x190 [ 1004.126376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.131917] ? _copy_from_user+0xdf/0x150 [ 1004.136055] __x64_sys_sendfile64+0x155/0x240 [ 1004.140539] ? __ia32_sys_sendfile+0x290/0x290 [ 1004.145173] ? do_syscall_64+0x92/0x800 [ 1004.149139] do_syscall_64+0x1b1/0x800 [ 1004.153014] ? finish_task_switch+0x1ca/0x840 [ 1004.157506] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1004.162431] ? syscall_return_slowpath+0x30f/0x5c0 [ 1004.167356] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1004.172712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1004.177651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.182833] RIP: 0033:0x455a09 [ 1004.186009] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1004.193717] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1004.200976] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 [ 1004.208231] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.215487] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1004.222759] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000004 [ 1004.234453] binder: 25950:25955 ioctl c0306201 20007000 returned -14 [ 1004.273125] binder: undelivered TRANSACTION_ERROR: 29201 [ 1004.281361] binder: undelivered TRANSACTION_ERROR: 29201 1970/01/01 00:16:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4c, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}}, 0x20) 1970/01/01 00:16:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="2f65786500000000008409004bddd93156308cde91be10eebf000ee9a90f798058439ed55477ee615055baa3efda75af1f0200f5ff26d7a071fb35331ce39c5aabdc0d44f107145c0aeba0a65a2624d1f26a6c16dea75b137f0f8a8303a2ad01000000000000000000c71d80169f4ae49d7bb367352f04aee6cece63d1c53338c20daeb66eb614839c1d271af0b78beeb05009b6990c0a1a926306ff5415a20e824d3841f9c108c72534b6b39fcd4866f32e7731190bdc689581fc5fb07d28d6b2c6747b88937b72978dc4ff7eb8389883a941d751c7426dd02465451babd138e466eccb1b37c0ea4cec5f433b08f57116d5f7eb4bcb407e7c32e98e01b903e49b7f5efa8420c1bbe46ca6f9043c92a2c50cc5fee6ab4e7256d5f30b1f0172b7fe9bb0d271ac958e6efc40133948da7ffc76d856e2e2ab5e2fa4ad950af5bdb396f6f98a68e563b829192afd0b922b6074e2726a4d0b4346fc7b49c304a143085e8f0ec28806ea1536764917a03c723d0e66f72c1f7772b092c1ad2174bd9ec2fdd0745b5bc2058014b19437931337e9cd86c066b1e50d4e") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0045878, &(0x7f0000000040)) 1970/01/01 00:16:44 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000007c00)=[{&(0x7f0000000340)={0x27, 0x1, 0x2, 0x7, 0x8001, 0x4, "d80d90da7ce6460550f62caaeb2d7c9fdefe01633474b71d7fad5bc4726bca7252b028f4b2151a3e2f4a7e031dc8d253b0b1c30a7d36642d79a50638c0b9f4", 0x2a}, 0x60, &(0x7f0000001840)=[{&(0x7f00000003c0)="25693a4a5705137b712ab3831f8ccbef469030839f6e77d517c704867d5b05caba9e6c9b0c21f0bbec67ffadf6e0fba5b1095dd3b823", 0x36}, {&(0x7f0000000400)="9b350051315fb301db3ce681725e78492cfa6800ca8e1dccdf", 0x19}, {&(0x7f0000000440)="707595b9ad35150e9ef45121af3563bec3ed7c568a47516cce35ae3151d519c9399964d7c3fcca45292fe8248f0e3ca364eeab44d3808929e43e99c67137d5060fe336ec7327259de454a9fdc38b935769da6783022fd54f737359b7d86e7d878e3f89f8f9", 0x65}, {&(0x7f00000004c0)="dc495ea873a19dce0978a4e7d10f01fe", 0x10}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="9a52c0aac03b9edd8ad0afcd71b66e88808701cd4a108b51a68013c8c565cb927d843a9bd0a4bd5ae74f49e10c0081a54108c3d7670e20fe656de38e73f852c2d96ffbd8ea65e8b8d7cad30c2302cd3845299505922f61798090d1c6d3559d847712291b2e125a7b11da63d72299e52402e395ae21d70d48e442142fa004a438258c867671a4f9a7593211c73cb72c70278ba51ceca22cab7db66d6c8e4cb12a878c748a0206c86b1601b92f3c668121418ab5f0d8daa0b5ecc62b86b63acfdf6caae74f0ffdb3cf686756b2423bd1f5f69144a3211518f269b51189a1", 0xdd}, {&(0x7f0000001600)="c7696956fc9bdfbd4f742b7dfb422c754a6712653ba69fa10dc13434c009c0f863c69c0901fb09e089e28b46738724dd2ff2fa1bc71f52340d54bed0a69ce05275d68b38d612975cc81900faf3ec8f8fe39cd3a34ef18d5cbfe7ef1562ede57d9bdbad82feb03da58852dc5665", 0x6d}, {&(0x7f0000001680)="897b775f88638d009d9845bf8b393af0687b6be6774317729774050034f7d19938f0a18995705e7df9fa2f2f4479c3de1ea1ee9ef96b8ab3ddf4b724e83cf05f4d48143b945632971c2d985dd47b6818eb71c841e6a24a3375d1337b4e9355990ef471ef7b1aaf9a45e5633fb757bdc4ed51395bfaeb61e02300dde1a988753ec563869dc82c3f15164b81a93f9638f7bb385b6334546dbb29394950cdc611015866a20e4a01ffb70df8c40213c44430f94c0009340b2e828bad", 0xba}, {&(0x7f0000001740)="4170d61aa07ff9835406a003ee299815543664bcd2705f7ec2cf22522e168f46535007ffc0a10b61a56f3ed743a42b4cefcc1f5d9f4a89ec6423fab92740273ce4c4af25381ce257586480ed51fc79d07a9f5d449724cd380a489f2bde2769f48dfdefa978e9026cb3c254a2c33df418c9fa5c9c2cb575dc2465151cd7e1497910507a448360aab276617aabb243619bb25b34422227b710147ebc1a50f4f86b69f87d3651319a5e4779d2abadf662054221e8f31e85079a0aa92c0a1556bfc616d9f0a2", 0xc4}], 0x9, &(0x7f0000001900)={0x50, 0x13f, 0x8000, "d139bd707d93717b4e6567e2c3018021f69967a6efb7bd5b12c22be0f317984c07c82323f97d314f2bc6523bd7b6f90de6ce3877732b4af8aaa5"}, 0x50, 0x2004c004}, {&(0x7f0000001980)={0x27, 0x0, 0x0, 0x7, 0xff, 0x80, "94a8075dee280ac29bc6e8745cfded85a789feb9eb58546e60773387bf4301c43b748a1fe9ff2a9bd43932e63a9b29de421f4e743b43c659b16add3def0bb6", 0xe}, 0x60, &(0x7f0000002dc0)=[{&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="b9", 0x1}, {&(0x7f0000002a40)="e9e2d7be565025de797b40e4c68757aac240d6c7dfe2280e456bc9080464a352e3ad8996e09e396cf366c33d6c860396a699ffd156e506a810f9f3110040712ee48aba423727dd430ff69a00e39904ae1bd4eae2dcfacbfb7402e354de5ae024ec63aed04a7ad59a3cfb6a4bb57abb86c039a16ddab3e7c611abfbb4ba5e779bef59f452b0833d9e90b4fd587c3509b631fb1945c6a4143a793c5ac24fc2881f70d98fdcb233253514d84beeaaedaccc22c0380dbc554361b229941a0997c43fa42e313ec2d2e2906fea2458f977db44d86754837691b2a48f7f6e4e3cf8cf0c38ace42fa56c379e1dee", 0xea}, {&(0x7f0000002b40)="1e668d96d87f5121246f8b17bd4c66fd1e39a25553af0e76a056107bf95c44df", 0x20}, {&(0x7f0000002b80)="61c510f19223ec0daf45ecfafd1a108a3c82d6f3234fc80e12028fb030df78918de89d30fc03a230e35a42c1ebe4211d8b4c0fe340243e02c83764f799dc7cc41cb697ec2b69956fd6017a743a070fb0b295f6a90746c8c4f8c723f864778835d7b2ca6c424e615e4efbdd7a95d2c0d1d17307adc3565d77e82c109007aad662f1473a389bf80d75b32078823e5a80deba9d422df1d7a1e72eb63883c42c2999e5ae7c18cc21b2b0b6e9c1b5255f7f66fc77494efc86572c20b7c95f651109770a33a3e09c460838bf1bda41e8de2618bfd953e119cf3c89bfa4f6e5242cbacf6584ecc2", 0xe4}, {&(0x7f0000002c80)="2b8de8925f4b78113fe8835def091df7ca712cd955150ccb5d8db07c2e2e0cc92943236e5d138a022d89196a2d111299df12700121da16c701762167cc3fcb015b790747baa60674e2c32b37e92a6459e9c60bd3003c629c6478503d80564d75ee6774a69ad8069a967faf06986eab81baba4e4f7cba59018f665b74d5cd71e629f0d23d33ec0168db2b87ba60540322ec9bca4162a0b80159c468780d067e1a3b631ff92504a207eb4790d5d2f57ad31feab9c316128322f3858dd5712c0fcdd16ce2a3b91cd8a38709bed2112ae8169b874af2e52b00dbd93becbcb1eabcd6393ef33163c513206f8113fa8d98334cc946d64fcfd79a", 0xf7}, {&(0x7f0000002d80)="2fcef1d56c26df7451c339e150a774ee42efd5", 0x13}], 0x7, 0x0, 0x0, 0x20000000}, {&(0x7f0000002e40)={0x27, 0x0, 0x2, 0x2, 0x80000001, 0xd42, "d39358826c837908cdf2d28194892b91b600808f2953bfd1835914b06e716d9218253537c725da705903b73a4c89c875ddc91f663a80d507cda3ec8ecceecb", 0x1d}, 0x60, &(0x7f0000004200)=[{&(0x7f0000002ec0)="44bff82b92978f69ff3a497ad4698ccce93167f81c39f53bf262ee63cc79fa691325eb5d58a553d0f60d034d85da1fe511775b4e2bbd1d049a84f1bfe11ecc08fe28c2fd5f0f43f6ec3338511a92d3a51a847f7973d792c934069b1d9460d85ebc893f54794a74ea83286c7afec1acabaff4697440194e226a03c26a6fea8260c94e32299040c27d674fd20e321a44cecd111ec644c8c6a208fcbda67dd10dd4f16bed2a9d52c8e03a83b29009ba89fb64fef41aae6d066ec59c3d68fa398e6d55703547a676075a27aed44160929b39e220d3eb51d012eb36ace5a5bbe32224556f1c7aa899fe55257771ae49060e5dce490cd43216fa", 0xf7}, {&(0x7f0000002fc0)="32de2c31970d8683fbd2f858f632ef6d40828de1e540996271d10ac571aaff6b20156041d6e0ad33b57133fa78b2fc83ad08f5d7ae3d25a0fd5050b6416b5fa3f64a66e9e9526f2291cea8c31a24", 0x4e}, {&(0x7f0000003040)="355df85a779d7b0e97966d7f19c9914568ee9152aaf82e1aef51f0609dc8640767f29c866f8c60191ddd427765e53f2ce5c9257c58851523bcfbe88f7c7d6e1c900864715b3212369b43adfcb02a7b407e62553026a0d2a33f3e2e941634a945c119954905dacca60396d64038d913d31fafb36be3f576b815e9b1f1e8acf99f2862518869baa167e30868936fbddeaaf6866ea774c26a2ab78dfacbc522d62417fc8d19a92612fab3eb", 0xaa}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="8b0ffebbd623c8b89659dcef5151fe58b8f054a3b9ca437dd12b28aeda0c030fc5821c0f5e4b8bec21073ad7174509d2ec85bb171bbd1f5d80e97dbc8578fc4cc6e9e4dde7eaa8fd9c2cdc4b3c6f827f0d913ffe9e9d68fac18e59ed76b719e5d82980bf68395ec84604cccdee98cb2f10c8b8bb71562529e53a8741ec54043e52ba81a9fee5b221fc2441f68c4bbab09d56f78fb621b587c1617e903f16a62f8c7051f10ea07853c074908b360ef1f5ec233c3fb945b35e4b16a04b7c0c59970f74184a0a75a60327c4e8cfeaab14522914131007d4f509d8ee0dc22b68c69080f40f4d7d14402978cf2e6c0a2fd84b60995c62ad3edd", 0xf7}], 0x5, 0x0, 0x0, 0x1}, {&(0x7f0000004280)={0x27, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffff000, "9cb1de5877ad32cdf055a95f680a7532dd1c61eb7340e17865bee6a8a442b3be7371579cb9784f464397831a953fa315d109724af155d4b396a890e6f3660a", 0x23}, 0x60, &(0x7f0000005300)=[{&(0x7f0000004300)="d0dfcbd601c62d786fefdabaca422db36d200a09d7f30b5ae121c2fac12f745795f31df8d001a1eb5bdb15f3a87bc5c1cfca64138ffe2cc5f2b3a01c6c927180640e29e5ebc4041a2993b10d317837a1d252fa5f4a1681e4bb9935d1ef9ba7ab207e91f2ffa1c5bb3b8451e6e1934a8a0b16424864e3d39737c2b7745728c5f65371f75cd0497ecba38b9d090bef9ddea8ade3e1940d207aabfcf3f6e593c709052fb22bd9ab8ae2ad130b410ea1da278793ec97710830855fee1e3612158e92bc5ee6a671bb1a8e5c9a3ba6652dd795c78e3863b992879afa643f58f4ed3a681b8c58c6b7759fe72aa57907df49abb35973a29fbba800fd5af011aad75f612740cf555b3f5c6f1ffeea4254bb8a16548cf98da6e305d6f3fa8bfe3805552f4fbba7f7214fe1c6f7df9d38ddb8e18df54112afa271cd4d67d43fb9fcdd507961edab16a082117d3a5632b13fbad58d330ebdfba09d04a9dc44a9521a4690407ea59f20e9f8154691ac7354a62814c58ce5a8bf7e4704df1875bc2e4fcc94b546af4c0dce931f9471ed2e526e950cb08658d202367277780b3bf47daba983435d5239381aef85020c9ee83cad3c98f2131fa67b2f3832429957c55e15b7b4a501eb6f63d642865b5a9a72ff260b081e6780ca20120e384b9a836be7b9bba5565064f6fb439391dde83456c7ed97d25dc1000a9200643a5360c9096075913232451e1205f8a675982cb2f45255f4e96b400143a8f20d1db5e7cd31b733aa65ea7e5e012b6bc244f04933db0464f7ecfed3926e666b93a67d806f2fe37c753cfb2235e52881ace4183ebda9f350a56e366cc8f89974b7ea2012d9f223f8d83d365d12da94fd67ca7d19cb1f641c5c7444ae9eafa8f7dc037028b26f6d16d69d6c5b7f03a1907fe8ef3af48ab0d6cb9155841113609cccc0e486248e4bbf00078d149582b8edfb7791a19eed02ae24e12415af4d988230716abda5d4ba2c49e3441391b1987ad0feed7d1ea9ac40a9013fb0182eb8c7b9161d921c51e7564fd0ff72d87827f15b8d03ef262075f2a85884fffd47d79050b30c89e4274dac805edb62f1b3356bacef1d0174d44a6e176b5ab9d90ba97700d7faf71bd12b656a837c289ee8ea1aad27ac118108d81c6182fab10d9765e4fd4adfebad7334f95132541a60eb341de1328ea725e936c2c620f05596d885e32aace2722fce53cbaf0695763b1e53d8d0260a1efd1c47de83ee91c356a08178023dbd78a5ca586a728cc4ff5695d1f8d9a3fa4fc5eb4d26f76392ae6d2fa5125dcc4fc47aae878e2644f3433027b4e3ae4afa3bb8d6cd06958e3a9cd2902255f1a453d64bf008493f655fcab4cf36909777031730fa7be2410f702abb502fe07eb016633a4cf979d45e47eefd26fc4ce64d870ac16fc07c63ff575745daae9a68d4993fe4a3cc1f76ebb5d7383561c71653bfab7121d589447371fb096ce26e9eef8975c7d2ea0223bc6d46293ce1ecfe5c31956a1af8366d89eafdf3bffaf852f9c22f7d68c293c2b7d25ea709daf876db3213417460cccbaef45424f3eb9958349358b1865ec8f5f8650e679cd02b58c2d99467812347b41a4697bae41061f6860dd750b44ff1446d6df0c5820b44bcf386f153a92e4f56715f576ebc01649f56236a7fa867c262f386c89495b052f6750b0c6d6efe2cfd5db0bb3bc99b6ccdce5dd32ddbcfa543cbeb4d77678d891f6ebe1ff5b00d64be8413fe7a5dc71393089fb5869e105280ad6aef2d5de0afc86eea0beeea22c40b2ae359025dc3c90ccbd4ac990d2fc183f113ecd9fdc8a911f975372de652f0009b016525d1b89239801164802b4d1e6c898603aca2e7b26c8c6da71e74139403626d8674e1039b031bee4ee6517147076dfcc3751ab0568656e8e94ff25b6bec47b7d0a67f992bab8364163b8e20e02aa711e5075a5f97887535082dfbf475334fb23f1a1114d10253baf46692e78ecb3142e47fa4febd88a2978ee029d1b0733e1e7a882a66098e9cde346488a38082aa8bc042a2dae2972dfe4953b66b2ee252491da01978dbfed8e73adbc039ad3393d4ebd98fa26c93d7ed5af074ba5294d58f42edf9df90c6dde663e94d1a7ff0828369944b55a0b78e5864a1d3c508b6125cd71fd36f3d7c183265b976794909fe6d1480b740711306068d836613c44fbe8ee67dfc52b94e64d0c127352f92556065b5345b614f093c98425ffb0e8e2edcb44253dc82666382f0a7f317ede7f34b516aac702deae98b26afbda7ced5465fc4419e24b5182a1f95cc8c1c12d256a11eef050847af7e6b2ed537101865549ca21a52eac8fd8712eafddb17fd1732a195db7bfcfe122d33e8250f5fc95417b62e36a37a9d51b74bd115f7a2bc9468469dc6836223dce4c0b01fa9c4546f2f76ffafb32d3c32162b86afcfb17e60264861b0ba7044d19dd86d4fbcfe08eec7792a8ed0e9f098f2a0af3e0f3f66ffbf02c654c4f93d9c834dce3a0d189d70f050d9f22595b0f4f6dbf8d70c099627fc3ddbf06dd02565b387259fd3b7a376a7b9baa9de1b230e4071da3469520c56903b0b064d0b8572270d84c571359aee16695fe012fb6ff558a8f21ee16f4e8e3c98cce19f348b4bd44d8dde9216dcf811d7a453c86f3a3ab5bd38bfbded6851c75a4b9e3f66cec711a057c3b3df0c126e580643c0bd9a802f90cfae01852f85efda9f4fbd399d348af4b90971eeac017a9f2709bd7f97012e1b82cf7681a6d0c11379a35154d023a79f352108530da8db201644461d8ece5f49d7ebaecaa57f16415c070913c5c5a74c33b3abc427b2b0d9877bc2ce41472458cdd4e1a38cd31f0a5eaa32cfa7793a8a2f8f67e1f0d93ede7c4e7f2b02cc39618232c3b0991f1a7b111b94ff774722f4244b8d7737797a455a7b09e6ab243e9bc200600c64d6097ba593388088b6e62dcccaa924a4a12c1f7df9ff2d9b4c500e706e138bb48b709ad2f32b689c2684b00c93f2a67804a19870ebb50f72076306b347540b5fe5f77feb250b09e14e41bc4abb26d0b1b80f5540c99a91201d2ce2617ef8e3716273d40d3b9f220da4bcc8d22eaa0f135d61a31df32b3f9f00b77a9bad205ed59f4dcb0ad37aeb69808c55cb40764457ed30865518c8066cfb433d6bc23e1a26644af90f1c4c8dcc0d398e1f0ffbc730f91cb85caef1d2104cd7914a0ecba8dc595346b50377c0e06e7b0c7ddc33abf8a4894d400224cf205ec50c9f27312375591fdba500b1a208e78de9812bf7181fc8961a2bc549d1328e72a8a4f4fd0cd85ec1dcf514eb4eb749fcabea7fff68fb2c503309757d29187a57956bdb0a102364a3f27442f23dca1e9a1f487d86b0fba5dc4a8cf888db5d92017c87199d89ce74417c89ddbcda75258f89a687fef882069fb228ca412e1721bf1bf1b30d332741f31b5b8ed42004472ab0a7d3b492d188cbd2b420370f18664cafe6b39ef89e4ff52e85bc27b78a734e45582ec3fd57e777f11fd343b5251f3ec415882ddf961e487b24947f96cd7e9b9a001ea14a2d94bc513dd0dae60dfc9d093d20942b4c1fd3bb0719e78e069a40919abbfc77aa56f97b5072820fc20f89fddcf45eda7cbab703f19156f5f3c8fefa2ea87a3ecc5179361feb1d3f71683064d430f69c973509f22235d80f96d9dba55b4fb924bf88374957b8e32d96dba1ca7fcb228c3c1a37aede3c4525a253048724d3bdfbe961432041f36df50903801c510b2d20d01620ed6621f800237f8726c81590d40248b99cf892c367ffb3c0528a069463ce8b824445614ac9e5fe4f8be69ad7b2d4546071145bbc6f6c55569a1ebb5f681d42229ec5e088d3369c165942d95916fc3fe8661a3acc99bfee7a018cad3923e24f6662162adc240366db89803b58de97a6748944bf269fb3fa60fd19f90113ada068c98cddf3e88acac46f38e730a888adc3f1ae3358878fbe15dc3ebb1ad217f722044fca5eec904f64553d5238b5c7ac400c1cb998c3f036066abc6cc2a0a2174b89526b78ea4dabf64f74d0f72695b3ee65a01407e95c6d6b25b426f8957e13cfed4dcf79c49b11e81fa7b3761b30c66878b1030b66846760a4ae55f73254093de820f29675dc96ed014848234de866314cb2b0f22a8f95272b1bc6226933c324afb0e3e17ab1fb5eaad18a6f8f8f1ebf8bbac38a63433c93bb67f0aafb177746d5b30798868e07749e18a56b5b0dfa8caf974ebbe56637199e72df62288a3ebc7143d61441bf4f7720888aa5bc2981018f2c5859f445c382cc3c8e6e801f8bc2cf1719df2ae7ddaa08d0cd8cd39b79731deac4ec0b4ed779ab22d6e0cff77edc48aed6ebe3fbdd036d0a01b972b98ee942d79280840bce1379dd6a32cfd4102765a19b5066418cd007895db7ef355e68885a2c5286e6eab5337009fb4346696ff67e88a20e839dfe06e1b19ea2ec788e1f5fd0df3bd3250fc413058df2d5e8ca590908f9fe2e82618f4c2993c383ce3f5dd33e3207dd0dfbc1323fe5bb82f25953828ac088046a3b837ad4ebe1f26a0d7c679410775652c5de76f416aca9c6cd9dc8ffe92db747c3b78e24eb945d5a9788c821fda28a0f23c6aa45c53c722ee7f3d0904edf65ee5ee1b303b4647143dab403073e13f480a102261cee7447acc647f077213ef2944f6867144043d480fcd62ad3894c803d78c8c33035aa15be1739fd739722a76430bc847ceddc0fe0e4f6827a70aad175df901b44249cc120f1006cb4b683ebe75793b53649ca7548996c25c73a0360a189ea018b7164909e28f5664d14dd50aa59ed1ba1b184f10a5a1e2ad70f32cc997a3dc2fb83b59a0e7dddeabebc6f8a387a4c164bbb559e16f5e613a2cbea3535ec1efb0eca36dbce5792c94c287fb3d45d709229657b6f7157fa6789731cf66f90f0aa72696af4c1575b4ce058ac893e716d91ed0f4772113f7fa1d3656d9417ec710d8557409e9a43b87a5f97d93977116c0ece92ada3a37b9aa3c3bade758d1a79a7d66ce72895f28b98e582ef0f532a738c95ab7d920638800b7bdb657a864fb659121058ba1b55b0dec35a1753f4db906e2e8b43a4a26daf87b958fe5ac102a39be7a5771bcb5128cd97bb2ff94995671bc1004e1ec3af1e58c5a8fc476db3942224b669553718b08504f221e00ba95ab78d5e0cdd04bb13b9535863b4c9567cc4fb70a902cd5209f415ba0b0fd006853e7b6e3c448350556f6a42c83e9eb158b7491b8f65c67c968163080c76063d757bb3feff954357b1bf1bd20e696808ce798e6dace4df67d6820a98f7baf57672a1481555e283e0b72b2c1c2cd1980284721ee0e52f3c6b49879ad294eff6a7389aa049db0edef816f6ad6775e7343943abf48a159ffcf7fd24644cbf48b010954d93b85e5236125a1fa95cd842d531a167a241554460a40080f4a892ad3d3ddedb44a76db352a31ed2db65e42677ba86d5336bfd728b953e3fd698bdecb9a3b6a6504c16bbf580552f0babafaf9b4bbb84093548fae40ba0957a039b9196d61ba963678bea520e43840e51725f58d36c8aed3773cbf53db986517500c7e586dbf9b2d87f89e7c4d58364bf8c80ee6022c96317305d3583bd0926ee2daf9632668e001390d8fe33a15dbc6669aefff03e00ed188f9dbd39bdffd4f822b9c356246f2a125fb63ffd91ad923c65903432386e24feaf646060ca76e79ba6644ce519d02e737efc25237eeb528407c9db14a34764d724a96670c1621f2d1a4a45a5cb6d116ffa86f7f65f869881422ed9a1ba08b7fdac1faa915f3b77", 0x1000}], 0x1, &(0x7f0000005340)={0x1010, 0x88, 0x0, "df46d3e5613daa99af4a6332844508f60a1e7d69b59e5b37e3c95568e10ea1ed253902fab40d4a07324a8d123775abae80183ab1fbba03da0ed8513086c84f3265161c71df7e21e14c2f2ebabb22a63f03ed06de26a4663ae9419b1531db1538a5c572de4fd0c1ca8821c39e29f34bda0f926c3e94b9d515567be3cab236f30c53db83b223359b632a548a456a69c8f0aeb8a64fde4774585aa8cb5ef9f69359d0f2105837adec10401b1fe0d4152d0948f2a6679d4c3597b971b4dc614332b5b5d034b8afda4516a49c62ebbed84578bba5e2f45ffa0d0751905645646c6801182fdd352d978352131e5adabd54d9eecd79691f903b38a54b42031d0ddf2f0061bc8b57a4277e1938b5e16e5c1af1d1cc67e0a679503451d14aebad0d9323000c01cce4df9dd3947b8fbddf7e810a98ea4a9d4eb9fdbe5b9c80de457189acbe099fc197893d90347b757b9385cb29f433e50ac5038cbc5fbf2873d5276e744a5ed5c86cc24d1b21c1be750713a367ab77e49b0b9c3c8964812e720fb4e5e8cb303e9e18ee435521d1db841913ac1afeace955864eb4cb717ed4b7f2d154bcd73433c7f7c23da048c5e49503d2c4ecd11257448658ff9272eb3acdf85f5dfcf2decc5766f41e3b95ba83d4cc0cbe78b672bff722e65f70777c339d767c96d778191961495d0efafe45527d6ed40229a2bf1704d658e75bd97682496c3a7493d7807b0ba68421706addba6602cd714090cad7a427fe0873633209e355ed583f1450b8b965ae432c49f418afc2d1b7fa94c16f20f9ff29e27860e8a02cd9057801f871e31e91e8d75f16a438dbf191333e1e4417167da0f0d3f709ed6547ec4f083a07ca6c02ae256baa235af81a30647f68db3f7e0a1d85ffea16275615b4908de479df5019e743bcaf0e40a985609369e36af099d3f21e63f9230c0be162df7f15c95a3505709518a0ac8e72147794bfc43b11ee9c2978898a61fac6dfe8fd9196853594571ac91a94aed9f7ecab380b844b0aeb20c93391119d4e860200cacc92f5721a5881c29bcb077907df45878631c0694090d16654a611b17764685bfa95cf6f3b8344f79bf496621d82677ddcc927e3a9f3b9b92adb9296c745ff26f661ff905401431e180095f4a12e32d0fab933ac195fbc4b7eda4b5e132e3ab812c49fa54e90827cf597bac35e80b3f3467a6190745ac98d23a119c145bb219195faa99cbb3dfbb92988d878497f39be1c6f1aad44bd3700f7b695d0688c3e30718134c01f1bdeb2008ea8f5a6d7204d7ad882c7984ed743df3d8e53b233311f9d08a4027ad6632699d975b692d70a561265208e5ec1c1cf54401482b6e188c1f2958ca7d33bb74a3948ff680d6a469374753290d2d0e17f4b4807be8ddcd576684a2264f92f76eb056d96b661331cfe77b6e87cc0cf23f3416f82fa4a5c9b1cbcb9f9b72b7d311a2b393c14833c50396e51d956c83a15b7e2d5c18fc27b7e595ca8208ed7c72e4f73aeb05ea286bdb698b5582277b371ba9b4b9d0b713805abea141b7c0a275aba90d057ba331658dc772ac875fd36eb5bf378e027fdd3148a73c286081495cb336bdd081b8eb6fbb25c6d9fd19ac4b15fec326c2d65a2be4d0fd4297f5b88ea81f50f6558a11f86d3f2e1a12ebf49fd5613e92fd5cfab502145ebbba158812537598375694543676f3de11fbb801bc7371da3c6dafe7e261390192f8c910de72d79779b0d9de646082aced50bb2f1c0b7345070567ec2fad477ee5582a9ba149e2f5989b043ee703e59d33abb37eb4ddae52879a198c4139c1440101d8130643b94edfef50ec2f05be0f7cae75354f5baa48d3303f46b39e2cff3876daee304304c91afb87b6db389dda8b30caea1fbc06111fd3760a2518a488e27737bf9750d86a3c5a5eab6c08bddaa7d5b0ddb8eaf61a281cf1f9b715271479a03f8412e87508adbfda96550f0539aa530fcce4ff60ffd74d0608eddf1135cfdf3d2dde2c95f81270d5b9873b907428043df18d3685b406d7986dcd898979186f0be42c5f3eeceac8e56829f979ca77b2ffc220e49d97345ba2467d4fc6ae77ddbf97cd4f0bff61b105a383d4282abc7744ac80ddee30f47039adb16b8895f8ef42690a4c146dc45162d9e0f74acf9b5edd181fdf4dbbdad3be4750d0d46fed6b5929b12e7b35adf0b79a21a260234cf6fdf4200b97ca970b4d79784e2f06d9e9e220b9e2f03a3f5406d3bfeae5802845a3e8f634f78534f3c9550e41cd3000dad3b258c012ef7c85f6b7da1c940300ae8429eecb67c099d0f0186d27c44d662a8d93ef6b9e89db7050b70d5e0a44a9e633e0ef9115d12199d7928bead9974297cf82a1dc3a4c05b17561e4476a76c7f75a644987e15fd8c984660435dcd23bf8a6a3ad26439b3faa18fdeb850c360068426aa9db86bcef6aa616a0c125923b090c5c7557a26e18fd4711f19306a0ab8189faadbc0232b2381b218854c17ac2a23fc344902ee4867e92320ae099a2b8d4e3e24e7b8aa76b115c17ec05560679b0e6ef6b857785127f27e4be54bef66ba56d059d2308a7a34de8a9fb6ab4032c1607cc6707a3117b70d9b1d9faeb0c6785190e3c3d37f73f97303670f769cad842d15522d93a90204922b058f3ef00ebb449989ff712aa79961237f1ab50a514d8b19a7da81a47bfeabd2f2e1b2730fbdb6fdcff99a461ba1ab704552a5d42cb84c46433e45a20ccb950b2db19c564c80d81ef3eb7ed5a2f7bcb9a7a98d04cfdffa6e1c511e22daa2774f06ec20084a7ecc66f8e93406ba82193c01312a985d64ffc65531ee4246cca00fb25b60adff53ac5e15bd65779ab2f0634e112d8d68fd8bf682743a424a397f1925d28d8f97ef0a3bd09da4435cc1edc5fbb9469a211b4b900317d5865604089760165dfddc9797307d4092cabd0c4b59534850326c42b3d3a44a9226a68b8f16c7e2395607a60b288aa55389791b51e8b2d6280e3fbb9fe235a409b0c589271213dcbb70529a56af13460951563ee8083913d53cc7c34edfab70b3cc09b312043ea51cead9c12cce1a60562a142fd64256d4d22012aee0c19cfffc3e3c5c0ee66ff3aaa75886f6dbaa93b799f14960e6ef4a859c63f9bcfdaaf519769e0163395b71eabd0eb722985ad3ce27bfeaa4fe218231f76bf3580a5cb2d1d1bdbf8e8912e1d67536c0a20ebf668e015ce445c8ce5ff4d5d67c4bd77cd86225d3b1080ea8c5b8990cdda4cf8e018937cee380e05d83a0b04e225a440e34d6573efd51cc7e4c7ca6a1a542f52ebb83a47d016572a4737080ae6c5d5e86f7667459917d6b7284b25aeb85e15eae656ebe4a273ea79c14f9e5812ba340728c939bf0633e7197bb70549b8ef9c3caed4e7f62da4ba6d2683d230b60094d686abe5a7848bd33ed84023cf71e93a8b2dbfb2e01e83db1baeae64eab393df33e94916ee222caf4e205859898633ec484707e7038b05f76f6e690572c869c48093d3cba9d847466752e3a9358a89245fc1c1fc10fff24e253117b3b0b9ad1c973dc7849266bbc96dfd4f541b421f12704f7f9ed726930d3dbb7b5022d8207e64d05089bccf1f072796ab64156ae9a3fc2fbae041d8f6bb0b835c98779064bc121ad2364da463386cc7e8ceb2f1a89522d423a91da583a52fea9e4d90aa16b97271dfec9701d1017ce05216fd35acb721ceb6f012649f5cc7c9f111a58767b64d3e9a7b9f8c940647a29a391d58b6673dd16d0f05dde293a2bde56926fe61ffcdb9f74a5846a72acbd2f6619bba291878dfa357c66c3a2107b3db76f7eabf138f24402a1b990fe0593f340eef4b661c798921e0b89330a7cca0a13c553374573688e2044f960c27253b257e3f28235af8f128e93f8858cad7a4b6a0257a6883eb6afe82974210363886ffb54fc3869eb29ca078d79fcae136bb2f408ef95e38d260135354a8150a0c7865e0e89235eb179049efae42dd7e0bcff071a3a12ac4534dc714c0580c8c721a2f3d83f9b9fa594efd5e34e7f445508fe75f7de8725e604ff13f85168e14c33d51e1a9aadaf2bfeb61e5aaeb5e5df77c2daf8ec1e32474b7e1142b32f589d9135391ef7fc460a665d21769d78aa9ee71adaf2b32fcf74a7b46e0eeeaeaba786a784f837b2dc4db85e44f1a6e9dd171f2daf14861901177ff36e8f0ee42e14952d98a3f46009a09e61024cc9f7389b1a8cd8c11998f7d4542c2e0f6ec8a5a2383b5eaf544dfb1061b70e831f450695db90d56243fbcf9d194e6d07dcb5b97a327d876120eb4e3a1ab1dde911b2d2bd4d6ebea78d3a2ba880bb38e9af43f19019f14a8d6c2e5968fda5716ee5a9f7468758dd8b94256c68efb6bf3c7e58944c0ef7935fc2cd58a861549d804b2a631bd89ddeff73116413820d39fc4e0b162429fe3f2a19d0af2adefeed8662813bbd04e9d84b9da193fc300651eb4b9e275f4a2d0430a7865ef443fa832fd11fe010d25bbdb22542be67b889c1fcbdd0fe771c7405090c3d81fdb6e24548662801aa506a818f99a34a046bb628b40eb700ab1c409d836e518b1d03eff594d903b1abb4a748f01970c5dd8a461afa160a5bb2c4bd1dad4d7f0bd4eb251d8bee9702d0808ecdce967349d7b0d55c92ee92f1c4c541a99105d5835c974fcbd3ca7ec634b7eaec060d1224417e1c53977a10b766b08e5cb25eef02c43a9ec6c21cbac0bb9b2db69ec5b2a2c1f61eea6bcea81c4af8de3bcf0dcad5fc7b7e4ab7c20b060f9778f9eb064a0b0f584a7d11a14e8eeb8bd4f1db37dcfd8edd899ab2f9fc1e82d61e072fbffc5dd62b13343707b222024463f8626ffc530d01cf003519237ee45f51483e4353cc93d1b44688b09ae602b3c533fd4dc4e853578d6c107c02250775926ce490322386fdcadb96b1487535806f841c3c49ce48ba8911d66af497786ef7388aa2a199d79c1431a9c431a042e1eec53fed607a2b3aabbdb772c0a843cc9eafd1dd1cf4b38859330b3a993f88780586058173c10236f4c6037bcba910f1745530aa06ec035006ded9b8f9935c624f8de16616b3c2a280691c8eb2abd1f38950754b55c356f168ad348bc25cf8f7fadc0bebc1c2037904a20ab0d43df7dace407ecbdd67ee4ae885266d7b85398c1fda1ad6558425c135348ec4740cdc59497b7e1563847e49167249f6ea8d377321ac735d18645b7c9c811ae1fff9a95b21ee8c88db6542c4c00c7f8eae6f8cdbf2b10a0c9cfb2de76e3492b313b6bf9f91c4a70fb2d76a60918abb1b92264f06b4bd85b4405c0185eb503e18ec06791e58ba22bdd046ff4f0b755d749154e1a67227e0100096dcd21f4403c8a442739e9ea0ea82abc832b5fca87a877138c5b7d2a8bc0e5e1aaa96cea29a333b448ff3fa9420a9cc772cb95fa8d5bb7c77c6518ff8c4823624f0f2469bb7dd69a54803aa40a7512cf43d09bd7b7f26e964708f11369df55629ae7b0ef49bcc8d93dd87c5c9727e359872d9d696909ca2980238846046534f3aff3d16bc50a434b03c237825e72dfa96034214ccae9f7cdbbc6ab6fcda6d1728bf1c10d98f03b7a628652abf7125ffda5b7a660850c2fd4af28796f1fc575dd8e0c10e78ce8a94bd0705d5ddb85517ab54786480d6e142fe4294906cfc830c40b5f3fb4383b83914fc6e0de37c8211168715b92258f13aef4add16ba291e11de47cf50418e80f376b332eeb16b33dd93679118a8f49eaea6f539d29ceeaf6aff20c0220c247cad79ad5823b639ee32e51875716453e3a970c4fe7716d169781532b6ca3512ca52f4e5bd8a199a"}, 0x1010, 0x8000}, {&(0x7f0000006380)={0x27, 0x1, 0x1, 0x7, 0xdd, 0x9f, "b208af192f350b160be20eca4ae53f37ce66a0da125c45b28a778eb40a4d40528a061cf075493890128cb1598cfee0bd3984ab315b604a4ece45bb2b472f31", 0x3b}, 0x60, &(0x7f0000007680)=[{&(0x7f0000006400)="4135ab32e703535f1c70b82400f425c1c814bcd9bf4c22c94634e5490fcd4927dfefb40dd93d6c89acf3444bed1e588b100f825f088a89cb6644396d4571881d1a804195e66d922497d30358eae44a6ccba342058453a208dbcfcf3df07f51a6e4f9bd072e0a7bd5c6ab5c07556e4587fd79aba087d55fb14add27b7a3fc7f6215a96a794b346a03c6b07c40ea238f1db99ad4a2b077643d2b27aaa41e349b58e56a2a9afbf8e0e14928b7032cf14a25d7b36cd8d0fe0c2b9141fc607894e403b7fcf273d494a080aa4a4d6b7a9b0906772e73175c6cf02d0e75958fd30c041a6f533741723044d1a1d3cddeef8093bdcc58abb8f31dc6f6ff2b5845c5bbdde07c58209e59dfea271c6611f1e43d3762ecb3b4e0ca59dd2af6ad0d5bbd022da9210f680b14bf8a388697d919f94cf1c24cc71caea4dc7f80565b92c026aa890e88ea7d9a88c8a79aa5f548f0136ed7b2dd8ba5417041e7f92ce79501a2dd6ce05dc8fba0dd6415b080aa5964faf78426839c4ed4b38383e0559c8c9e069702d5f3fafdb8e13dc95af4cd9561cb9f6a8d46912b7c8fd24923251ea1b72f3500a6d7e3b9e580f747b47fbaa89e1ad1668909509d072e638af9893dc666aa222a1dc2c563d7d7f0be2e37b5bea9d926ed08b9f0ea2458ec0912e5fe2ef6dc3f9a811d4898ec2c8e22bb63213fe884b9c98f340ab9524f333569c000bd4b8a75b75ca7fa60770f22068d6bed6c2772f6ca1dc390130aa80ce79a414c9b1c08f020452d3699f41899bf7d040909530d487abc5e2c5ca95e9ec5a628fbe112a90cd9a21cd9c6fc6cdd602bb2b2bcdd0ef5f0443ad019ae08a1f071df0946a8a1b19118e888bd8d45c4a10469e50c95f5c79f35f51aa2baec002d5ce466f36931441f641537a927121f0c30d39ae77abc5f2312e5755a06436b092f9f2e3bdbd354bd840e872712e922f7e1f629778c9b7aa1cb4a1ae93d39220023844ff7981d6c774b82c658cc12aa3850a4e6441bd5efa928976d66ebac37a2080c5e6c61a6598802b224693658c3f0cfc2613e181a6b5c531bf2eb486491cc4ee30ec65e1c1f11aef95fa4b54b30147e917804e93dd59b8e1014d231751c4d97ce674de4bc57fa8219b503e89e498c92e58eb716b711f79774a14ef56009c7cef29a98dd5f1262ea0f956ecedaa36f667af6d9d0923dcaa5fbc791b91932d460560af78298ecd56d9d5b6e728ef3c90dd8f1fb2be6d8147dcc9c6988e622ee98b17640c9982271c1445e25b6797639b4f3be80edb522066c2b32e64d0492a0638b665b0d24456dabfd6210e2ceea05ae24e81f4f49aa069b0fb3c99753d11b23c88c2a196a085bfe9345bbc6a14fd281cdddb3f28fa192fbe7d09b0b4f968a8eec30844bb3d7c59d2294264728759297d6a1bf380110e6ce93dda0f908a2e716ee64196e4e1a123437d4d86b40ab464c098bace13083a81aff9767d318d5299ebb58deae0b67f35d5374ebaa21334b844d8d11270aa960b37204da5cd5a85b719113859355529214e00c8d7b8483c42bf032821c9628a197f4c9e8bd020f0c306637426446499972a05c3ea1db1fbf404ec3326a78630a98feb065177e758d0a59740d031c061e41b465908122a59ff2a1bbca4e1213dfd0eea10784553e1d62afd4d02afa8ec52245f22e522b65be521548446902148aa87c16101983be5ce4b76b91c000dac2ee24cd400e5bf5d68509d42220e0093d501836ffa7c7cfabb7e7c147e536af06a83391f8ae2b5cc65d28d4aa41aad6eaaa137c9a69b231a431c5117c938cbf95f456bbf08a1c0083de4066f0b4e8efe65c4f2012128d40cfca9b0123ca4da8ce2be15763797d5125cd840074b39db5908acbba5f97e2c33c57e2b9eeb78093ab12d8dc3a3220c5781ed3cf2ca0ffb1a5ad07cb54f10d51d2a739b6919e3ca7d69af6997e34ed168e9ea86a217f3ae1d8aa86728db3be28b78ea89ca7eec173e5234e029804600b087399118ac514149e92e2025bf18be974928c3a99296175fdee655c70e127c4a4975889a46367c534c0ead7ac488400c6155d0dcadc56d8822703ea899e0c4dcc34d5b397779914578f8b8d562730498d88fc4a9eba4352ca82ae3eec781e00839e7568affc083c1b32db19dffd40ccc052c483e2cf871782e70c235f6853b7e0c91ae560c63d935aa5a81f52445b37244c6a6b7f5abd43ee7aa20ae6b3615fc29da84ef3b36bdfa3b6fc7c63b30f08df12fe094b278b6352b21ef101880d745a13f9a2f2f0c867623ff078d643d507db6782ec3e7aba12e5dc82df36949d539ddb32e697c122e5c2d5325d6d960a17b44af786192de72e3e2c1e721daee70aad041bb9c3b29821275828285e6dadbc7d99861fa5df17a7287e9e707ee0744f1464c40f572f51020cf2b74e1972f134f50bcf9beeeaad0137d41c28788768444114d88f774340607180d7690108149a5825a8e3b6b47eb7560bf41c0f78cdd03c2f43c698b1ce2222b824b6c341b73b6333724692a98bcd5f60240a6b0b63fe1ed69a08ede4e311c0fefe1d3ce327b09c9835aba661a000827e72e92ead3931bd2d218c8b6063fb9407b0a1b1ad830c17aa5ef03429627288d747f42a8e10d66608e6a94af5fe760e652fb95ab3b9b2a6202476357faf5d5cb8fae002f24359e51bcd72a12769a06f35fc94f1c4d56c1e39dc56b0e46af110a32d96d7ebe830e4384a6c3ab7e277b809e67d09007224618fbd0a7144464434ff35625b7f3325da5169b2bfa491bd55304af3618b3146f74e1b56ae93d7289d028c3683078880d29d76f01b28cb85abbe47a9dc37b01fd3e9b1807d38b62584bf826f6d62131d0df23733a9cbc81c4a380e4f0d9a614162c969dceff926cb1188149498ea065cd2bcbc16a9f96ec08e4937d052f00b29137ce365e544bd6538c3e887bb4830f3e4724bcc224076f78f0d0cc9105ef7c7b9b977c047cfb22e7d43469c1acfae07aa8c120eed3c667da463f026f26b5ad0282a8cc878d20d805d1b888e22ad6b997bc006853c73120a0304d84d245e2967a550864dcd5e6b581a113fe3485323970ac788cf091cc40ea70c209049e7f3c743e3429693c61a352ad7fae7051775cd385b32b0fa3aaba88324770ba631860e8c5c3da82d7ab6779ad70f8188ffdfcf222a34b217d0789afdcf60f9cd8e1f3dcaca248f1d02560ab1c9306558c4415d23eea37432165ade7eade8e1dd1a1e91b69411dc13c172f19be9a98c2f82ea76a627d8c00c41fc32bec9d62e078a1ffb67a157aa0157faa695aa72b058bb354c3eec0b5ba925a52ee60f2cea8fcfe388198d560180a1f8cc03842a1c41dd2e34f6fd80107115f1d4e7a2fa09ddd20a113b1dd3a4b7790ac5dec96d5c31556a79a7c3337aad5ce3cd7e5c38c572495d0732b06cade7dd73958976ee06fb5e90e795c6dd12ad305aff5fcab3f191cc5f3a4269b7bcf96c8e4de5ef014b1f5abd59d02a8c8c8b923c299a5a90559bbfc91cee5dd2682faa9807617e057afdea8a6c2a5acfdfcf961a26ac966c01455d6cfd08fe80e59781c1893e2b6637e4b5be047515365e46007a0f1498473a66cbe9a3ede1f914b9795a8eddb31044601040f9e22046d180a47ec721e6dc0a1761c9e1c5c17d8654e36999354aff5a36900af198de9272d3cddca564dd544fe709da0836ef6c8994604b29ed687f994da3edf17a50c0ffcd48be420411d438b7a21f90fd60da6f0a97e1035cfc3792f4e42eddcdf7347c9e263a980e159ac04c3d7f7ef58b2918be6ac21c9067e4f30ea23d427a7d7d8eed5dd403a2953fff65f22649a00d8625e1605fd742a667cec040d40ac75477a4f95fe933b0d516f3b77a2be6835df2045f99129a4423e9b202065944ddf4e20fdb42b49b0c39cc2ad827512fbcb1a79c3e3aef3537ec7ab55469f576c591ce8a015c8f69965ebbaf1fd87d01e7b7abca256135a5e60f7f4d51db9821fe2091f34f6521deb254beb675e61fcd551fc8744c371c199f3067640af631eb0cfa749556cc7d67699643cce855cdd5bbbd6daf752ad88e6f9543ac132867fef7d9649f9fee3ecad6d6495cb46b34a3858c2cd4c13f39592bad9d03baa119c5b8d520e6b107caa0cc332b3e1d13df957f25a235d398cdcf4281c6f27b828abd6a01e6d23d6399a82cbd5273c3f12b56cfd07ffd30e529d887cdb280dd93271c47201df83ad334467a3daf45a0cb510f279af92f1d0324c7fc1e31474921f3d2a9b6d7a060436691f67ce95bfc600e8bf549a1caec4fd73e11fb3fc788680ee7f699c355cd983a4f00eadd0c81b3a437df7d4dc7f68fa9755897aadb0adc314d2b7344375c618bd00076641b0d1af8877ed188c19ee76c835db8cebca0ff52492725ff980a665dc9af0c32acc276f439ea8ddf0b171856bb92cfcd2881a75943ebf21cb4b0f039ec26b6cfaa78fdcc55dff0ee1d18fa7d1b7de61aaa6df46416c4cc5ead783f075b3f08b8b4658383de87355c75ca1aa100eacc8e61ce2805787411977503b03e32ad97d0aefb568ac0acd78a7a33898d8710ab579f17b0e2a5a790d04c46ee282ee95b056923fc24247c219028901cd79142b1cfa329cea91f075c179755579b33dd96de7e85c8a0e95dd2cf960b235ff7f8da70f7fe39a2880972d88f27c1527ad350faa4baaeb2aff47dbea5b52c707df567b99e4c56be6b8b56224726e0c35a4a6e8b625535c3b5ab1e78a4d16efbcff4e9296721665fd57b61e06403528279bc29e2a7e3f22f0ffacfc23dd2fa9c95b52ac18615b7ecb9cbb817e067a781ec1a4e7fed00ffa841fb97bc4116e5951ffca6042186111ecb7571e43d823ad830703c9d8f908cc1ba368d40aae59559a78ca76dc2aa966f90d8fbcab34148810a962e9876b79cfdc135e1c10ca0db3eaec7f143e4d76254829911762a697153645d5a080b0b4b546732d465918c804754db865fbf0b3cc2dcfa9d08412f5abca3c56defedb708642844a992eb302327deb4a4885a0110860beb43a50dfaa4cb8bb54b4e33e829907259886f08745099d94785d0d738e1cbf9d01275f979ea73eabaa4ac59699d65e6068585404a4aa7bf787cb6d58349076c6c82bfd9e738fff24cdd4525c730f2551f1d2bccb3db909475fcf06b0ff2d926a9be248fd60c499c7f9236433ab9eecc3619800d70111cd983c52989c9324dd4b540cf18a2a1b6959661c1113c7e989d9cfe338224efbd35e83ef83d8fe3d5e9e035254b11425e08b3be532f399ed05a1db806e1cb980414da64571a1d11dfe9b3519671fdd9c86565979cbce1a3b83372872e8e24e68dd14b77047500706119339081ded193db875c943bc4438e1b49125712d25cd05ba76f53cfbe15bc80d839dc1f959c6e55d575845284b08cd033e276bed996872bdc370cea65e4cbcf370329d4b6f69c7e82344ceff4d45d06481b603a0516507cb69b8948d52813bd6c421e1cdb98e67e855557fb3c9e2433653f3b19cbfc4730f8ccbcd4435e6ab9fbc7f7ac538e055564e46fa1aa1ac2a1cda36863d9bc46893e0338308299f8257a225960a6ee336b67480f277fbf8de8f8f32de4a0879d70aa7fc0c8e3789b5413fe7d6236d5a769795ecae5dc30bff3d0b8a273f845add81333754469e625589b1334986e884d841e625a515819c652db806f92ad5692f9c40b69b822cd006e2da556c5b1c9fd16fd0de8079501c22b98a6743b66732a3b672ec957e55bb31ef445dc0a541adddbf1d508ca875a137db6bafae9bf71da1d1dc7b9", 0x1000}, {&(0x7f0000007400)="e7040e6a4458a0284aeaeb89364018f6b03933010c68ba61363ef05a09940cfa31973900e623a26a60", 0x29}, {&(0x7f0000007440)="41238b7700de8c3b0116d40a4cfec0c53229deb2fc4c242f1ea9e5491370c7d3e5431af0bd6cefdd1283370021a327de9ceab547d98ce5bb71df1962ddc32f3144e3b0929a20ffdf2cffa899abf196f3e4e3fee4abc8c7fa547bb207ccd8878fbc87c4e590146af174312a491511663bde764e35f5ce09e59c8edc324a058e4a58a569b87f23d5f18fb593420880a42708e48ce41b8a679b081b4f88354e0d289025cd7af5a1659d0a2cd8d8e9a08632fe3c05269779d7ab0bceccbf4da9d133ee2582f891842c0d3bac4cbed6ec1ef1b6562d23e8983afc3107516be699394082b463754acc9f3880f273e7c50ed8bb36013bb5", 0xf4}, {&(0x7f0000007540)="125266928d468cf511c64def445850884ce14c58f8f6fe3bbb7a6495f3498cbc5e6574de366aa6bb54953ab77b6362891c57119467bee09b9ca40af22e80d4883b27e13c58edf7be22aa13e9d9a91c37922dd7d11a1e782d3fe5cccd2c85baadde6c214b1c83", 0x66}, {&(0x7f00000075c0)="6f1b493cdf3a82cffc2c3990947e0313087f5c795c0744fbcd65b86cde7dd81b67ca1f4e17f94fb76fd78805f2b5ee918fcd4e90d6ec5277495014e8153a303ceb0b6f170b0ba3a8725f8e3500ef0fd2bfb7a850eeb0f290f5789c878e0fad900a0091c922e156566ca763ae41c404fa82e566636aecdfb7ddc8207045bb4624713d5410a7853dafeb167ca09afec27993fe", 0x92}], 0x5, &(0x7f0000007700)={0x38, 0x114, 0x101, "b0c325d5c81f09d0b7db92aaf9dacef4bab63078f516472ab403a7412628624d11dc16ad"}, 0x38, 0x20000000}, {&(0x7f0000007740)={0x27, 0x0, 0x1, 0x7, 0x10000, 0x4, "49f7b92335af7db4a7f6d3dab4719313fb74857f4c22810957452c6347e8df82f6556982f157a24528eedc86a7ff1ad51fd9a7eecbe6edc37769197433d8df", 0x1a}, 0x60, &(0x7f0000007ac0)=[{&(0x7f00000077c0)="d596f1853573e0b7a167cf791ec2d3b0fe23700d52567550bc82c12cc62fd0ef6efcb7d46aa2c7da413dccc896627c3f6c367fc45d826aaac6d1a42114cce976e0ff17af603b09353fe08cc99345da8ad01ce90fb5a96c7db4b34e3beb4b7921e1f4c20fa44af331cc28cf4ccfa1232419656227a7e745f9b6b0a1c537f52412ce45a0498f869d78c59a1b9e8bea1e9d770fd8afe011e3ed73e6393a2fcecc037d904813df9c6b1c71daad8f14c15b25c1696a71eb", 0xb5}, {&(0x7f0000007880)="7a0f50fb9ee186bd261500238b436022cfc19083ae35fbfc", 0x18}, {&(0x7f00000078c0)="00465c2795bdeb0cf173c03bc68616fda1d1e9c2ad5dbeb961fb25d6879259c18b5065a3ff10af3ddeb9428a6ff1dff1f73ea1af5aba1b42de63bd44aa0ded8f7eb32817634ab2d1c0dffcb8048ea1dc83dd1debbe78c16c40b3539ce2780ccfa87f87d197dc576fbf40dfd016bff59b747a7a92c23ad68844aabf88deeb378ed94ecf1f37c40e28f5cf1d5860936b60bd6f605905bd5593eee48a26f7bb912ded986b8203d82931bc38a20c874a7412ca58f31d2083cd88c65e32d03787ed34af9cf7b636ea4cba8a9e16207050820863ef8f8ca83254322e2d5dab6d22dcaa02cdf7fff5180cb66f9d2622130d469347acb4acb97eef31", 0xf8}, {&(0x7f00000079c0)="be", 0x1}, {&(0x7f0000007a00)="4edd2fe6b8fe1dee59fd9eb64a3adeadf013b423b54a0468bce54d5a024fd7e817f37778467123d7cdcc85ae3c7cfe48e5867a66d7b8fc2b9b7ae4cde884c9b04a3bea16284c5ded8e0412fb02996cc25eb5e362596799aa774527573f2c1e390ee6e608e72505cb416f16d5c3a5aa3e28a0faab2f2686ec6cfb3117ae0cc6beda365fb4e9ae5372ac2b428766aab98c94c0ce7f5f8443ffee6675f76eeedf2c10918ed1cac1b7cf557ad7541aabbaf7e7298de5c1030d", 0xb7}], 0x5, &(0x7f0000007b40)={0xc0, 0x113, 0x1f, "918fb57587cb4a9f2de772feb9ae67ec4b5ffc33bf6c2a2c4654315bfbfb219ef173a438f926e607806919a8258f04d16d127242f327e53586bc6cc8463727acf56e549cf2b335a0d3fa38b4e8c91c23d0304785bb671f97b954d624fd4b68238dd2965ce8562fcc8695321da4ec9483bf8c260d8ef33ea6323e513d596ea6f0e4d8c25815a5abcbdf6cc90a87d7603c0ea16bad7fbd4f9496aa3795692f57b62abf81fd569584379a17"}, 0xc0, 0x11}], 0x6, 0x804) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0x3df, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r1, 0x0) io_setup(0xfffffffffffffffd, &(0x7f0000000180)=0x0) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80000000, r1, &(0x7f00000001c0)="67dc7ffae6f5f778e8f31b427b6d32a621dbb870202cb18f8cd70e620049d6bda19b4c28c021e257adc1069aa50ce777ec5cbcee808a867ea4a7a05c5db7da75ee59d29b751454df723a1f33c6b67fb82f89e78ecc87efc627c596aee9315bf41cc6bdc403a2637942475469c74d3a2bd098b5c1c299f9cd1c0ea9750fc4a4b7089ff892e80126a1ec467c62abd99e30c5cd73b32ba4a2f8050c31d9ec7323298c150864f3906b81a45a5296ff15c04086cc3aad1fcb86ad36f51fd8e90beeb89c2b236b231fc466a3b023d37515af4afe316128f2ce411d80670812a9f17a4b9673663c", 0xe4, 0x1, 0x0, 0x0, r0}, &(0x7f0000000300)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:44 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0xa00, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:44 executing program 7 (fault-call:4 fault-nth:5): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getpeername$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0xd) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @rand_addr}, &(0x7f0000000400)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000440)={@multicast2, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000540)={@mcast2, 0x0}, &(0x7f0000000580)=0x14) recvmmsg(r1, &(0x7f0000001c00)=[{{&(0x7f00000005c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/204, 0xcc}], 0x3, &(0x7f0000001840)=""/249, 0xf9, 0x401}, 0x6}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/76, 0x4c}, {&(0x7f00000019c0)=""/207, 0xcf}, {&(0x7f0000001ac0)=""/10, 0xa}], 0x3, &(0x7f0000001b40)=""/145, 0x91, 0x8000}, 0x7}], 0x2, 0x40, 0x0) accept4$packet(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001cc0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001d40)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000001e40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e80)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000001f80)=0xe8) getsockname$packet(r1, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000002240)=0x14) getpeername$packet(r1, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000004b80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000050c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000051c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005200)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000005300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005340)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000005440)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005480)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000005500)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005540)={'veth0_to_team\x00', 0x0}) clock_gettime(0x0, &(0x7f0000009680)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000009540)=[{{&(0x7f0000005580)=@hci={0x0, 0x0}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005600)=""/160, 0xa0}, {&(0x7f00000056c0)}, {&(0x7f0000005700)}, {&(0x7f0000005740)=""/201, 0xc9}, {&(0x7f0000005840)=""/96, 0x60}, {&(0x7f00000058c0)=""/15, 0xf}], 0x6, &(0x7f0000005980)=""/25, 0x19, 0xffff}, 0xf3b0}, {{&(0x7f00000059c0)=@vsock, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005a40)=""/246, 0xf6}, {&(0x7f0000005b40)=""/40, 0x28}], 0x2, &(0x7f0000005bc0)=""/81, 0x51, 0x5c3a0019}, 0x1}, {{&(0x7f0000005c40)=@ipx, 0x80, &(0x7f0000006000)=[{&(0x7f0000005cc0)}, {&(0x7f0000005d00)=""/171, 0xab}, {&(0x7f0000005dc0)=""/120, 0x78}, {&(0x7f0000005e40)=""/164, 0xa4}, {&(0x7f0000005f00)=""/253, 0xfd}], 0x5, &(0x7f0000006080)=""/4096, 0x1000, 0xef}, 0x8}, {{&(0x7f0000007080)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000007240)=[{&(0x7f0000007100)=""/58, 0x3a}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/81, 0x51}], 0x3, &(0x7f0000007280)=""/4096, 0x1000, 0x2}, 0xffffffffffffffff}, {{&(0x7f0000008280)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000094c0)=[{&(0x7f0000008300)=""/58, 0x3a}, {&(0x7f0000008340)=""/250, 0xfa}, {&(0x7f0000008440)=""/4096, 0x1000}, {&(0x7f0000009440)=""/25, 0x19}, {&(0x7f0000009480)=""/63, 0x3f}], 0x5, 0x0, 0x0, 0x3ff}, 0x48334fd0}], 0x5, 0x0, &(0x7f00000096c0)={r22, r23+30000000}) accept4$packet(r1, &(0x7f0000009700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000009740)=0x14, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000009e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000009e00)={&(0x7f0000009780)={0x658, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {0x3}, [{{0x8, 0x1, r3}, {0x13c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x40}}, {0x8, 0x7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x124, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3ff000000000}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r18}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x12c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0xffffffffffff0000, 0x100000001, 0x3, 0xb077}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x9, 0x3, 0x2, 0x1}, {0x4, 0xfc5, 0x5, 0x40}, {0x5, 0x3, 0x7fff, 0x8b10}, {0x10000000, 0x4, 0x6, 0x4}, {0x8, 0x421a, 0x9, 0xffffffffffffffc1}, {0xff, 0x1, 0xfffffffffffffffd}, {0x5, 0x6, 0x5, 0xc8}]}}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r1, 0x1, 0x0, 0xb7c) [ 1004.386983] binder: 25966:25967 got transaction to invalid handle [ 1004.393344] binder: 25966:25967 transaction failed 29201/-22, size 0-0 line 2856 [ 1004.410146] binder: 25973:25982 got transaction to invalid handle [ 1004.416525] binder: 25973:25982 transaction failed 29201/-22, size 536870912-0 line 2856 1970/01/01 00:16:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x4028660f, &(0x7f0000000040)) 1970/01/01 00:16:44 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:44 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) accept$ax25(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) [ 1004.450294] binder: 25966:25967 ioctl c0306201 20007000 returned -14 [ 1004.466313] binder: 25973:25990 got transaction to invalid handle [ 1004.472784] binder: 25973:25990 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1004.476253] binder_alloc: binder_alloc_mmap_handler: 25966 20001000-20004000 already mapped failed -16 [ 1004.495639] FAULT_INJECTION: forcing a failure. [ 1004.495639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1004.503554] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.507675] CPU: 0 PID: 25986 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 1004.520132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.529588] Call Trace: [ 1004.532199] dump_stack+0x1b9/0x294 [ 1004.535852] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1004.541060] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.543848] binder: 25966:25991 got transaction to invalid handle [ 1004.546608] ? __radix_tree_lookup+0x3d4/0x6b0 [ 1004.546632] should_fail.cold.4+0xa/0x1a [ 1004.546652] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1004.546671] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1004.546690] ? find_held_lock+0x36/0x1c0 [ 1004.546723] ? check_same_owner+0x320/0x320 [ 1004.552975] binder: 25966:25991 transaction failed 29201/-22, size 0-0 line 2856 [ 1004.557521] ? rcu_note_context_switch+0x710/0x710 [ 1004.557541] ? __might_sleep+0x95/0x190 [ 1004.557561] __alloc_pages_nodemask+0x34e/0xd70 [ 1004.557579] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1004.557598] ? debug_check_no_locks_freed+0x310/0x310 [ 1004.557610] ? lock_downgrade+0x8e0/0x8e0 [ 1004.557628] ? kasan_check_read+0x11/0x20 [ 1004.585210] binder: undelivered TRANSACTION_ERROR: 29201 [ 1004.587652] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1004.587668] ? percpu_counter_add_batch+0xf2/0x150 [ 1004.587693] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1004.587709] alloc_pages_vma+0xdd/0x550 [ 1004.598380] binder: undelivered TRANSACTION_ERROR: 29201 [ 1004.601260] shmem_alloc_page+0x178/0x2c0 [ 1004.601278] ? shmem_swapin+0x3a0/0x3a0 [ 1004.601298] ? find_lock_entry+0x2db/0x8a0 [ 1004.601316] ? __pagevec_lru_add+0x30/0x30 [ 1004.613950] binder: 25966:25967 ioctl 40046207 0 returned -16 [ 1004.615652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1004.615678] ? security_vm_enough_memory_mm+0x9d/0xc0 [ 1004.615698] shmem_alloc_and_acct_page+0x1e9/0x800 [ 1004.615718] ? shmem_alloc_hugepage+0x5e0/0x5e0 [ 1004.620179] binder: 25966:25991 ioctl c0306201 20007000 returned -14 [ 1004.625297] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1004.625312] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1004.625328] ? _raw_spin_unlock_irq+0x27/0x70 [ 1004.625344] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1004.625360] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1004.625377] shmem_getpage_gfp+0x6cf/0x4190 [ 1004.625387] ? __lock_acquire+0x7f5/0x5140 [ 1004.625400] ? kasan_slab_alloc+0x12/0x20 [ 1004.625425] ? shmem_mfill_atomic_pte+0x1c40/0x1c40 [ 1004.625436] ? __lock_acquire+0x7f5/0x5140 [ 1004.625455] ? print_usage_bug+0xc0/0xc0 [ 1004.625471] ? print_usage_bug+0xc0/0xc0 [ 1004.625499] ? __lock_acquire+0x7f5/0x5140 [ 1004.655710] binder: undelivered TRANSACTION_ERROR: 29201 [ 1004.658444] ? __lock_acquire+0x7f5/0x5140 [ 1004.658469] ? debug_check_no_locks_freed+0x310/0x310 [ 1004.658491] ? print_usage_bug+0xc0/0xc0 [ 1004.658505] ? __lock_acquire+0x7f5/0x5140 [ 1004.658519] ? page_add_new_anon_rmap+0x850/0x850 [ 1004.658531] ? print_usage_bug+0xc0/0xc0 [ 1004.658547] ? debug_check_no_locks_freed+0x310/0x310 [ 1004.663452] binder: undelivered TRANSACTION_ERROR: 29201 [ 1004.666995] ? print_usage_bug+0xc0/0xc0 [ 1004.667009] ? print_usage_bug+0xc0/0xc0 [ 1004.667031] ? print_usage_bug+0xc0/0xc0 [ 1004.667046] ? __lock_acquire+0x7f5/0x5140 [ 1004.667060] ? lock_acquire+0x1dc/0x520 [ 1004.667076] ? alloc_set_pte+0x1013/0x1600 [ 1004.667098] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.667116] ? page_mapping+0x447/0x5c0 [ 1004.833851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.839379] ? mark_page_accessed+0x66a/0xd10 [ 1004.843863] ? shmem_parse_options.cold.49+0x49/0x49 [ 1004.848964] ? activate_page+0x980/0x980 [ 1004.853029] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.858563] ? __set_page_dirty_no_writeback+0x145/0x280 [ 1004.864017] ? do_writepages+0x1a0/0x1a0 [ 1004.868073] ? find_held_lock+0x36/0x1c0 [ 1004.872129] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1004.877138] ? sanity+0x238/0x330 [ 1004.880586] ? kasan_check_write+0x14/0x20 [ 1004.884806] ? copy_page_to_iter+0x52c/0xf30 [ 1004.889205] ? kernel_text_address+0x79/0xf0 [ 1004.893601] ? rcu_note_context_switch+0x710/0x710 [ 1004.898517] ? check_same_owner+0x320/0x320 [ 1004.902823] ? __save_stack_trace+0x7e/0xd0 [ 1004.907136] shmem_file_read_iter+0x397/0x1070 [ 1004.911716] ? shmem_fallocate+0x12e0/0x12e0 [ 1004.916110] ? lock_downgrade+0x8e0/0x8e0 [ 1004.920246] ? kasan_check_read+0x11/0x20 [ 1004.924383] ? debug_mutex_init+0x1c/0x60 [ 1004.928526] ? __lockdep_init_map+0x105/0x590 [ 1004.933007] ? lockdep_init_map+0x9/0x10 [ 1004.937060] ? debug_mutex_init+0x2d/0x60 [ 1004.941194] ? __mutex_init+0x1ef/0x280 [ 1004.945153] ? __ia32_sys_membarrier+0x150/0x150 [ 1004.949895] ? __lockdep_init_map+0x105/0x590 [ 1004.954379] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1004.959381] ? iov_iter_pipe+0xc2/0x2f0 [ 1004.963359] generic_file_splice_read+0x552/0x910 [ 1004.968197] ? add_to_pipe+0x360/0x360 [ 1004.972086] ? rw_verify_area+0x118/0x360 [ 1004.976218] ? add_to_pipe+0x360/0x360 [ 1004.980089] do_splice_to+0x12e/0x190 [ 1004.983878] splice_direct_to_actor+0x268/0x8d0 [ 1004.988531] ? pipe_to_sendpage+0x3f0/0x3f0 [ 1004.992838] ? do_splice_to+0x190/0x190 [ 1004.996810] ? rw_verify_area+0x118/0x360 [ 1005.000950] do_splice_direct+0x2cc/0x400 [ 1005.005084] ? splice_direct_to_actor+0x8d0/0x8d0 [ 1005.009934] ? rw_verify_area+0x118/0x360 [ 1005.014068] do_sendfile+0x60f/0xe00 [ 1005.017770] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1005.022353] ? __might_sleep+0x95/0x190 [ 1005.026338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.031866] ? _copy_from_user+0xdf/0x150 [ 1005.036005] __x64_sys_sendfile64+0x155/0x240 [ 1005.040498] ? __ia32_sys_sendfile+0x290/0x290 [ 1005.045079] ? do_syscall_64+0x92/0x800 [ 1005.049054] do_syscall_64+0x1b1/0x800 [ 1005.052929] ? finish_task_switch+0x1ca/0x840 [ 1005.057411] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1005.062326] ? syscall_return_slowpath+0x30f/0x5c0 [ 1005.067243] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1005.072606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1005.077449] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.082622] RIP: 0033:0x455a09 [ 1005.085793] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1005.093507] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1005.100763] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 [ 1005.108042] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.115296] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1005.122552] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000005 1970/01/01 00:16:45 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfffffef6) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'system.posix_acl_access\x00'}, &(0x7f00000000c0)="2d65746831c16d643573756d757365722562646576736563757269747900", 0x1e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fallocate(r2, 0x1, 0x0, 0xb7c) 1970/01/01 00:16:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x6800, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20000000, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 1970/01/01 00:16:45 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523") accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 1970/01/01 00:16:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x0, 0x0, [0x0, 0x0, 0x7800000000000000]}}, 0x20) 1970/01/01 00:16:45 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) keyctl$session_to_parent(0x12) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0) 1970/01/01 00:16:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x2, &(0x7f0000000040)) 1970/01/01 00:16:45 executing program 7 (fault-call:4 fault-nth:6): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 1970/01/01 00:16:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x20000040, 0x0, &(0x7f0000002000)}) [ 1005.636233] binder: 26020:26022 ioctl c0306201 20007000 returned -14 [ 1005.645943] binder: 26015:26017 got transaction to invalid handle [ 1005.652313] binder: 26015:26017 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1005.673905] FAULT_INJECTION: forcing a failure. [ 1005.673905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 1970/01/01 00:16:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)="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") ioctl$DRM_IOCTL_RES_CTX(r0, 0x8004587d, &(0x7f0000000040)) [ 1005.686082] CPU: 0 PID: 26019 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 1005.693366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.702733] Call Trace: [ 1005.705343] dump_stack+0x1b9/0x294 [ 1005.708989] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1005.714202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.719757] ? __radix_tree_lookup+0x3d4/0x6b0 [ 1005.724360] should_fail.cold.4+0xa/0x1a [ 1005.728447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1005.733574] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1005.738613] ? find_held_lock+0x36/0x1c0 [ 1005.742153] EXT4-fs (sda1): shut down requested (0) [ 1005.742705] ? check_same_owner+0x320/0x320 [ 1005.752026] ? rcu_note_context_switch+0x710/0x710 [ 1005.756979] ? __might_sleep+0x95/0x190 [ 1005.760972] __alloc_pages_nodemask+0x34e/0xd70 [ 1005.765655] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1005.770691] ? debug_check_no_locks_freed+0x310/0x310 [ 1005.775898] ? lock_downgrade+0x8e0/0x8e0 [ 1005.780069] ? kasan_check_read+0x11/0x20 [ 1005.784233] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1005.789261] ? percpu_counter_add_batch+0xf2/0x150 [ 1005.794214] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1005.795836] binder_alloc: binder_alloc_mmap_handler: 26020 20001000-20004000 already mapped failed -16 [ 1005.799760] alloc_pages_vma+0xdd/0x550 [ 1005.799783] shmem_alloc_page+0x178/0x2c0 [ 1005.799799] ? shmem_swapin+0x3a0/0x3a0 [ 1005.799821] ? find_lock_entry+0x2db/0x8a0 [ 1005.799838] ? __pagevec_lru_add+0x30/0x30 [ 1005.799855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.799877] ? security_vm_enough_memory_mm+0x9d/0xc0 [ 1005.812443] binder: 26015:26043 got transaction to invalid handle [ 1005.813286] shmem_alloc_and_acct_page+0x1e9/0x800 [ 1005.813308] ? shmem_alloc_hugepage+0x5e0/0x5e0 [ 1005.813325] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1005.813340] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1005.813361] ? _raw_spin_unlock_irq+0x27/0x70 [ 1005.817581] binder: 26015:26043 transaction failed 29201/-22, size 536870912-0 line 2856 [ 1005.821460] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1005.821479] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1005.821497] shmem_getpage_gfp+0x6cf/0x4190 [ 1005.821514] ? __lock_acquire+0x7f5/0x5140 [ 1005.861829] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.865431] ? kasan_slab_alloc+0x12/0x20 [ 1005.865464] ? shmem_mfill_atomic_pte+0x1c40/0x1c40 [ 1005.865478] ? __lock_acquire+0x7f5/0x5140 [ 1005.865500] ? print_usage_bug+0xc0/0xc0 [ 1005.865517] ? print_usage_bug+0xc0/0xc0 [ 1005.865547] ? __lock_acquire+0x7f5/0x5140 [ 1005.889864] binder_alloc: 26020: binder_alloc_buf, no vma [ 1005.892779] ? __lock_acquire+0x7f5/0x5140 [ 1005.892805] ? debug_check_no_locks_freed+0x310/0x310 [ 1005.892824] ? print_usage_bug+0xc0/0xc0 [ 1005.892837] ? __lock_acquire+0x7f5/0x5140 [ 1005.892852] ? page_add_new_anon_rmap+0x850/0x850 [ 1005.892866] ? print_usage_bug+0xc0/0xc0 [ 1005.892880] ? debug_check_no_locks_freed+0x310/0x310 [ 1005.892891] ? print_usage_bug+0xc0/0xc0 [ 1005.892907] ? print_usage_bug+0xc0/0xc0 [ 1005.897188] binder: 26020:26039 transaction failed 29189/-3, size 0-0 line 2971 [ 1005.902429] ? print_usage_bug+0xc0/0xc0 [ 1005.902445] ? __lock_acquire+0x7f5/0x5140 [ 1005.902458] ? lock_acquire+0x1dc/0x520 [ 1005.902478] ? alloc_set_pte+0x1013/0x1600 [ 1005.914278] binder: undelivered TRANSACTION_ERROR: 29201 [ 1005.915848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.915866] ? page_mapping+0x447/0x5c0 [ 1005.915883] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.915900] ? mark_page_accessed+0x66a/0xd10 [ 1005.915915] ? shmem_parse_options.cold.49+0x49/0x49 [ 1005.915932] ? activate_page+0x980/0x980 [ 1005.915950] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.915963] ? __set_page_dirty_no_writeback+0x145/0x280 [ 1005.915979] ? do_writepages+0x1a0/0x1a0 [ 1005.920550] binder: undelivered TRANSACTION_ERROR: 29201 [ 1005.924069] ? find_held_lock+0x36/0x1c0 [ 1005.924095] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1005.924110] ? sanity+0x238/0x330 [ 1005.924133] ? kasan_check_write+0x14/0x20 [ 1005.924148] ? copy_page_to_iter+0x52c/0xf30 [ 1005.924176] ? kernel_text_address+0x79/0xf0 [ 1005.924195] ? rcu_note_context_switch+0x710/0x710 [ 1005.924210] ? check_same_owner+0x320/0x320 [ 1005.924223] ? __save_stack_trace+0x7e/0xd0 [ 1005.924243] shmem_file_read_iter+0x397/0x1070 [ 1005.952385] binder: 26020:26022 ioctl 40046207 0 returned -16 [ 1005.956500] ? shmem_fallocate+0x12e0/0x12e0 [ 1005.956521] ? lock_downgrade+0x8e0/0x8e0 [ 1005.956544] ? kasan_check_read+0x11/0x20 [ 1005.956558] ? debug_mutex_init+0x1c/0x60 [ 1005.956575] ? __lockdep_init_map+0x105/0x590 [ 1005.956591] ? lockdep_init_map+0x9/0x10 [ 1005.956602] ? debug_mutex_init+0x2d/0x60 [ 1005.956618] ? __mutex_init+0x1ef/0x280 [ 1005.962856] binder: 26020:26039 ioctl c0306201 20007000 returned -14 [ 1005.965878] ? __ia32_sys_membarrier+0x150/0x150 [ 1005.965893] ? __lockdep_init_map+0x105/0x590 [ 1005.965916] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1005.965931] ? iov_iter_pipe+0xc2/0x2f0 [ 1005.965952] generic_file_splice_read+0x552/0x910 [ 1005.965970] ? add_to_pipe+0x360/0x360 [ 1005.966002] ? rw_verify_area+0x118/0x360 [ 1006.001730] binder: undelivered TRANSACTION_ERROR: 29189 [ 1006.003423] ? add_to_pipe+0x360/0x360 [ 1006.003442] do_splice_to+0x12e/0x190 [ 1006.003463] splice_direct_to_actor+0x268/0x8d0 [ 1006.003480] ? pipe_to_sendpage+0x3f0/0x3f0 [ 1006.003500] ? do_splice_to+0x190/0x190 [ 1006.003516] ? rw_verify_area+0x118/0x360 [ 1006.003533] do_splice_direct+0x2cc/0x400 [ 1006.009543] binder: undelivered TRANSACTION_COMPLETE [ 1006.013027] ? splice_direct_to_actor+0x8d0/0x8d0 [ 1006.013047] ? rw_verify_area+0x118/0x360 [ 1006.013064] do_sendfile+0x60f/0xe00 [ 1006.013087] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1006.013104] ? __might_sleep+0x95/0x190 [ 1006.013128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1006.013142] ? _copy_from_user+0xdf/0x150 [ 1006.013159] __x64_sys_sendfile64+0x155/0x240 [ 1006.034215] binder: undelivered transaction 1339, process died. [ 1006.037843] ? __ia32_sys_sendfile+0x290/0x290 [ 1006.037862] ? do_syscall_64+0x92/0x800 [ 1006.037883] do_syscall_64+0x1b1/0x800 [ 1006.037902] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1006.037917] ? syscall_return_slowpath+0x30f/0x5c0 [ 1006.037941] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1006.281957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1006.286798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.291975] RIP: 0033:0x455a09 [ 1006.295151] RSP: 002b:00007fb7d7b3ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1006.302847] RAX: ffffffffffffffda RBX: 00007fb7d7b3b6d4 RCX: 0000000000455a09 [ 1006.310192] RDX: 00000000200ddff8 RSI: 0000000000000014 RDI: 0000000000000013 [ 1006.317449] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.324712] R10: 0000000102000001 R11: 0000000000000246 R12: 0000000000000015 [ 1006.331966] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000006 [ 1006.389725] ------------[ cut here ]------------ [ 1006.394658] DEBUG_LOCKS_WARN_ON(sem->owner != get_current()) [ 1006.394736] WARNING: CPU: 1 PID: 26036 at kernel/locking/rwsem.c:133 up_write+0x1c6/0x210 [ 1006.408826] Kernel panic - not syncing: panic_on_warn set ... [ 1006.408826] [ 1006.416216] CPU: 1 PID: 26036 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 1006.423472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.432812] Call Trace: [ 1006.435392] dump_stack+0x1b9/0x294 [ 1006.439016] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1006.444197] ? up_write+0x1a0/0x210 [ 1006.447816] panic+0x22f/0x4de [ 1006.451012] ? add_taint.cold.5+0x16/0x16 [ 1006.455156] ? __warn.cold.8+0x148/0x1b3 [ 1006.459202] ? up_write+0x1c6/0x210 [ 1006.462812] __warn.cold.8+0x163/0x1b3 [ 1006.466682] ? up_write+0x1c6/0x210 [ 1006.470297] report_bug+0x252/0x2d0 [ 1006.473925] do_error_trap+0x1de/0x490 [ 1006.477806] ? blk_start_plug+0xc4/0x360 [ 1006.481857] ? math_error+0x420/0x420 [ 1006.485642] ? vprintk_default+0x28/0x30 [ 1006.489689] ? vprintk_func+0x81/0xe7 [ 1006.493473] ? printk+0x9e/0xba [ 1006.496740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1006.501567] do_invalid_op+0x1b/0x20 [ 1006.505270] invalid_op+0x14/0x20 [ 1006.508705] RIP: 0010:up_write+0x1c6/0x210 [ 1006.512917] RSP: 0018:ffff8801b3acf680 EFLAGS: 00010286 [ 1006.518270] RAX: 0000000000000030 RBX: ffff8801cc51cb00 RCX: ffffc900076e4000 [ 1006.525538] RDX: 0000000000019008 RSI: ffffffff8160f711 RDI: 0000000000000001 [ 1006.532801] RBP: ffff8801b3acf708 R08: ffff8801c9f78580 R09: fffffbfff11b090c [ 1006.540078] R10: fffffbfff11b090c R11: ffffffff88d84863 R12: 1ffff10036759ed0 [ 1006.547337] R13: dffffc0000000000 R14: ffff8801b3acf6e0 R15: ffff8801cc51cb58 [ 1006.554612] ? vprintk_func+0x81/0xe7 [ 1006.558408] ? up_read+0x110/0x110 [ 1006.561938] ? wait_for_completion+0x870/0x870 [ 1006.566515] ? lock_release+0xa10/0xa10 [ 1006.570478] ? thaw_super_locked+0x109/0x260 [ 1006.574876] percpu_up_write+0xcd/0x110 [ 1006.578837] ? __percpu_up_read+0x50/0x50 [ 1006.582985] ? down_write+0x87/0x120 [ 1006.586696] ? thaw_super+0x16/0x30 [ 1006.590309] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1006.595828] thaw_super_locked+0x1f5/0x260 [ 1006.600060] thaw_super+0x1e/0x30 [ 1006.603508] thaw_bdev+0x162/0x1a0 [ 1006.607042] ext4_ioctl+0x180e/0x4210 [ 1006.610838] ? lock_downgrade+0x8e0/0x8e0 [ 1006.614969] ? ext4_ioctl_group_add+0x560/0x560 [ 1006.619621] ? do_futex+0x249/0x27d0 [ 1006.623319] ? rcu_is_watching+0x85/0x140 [ 1006.627450] ? graph_lock+0x170/0x170 [ 1006.631243] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1006.636422] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1006.641611] ? exit_robust_list+0x290/0x290 [ 1006.645925] ? find_held_lock+0x36/0x1c0 [ 1006.649984] ? lock_downgrade+0x8e0/0x8e0 [ 1006.654118] ? kasan_check_read+0x11/0x20 [ 1006.658247] ? rcu_is_watching+0x85/0x140 [ 1006.662376] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1006.667552] ? __fget+0x40c/0x650 [ 1006.670999] ? expand_files.part.8+0x9a0/0x9a0 [ 1006.675572] ? trace_hardirqs_off+0xd/0x10 [ 1006.679788] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1006.684874] ? debug_check_no_obj_freed+0x2ff/0x584 [ 1006.689873] ? ext4_ioctl_group_add+0x560/0x560 [ 1006.694523] do_vfs_ioctl+0x1cf/0x16a0 [ 1006.698393] ? rcu_pm_notify+0xc0/0xc0 [ 1006.702264] ? ioctl_preallocate+0x2e0/0x2e0 [ 1006.706658] ? fget_raw+0x20/0x20 [ 1006.710102] ? putname+0xf2/0x130 [ 1006.713537] ? rcu_read_lock_sched_held+0x108/0x120 [ 1006.718535] ? kmem_cache_free+0x25c/0x2d0 [ 1006.722754] ? __x64_sys_futex+0x477/0x680 [ 1006.726972] ? do_futex+0x27d0/0x27d0 [ 1006.730758] ? security_file_ioctl+0x94/0xc0 [ 1006.735151] ksys_ioctl+0xa9/0xd0 [ 1006.738598] __x64_sys_ioctl+0x73/0xb0 [ 1006.742481] do_syscall_64+0x1b1/0x800 [ 1006.746350] ? finish_task_switch+0x1ca/0x840 [ 1006.750831] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1006.755743] ? syscall_return_slowpath+0x30f/0x5c0 [ 1006.760654] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1006.766014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1006.770850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.776025] RIP: 0033:0x455a09 [ 1006.779199] RSP: 002b:00007f03c5c73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.786893] RAX: ffffffffffffffda RBX: 00007f03c5c746d4 RCX: 0000000000455a09 [ 1006.794145] RDX: 0000000020000040 RSI: 000000008004587d RDI: 0000000000000013 [ 1006.801397] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.808648] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1006.815897] R13: 00000000000001e0 R14: 00000000006f6da0 R15: 0000000000000000 [ 1006.823644] Dumping ftrace buffer: [ 1006.827174] (ftrace buffer empty) [ 1006.830868] Kernel Offset: disabled [ 1006.834476] Rebooting in 86400 seconds..